$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa File: f9f48e7f-17f5-303e-8734-cee27411d59a.roa (raw, json) Hash identifier: scNysUER5RxSVsou2zxFJCIADKtW+aRtRh4k21gqIyk= Subject key identifier: 2D:F5:0E:48:EB:0E:43:3E:0F:81:07:0E:2F:95:FF:16:DD:30:F5:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AD7D12BAF16C49328E380DA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 2604:cb00:4200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:2b:af:16:c4:93:28:e3:80:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=83364cfc-71a6-4f1e-a5d7-02db690fd8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:3d:11:c1:a6:3d:0e:f4:33:e0:5d:86:62: d3:82:d7:3d:9e:77:79:a3:ab:01:50:ec:8d:a6:d1: 95:6c:7a:51:0a:7c:af:62:b4:1f:24:e2:ed:8b:5e: 21:f8:35:a5:12:a5:59:92:4e:50:cb:33:2d:86:c2: c5:d4:3d:37:1d:f5:1b:00:10:b2:3a:5a:b8:0d:ae: 57:5d:8d:22:bf:eb:72:0f:65:24:74:dd:de:11:6d: 4a:2e:51:e1:9b:e1:77:ae:34:cd:e5:f8:f6:8f:52: 1d:35:18:ed:c1:52:1c:8d:90:8e:3d:be:7f:54:97: 0c:e7:60:6b:a9:71:5e:09:81:23:09:f3:77:73:d6: 6d:b6:65:c9:3f:e2:35:80:fd:d5:81:36:57:20:87: 5e:eb:7f:15:22:0e:25:da:e6:7e:05:04:46:7d:9a: 7e:e1:3b:f9:6c:4b:64:98:be:a6:f6:0a:f6:b6:b2: 09:4a:a9:f3:ab:34:7c:02:e4:51:4a:92:94:cf:b0: 1f:fa:57:f7:d7:fc:b3:4f:a8:e4:be:6e:6e:ca:4a: f4:67:a2:8e:67:11:17:6a:b8:b2:28:74:62:8c:e9: c0:d8:e6:de:e4:f7:8c:35:82:59:2d:1f:d5:df:53: 66:f9:39:06:4e:b3:58:c9:3c:e1:2e:1d:c9:ae:07: fd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F5:0E:48:EB:0E:43:3E:0F:81:07:0E:2F:95:FF:16:DD:30:F5:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:4200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:57:73:8d:82:15:4d:f1:0d:e9:91:3f:01:a1:e1:34:af:43: 5a:b5:49:8a:13:2a:81:06:16:81:28:13:85:b0:3b:e2:66:af: ad:a5:28:9c:b8:3b:be:89:81:e0:22:76:d1:bd:4a:cf:d1:26: a3:9a:f4:ed:93:e2:e7:92:35:0e:35:81:1b:7d:ca:3b:24:b7: cb:17:46:7e:7e:66:8e:25:70:68:a4:5e:f1:6a:71:32:11:10: 10:f3:d3:31:c8:cc:f0:ac:80:a3:97:c1:6d:09:68:5e:69:39: 10:d9:79:d7:68:42:ec:39:ba:f1:1d:67:7c:88:b3:de:82:ab: fb:db:5f:d7:5d:3f:4e:ca:a2:df:8d:94:40:8b:e8:a5:2d:c3: 4e:67:1c:c4:7e:8d:30:7d:3c:02:a0:50:d3:51:d2:df:a5:b1: 57:49:7a:0b:bb:b8:29:87:33:c4:4e:e4:12:17:7d:b3:96:3b: cd:26:69:e3:a6:22:5f:e5:99:1b:7b:58:aa:7b:b4:1a:08:0d: e0:e3:e2:26:b6:a3:24:6e:65:9e:ae:c6:2a:d8:2d:ce:8d:29: fb:46:05:71:64:4c:0f:f9:a4:f0:c7:b9:cc:8d:27:88:57:94: d6:31:f8:9a:32:91:f3:3c:c3:56:aa:e3:72:7a:58:a7:d7:15: da:55:24:8a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErX0SuvFsSTKOOA2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ODMzNjRjZmMtNzFhNi00ZjFlLWE1ZDctMDJkYjY5MGZkOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHM9EcGmPQ70M+BdhmLTgtc9nnd5o6sBUOyN ptGVbHpRCnyvYrQfJOLti14h+DWlEqVZkk5QyzMthsLF1D03HfUbABCyOlq4Da5X XY0iv+tyD2UkdN3eEW1KLlHhm+F3rjTN5fj2j1IdNRjtwVIcjZCOPb5/VJcM52Br qXFeCYEjCfN3c9ZttmXJP+I1gP3VgTZXIIde638VIg4l2uZ+BQRGfZp+4Tv5bEtk mL6m9gr2trIJSqnzqzR8AuRRSpKUz7Af+lf31/yzT6jkvm5uykr0Z6KOZxEXariy KHRijOnA2Obe5PeMNYJZLR/V31Nm+TkGTrNYyTzhLh3Jrgf9oQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC31DkjrDkM+D4EHDi+V/xbdMPWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjlmNDhlN2YtMTdmNS0z MDNlLTg3MzQtY2VlMjc0MTFkNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAEIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANldzjYIVTfEN6ZE/AaHhNK9DWrVJihMqgQYWgSgThbA74mavraUo nLg7vomB4CJ20b1Kz9Emo5r07ZPi55I1DjWBG33KOyS3yxdGfn5mjiVwaKRe8Wpx MhEQEPPTMcjM8KyAo5fBbQloXmk5ENl512hC7Dm68R1nfIiz3oKr+9tf110/Tsqi 342UQIvopS3DTmccxH6NMH08AqBQ01HS36WxV0l6C7u4KYczxE7kEhd9s5Y7zSZp 46YiX+WZG3tYqnu0GggN4OPiJrajJG5lnq7GKtgtzo0p+0YFcWRMD/mk8Me5zI0n iFeU1jH4mjKR8zzDVqrjcnpYp9cV2lUkig== -----END CERTIFICATE-----Generated at Sat Aug 23 15:46:45 2025 by rpki-client