$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08cd69f8-da2d-34c9-8e88-13abf0201107.roa File: 08cd69f8-da2d-34c9-8e88-13abf0201107.roa (raw, json) Hash identifier: gcOKJkLkEs4VUWGwHoT13vKTs82jISeWwIC+v5d7OGU= Subject key identifier: 5D:83:82:5E:17:33:12:A5:57:87:45:C4:F8:A6:D0:CB:9C:BE:02:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCC172C38C7FDED6BD800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08cd69f8-da2d-34c9-8e88-13abf0201107.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cc:17:2c:38:c7:fd:ed:6b:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0e4122cd-5d27-4290-a673-d0e724ecc3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:7f:df:c0:50:fc:ac:49:69:78:c8:1e:9a: 83:05:3a:a1:5b:75:19:63:f4:8b:f5:68:30:6d:8e: 22:c6:55:cd:b8:1b:0a:6a:67:23:3f:4e:41:b1:d0: 60:65:aa:90:5f:17:07:d3:55:9a:b7:b1:f0:78:28: 4a:72:9d:50:82:09:14:c8:e4:54:15:4d:32:52:83: 03:18:21:7c:f2:a0:e1:e1:30:b3:8f:3f:46:06:63: e3:38:c4:e8:23:76:28:9f:67:e1:95:22:78:66:89: 53:6f:87:9c:18:3b:be:09:1a:66:de:35:d2:5f:5b: ae:a8:c8:4c:1e:72:55:6d:97:88:2a:05:69:da:f9: 4f:b9:af:21:48:be:e4:04:5e:dc:47:d7:16:d6:25: 0d:12:37:cf:05:6f:77:f6:c7:d0:3e:a3:c8:7e:71: bc:22:ac:b8:28:59:50:0e:0a:8f:4b:fd:ea:04:28: 1e:aa:87:37:7c:45:01:72:83:3f:b0:e2:af:a9:85: f8:1f:6e:13:37:d5:d5:28:bc:b6:9b:cb:82:31:cb: 2e:97:c5:3d:fc:46:b6:22:44:e2:94:aa:64:f2:aa: f2:87:2b:2c:ba:a2:53:ea:da:30:d4:2c:e4:7a:73: 8b:6f:33:1b:f8:41:3e:ae:87:3c:6e:dc:4e:f6:62: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:83:82:5E:17:33:12:A5:57:87:45:C4:F8:A6:D0:CB:9C:BE:02:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08cd69f8-da2d-34c9-8e88-13abf0201107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3e:57:f1:17:e1:7a:93:11:20:9a:95:a4:31:0c:51:a5:77: 38:4c:f7:6e:07:06:b6:3d:7f:36:bc:49:6e:c3:bf:48:29:8f: 06:57:4e:a4:32:b1:bd:ee:45:c4:67:17:50:cb:bf:a3:ba:29: e3:f7:81:5e:cb:ef:54:58:48:a2:eb:ae:00:71:7b:d9:55:18: dc:cf:9d:de:e1:16:b3:6b:1a:07:06:da:f2:71:58:65:9d:ea: 96:d7:22:1d:af:d1:a1:d0:aa:d5:c0:37:53:f4:d7:2c:48:42: e9:97:e4:e4:31:70:42:2f:58:fc:6c:51:48:7a:79:8c:ac:a3: 97:f1:f4:63:b4:77:8c:bf:b0:20:03:e0:33:72:d1:76:e4:4e: 6d:5c:02:cf:5c:f6:dc:dc:7b:93:61:54:a6:c4:60:8e:57:21: ba:07:db:6e:0b:98:8c:2a:a7:15:86:eb:6a:53:41:f2:4d:9b: fe:a9:ce:07:b3:b9:b3:f1:4c:7b:aa:14:49:f9:a8:c4:ee:12: 82:88:ad:57:12:d9:41:f5:43:e5:3c:df:06:d9:f5:27:e6:d6: f2:a3:68:57:2c:d1:50:71:3b:92:d7:30:aa:36:c8:d9:d1:7d: be:44:1d:89:aa:8e:74:12:88:fb:4c:7e:f9:90:e2:1a:52:ee: ea:f6:03:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXMwXLDjH/e1r2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGU0MTIyY2QtNWQyNy00MjkwLWE2NzMtZDBlNzI0ZWNjM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PV/38BQ/KxJaXjIHpqDBTqhW3UZY/SL9Wgw bY4ixlXNuBsKamcjP05BsdBgZaqQXxcH01Wat7HweChKcp1QggkUyORUFU0yUoMD GCF88qDh4TCzjz9GBmPjOMToI3Yon2fhlSJ4ZolTb4ecGDu+CRpm3jXSX1uuqMhM HnJVbZeIKgVp2vlPua8hSL7kBF7cR9cW1iUNEjfPBW939sfQPqPIfnG8Iqy4KFlQ DgqPS/3qBCgeqoc3fEUBcoM/sOKvqYX4H24TN9XVKLy2m8uCMcsul8U9/Ea2IkTi lKpk8qryhyssuqJT6tow1CzkenOLbzMb+EE+roc8btxO9mLCJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF2Dgl4XMxKlV4dFxPim0MucvgL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhjZDY5ZjgtZGEyZC0z NGM5LThlODgtMTNhYmYwMjAxMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEo+V/EX4XqTESCalaQxDFGldzhM924HBrY9fza8SW7Dv0gpjwZX TqQysb3uRcRnF1DLv6O6KeP3gV7L71RYSKLrrgBxe9lVGNzPnd7hFrNrGgcG2vJx WGWd6pbXIh2v0aHQqtXAN1P01yxIQumX5OQxcEIvWPxsUUh6eYyso5fx9GO0d4y/ sCAD4DNy0XbkTm1cAs9c9tzce5NhVKbEYI5XIboH224LmIwqpxWG62pTQfJNm/6p zgezubPxTHuqFEn5qMTuEoKIrVcS2UH1Q+U83wbZ9Sfm1vKjaFcs0VBxO5LXMKo2 yNnRfb5EHYmqjnQSiPtMfvmQ4hpS7ur2A6c= -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:13 2025 by rpki-client