$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117a675a-437d-3d26-bd21-20643d61ed4f.roa File: 117a675a-437d-3d26-bd21-20643d61ed4f.roa (raw, json) Hash identifier: mhPGiGr9O3VoHt2gXjVToGw1ddzvwoWX078mdTV0xCo= Subject key identifier: 7F:06:7F:9C:69:6C:3A:78:4A:CA:49:49:DB:81:8B:A6:D3:C1:8F:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCDF29441A1BF79AD4780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117a675a-437d-3d26-bd21-20643d61ed4f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cd:f2:94:41:a1:bf:79:ad:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=14120318-7b31-48ad-a4a8-11477f89699e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b0:4a:67:c0:44:91:45:7e:2f:86:9a:61:61: 47:82:e1:de:c0:4d:55:b2:77:df:34:7c:2b:de:71: 49:ab:0b:c0:d0:1b:b0:35:01:4c:c3:b6:e0:31:e1: d8:2c:ca:f0:dc:9d:76:6b:f4:f9:15:5f:c9:c6:26: c5:c3:83:d9:1e:52:38:55:2a:28:75:7f:90:ec:a8: dd:e4:42:16:ec:26:5b:b7:cc:89:84:f8:20:bf:e9: 83:27:67:de:28:79:59:df:dc:f8:96:88:33:76:be: 5e:c6:0f:43:55:87:d7:f4:44:02:fa:3f:06:2b:27: 2e:fa:7c:22:8c:0b:87:ce:58:c5:a6:ff:47:17:13: 26:e2:90:55:60:5e:87:cd:26:93:02:88:e2:77:5b: 42:6c:f6:f2:ad:6a:2e:87:4a:d7:86:e9:59:a0:f0: 16:23:19:57:07:8e:c4:3d:2f:9b:79:3c:5e:47:59: be:9b:47:e9:8a:58:6b:5c:16:68:74:a6:f9:66:1e: 44:59:9d:53:56:9c:5d:5c:7b:69:a8:cb:8e:5b:2f: 7b:d5:99:bb:59:83:0c:ec:94:bb:8a:b7:89:a4:38: ae:2f:e4:52:a4:18:80:0a:ca:03:96:c1:db:17:7b: 56:1b:1f:67:f1:b4:35:80:dd:8e:c5:a7:20:2c:41: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:06:7F:9C:69:6C:3A:78:4A:CA:49:49:DB:81:8B:A6:D3:C1:8F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117a675a-437d-3d26-bd21-20643d61ed4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b5:19:cc:b1:e1:f0:bc:dc:1e:29:c1:f7:27:84:8c:af:81: 0e:75:85:ad:db:fe:02:4f:0b:27:bf:8c:c1:e8:93:c0:21:b4: ce:cd:75:1d:d3:24:ed:ee:a7:d4:aa:88:95:17:20:ec:ec:4e: 55:a2:fd:1f:27:0d:d2:cf:0f:ed:69:70:ff:ca:db:81:83:17: 8e:21:af:bc:be:4a:a3:bd:be:c1:de:f6:68:16:a6:8b:8f:73: f6:ff:b7:44:08:11:79:ed:87:7a:bf:f8:1f:51:17:94:72:be: cd:95:42:e8:03:e8:59:9b:11:82:43:36:66:1e:de:b4:5d:bb: 4b:62:58:f2:da:ee:ec:ab:27:11:20:82:1e:a7:75:d0:1a:75: 0c:2e:3c:9d:b6:13:15:2e:3f:63:08:f2:b7:9d:ed:94:bb:a3: 56:45:9f:7e:7f:a7:9c:99:1a:9d:4f:e8:ee:23:e7:b8:2d:1a: b6:6f:c6:a0:92:14:e3:f9:95:05:cb:de:fd:4b:a1:e8:b3:aa: f5:5c:c8:95:f3:62:ea:c2:4f:ac:47:41:df:25:42:3f:fc:f4: 50:24:d2:73:8d:2d:11:38:41:11:83:26:36:0e:35:84:81:ac: 71:0b:2b:01:4a:c8:34:16:e3:9b:b1:a0:83:d6:9e:90:d6:ca: 6d:3c:04:4f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM3ylEGhv3mtR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTQxMjAzMTgtN2IzMS00OGFkLWE0YTgtMTE0NzdmODk2OTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrBKZ8BEkUV+L4aaYWFHguHewE1VsnffNHwr 3nFJqwvA0BuwNQFMw7bgMeHYLMrw3J12a/T5FV/JxibFw4PZHlI4VSoodX+Q7Kjd 5EIW7CZbt8yJhPggv+mDJ2feKHlZ39z4logzdr5exg9DVYfX9EQC+j8GKycu+nwi jAuHzljFpv9HFxMm4pBVYF6HzSaTAojid1tCbPbyrWouh0rXhulZoPAWIxlXB47E PS+beTxeR1m+m0fpilhrXBZodKb5Zh5EWZ1TVpxdXHtpqMuOWy971Zm7WYMM7JS7 ireJpDiuL+RSpBiACsoDlsHbF3tWGx9n8bQ1gN2OxacgLEEk8QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH8Gf5xpbDp4SspJSduBi6bTwY8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTE3YTY3NWEtNDM3ZC0z ZDI2LWJkMjEtMjA2NDNkNjFlZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd7UZzLHh8LzcHinB9yeEjK+BDnWFrdv+Ak8LJ7+MweiTwCG0zs11 HdMk7e6n1KqIlRcg7OxOVaL9HycN0s8P7Wlw/8rbgYMXjiGvvL5Ko72+wd72aBam i49z9v+3RAgRee2Her/4H1EXlHK+zZVC6APoWZsRgkM2Zh7etF27S2JY8tru7Ksn ESCCHqd10Bp1DC48nbYTFS4/Ywjyt53tlLujVkWffn+nnJkanU/o7iPnuC0atm/G oJIU4/mVBcve/Uuh6LOq9VzIlfNi6sJPrEdB3yVCP/z0UCTSc40tEThBEYMmNg41 hIGscQsrAUrINBbjm7Ggg9aekNbKbTwETw== -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:13 2025 by rpki-client