$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa File: 15be2d45-d867-3d76-b5bf-f422f8eab30f.roa (raw, json) Hash identifier: ffagwuzLttNFfCNRs7l8Xra1ehczijA4I95FbLc4HxQ= Subject key identifier: 24:00:48:9C:F5:24:57:EA:91:CA:94:83:86:59:61:D2:B4:F2:57:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFF1E3080D8DB2EF62700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:32::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ff:1e:30:80:d8:db:2e:f6:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0d7b9fd0-5e5d-463e-a32d-d830eacb4edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:57:08:fd:56:8e:bf:15:05:65:d7:70:e5:89: ed:98:ea:1a:54:75:b8:ae:23:fd:43:a1:63:55:4a: 73:7d:ec:bd:a2:1e:a6:45:90:97:c9:9d:f8:77:ae: 46:5d:16:ab:aa:86:a9:a0:2f:7e:23:98:69:59:f2: 25:7b:c5:26:8a:27:4e:68:66:37:1f:8c:66:57:f8: e1:a2:ec:9f:0b:6b:90:bd:b6:f8:ed:11:0d:5e:0f: fa:ce:c8:7a:e2:eb:81:61:c1:bf:2a:95:b9:39:f7: 3c:5b:10:35:ed:96:d1:74:23:1c:d6:8c:12:cc:2d: e0:b2:a6:89:7c:d5:78:ed:e1:04:5c:9f:42:d6:6f: b6:b8:a3:db:a9:86:63:5d:55:91:31:6e:b7:d3:6f: 06:35:5b:ad:bf:02:f6:a1:d7:ed:be:c2:28:45:08: 4a:9f:87:49:54:39:5d:15:9c:da:c5:57:47:d6:c1: 84:9e:4f:26:36:77:e6:43:fe:a9:9b:69:4b:a0:82: 6a:08:c6:5a:5c:cb:98:a0:81:81:57:ae:18:83:e6: a9:4b:6d:e4:f9:b0:95:dd:3d:e3:83:a3:e6:e3:81: 52:39:49:2d:47:c0:f2:dd:d6:60:0d:4a:fb:7e:96: af:60:76:4c:b8:25:dc:ea:18:a4:e1:7e:82:79:1f: 05:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:48:9C:F5:24:57:EA:91:CA:94:83:86:59:61:D2:B4:F2:57:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:32::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:12:28:c8:5e:26:93:6b:e2:83:79:97:a5:36:d1:e4:53:71: 0a:32:45:d9:74:d7:ab:df:02:1f:9d:0f:b0:fb:45:d1:93:c2: b9:8a:d5:a3:1c:c5:28:99:e1:0e:2f:ae:07:36:20:a1:14:b0: 49:63:bc:4a:ae:44:bf:88:e5:39:7b:e1:99:f1:04:dd:f9:90: 83:ed:83:5e:45:cb:53:ff:db:6e:d7:35:7d:e9:b9:e6:63:b1: 34:c2:29:d3:fd:45:80:29:5a:17:18:18:e1:75:5d:2b:ec:69: a0:02:d6:73:f8:64:74:0c:fe:ab:d8:40:43:85:1f:e5:51:e7: e3:77:9d:1c:d4:ff:0c:bc:02:b8:0f:ba:6c:65:fb:60:1c:f6: 2a:c0:5e:15:06:ad:69:b4:0a:ad:e3:9f:75:09:b6:55:25:62: f0:41:28:a1:a0:5f:ff:7f:f8:67:66:a2:c7:d2:2d:75:f0:9c: f7:ad:c0:4d:6a:39:f2:9f:6d:1a:ba:4a:3f:51:e9:47:42:0d: bf:26:44:67:bd:01:d4:93:49:ab:69:5b:67:5e:69:d9:cf:22: f5:e9:1e:8e:07:9f:d5:de:ef:a0:31:00:f6:15:49:7a:c5:66: aa:89:d3:2d:4e:91:b4:11:78:39:a7:9a:4b:4c:77:30:e8:59: ab:e9:1f:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXP8eMIDY2y72JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGQ3YjlmZDAtNWU1ZC00NjNlLWEzMmQtZDgzMGVhY2I0ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VcI/VaOvxUFZddw5YntmOoaVHW4riP9Q6Fj VUpzfey9oh6mRZCXyZ34d65GXRarqoapoC9+I5hpWfIle8UmiidOaGY3H4xmV/jh ouyfC2uQvbb47RENXg/6zsh64uuBYcG/KpW5Ofc8WxA17ZbRdCMc1owSzC3gsqaJ fNV47eEEXJ9C1m+2uKPbqYZjXVWRMW63028GNVutvwL2odftvsIoRQhKn4dJVDld FZzaxVdH1sGEnk8mNnfmQ/6pm2lLoIJqCMZaXMuYoIGBV64Yg+apS23k+bCV3T3j g6Pm44FSOUktR8Dy3dZgDUr7fpavYHZMuCXc6hik4X6CeR8F/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQASJz1JFfqkcqUg4ZZYdK08lcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTViZTJkNDUtZDg2Ny0z ZDc2LWI1YmYtZjQyMmY4ZWFiMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF8SKMheJpNr4oN5l6U20eRTcQoyRdl016vfAh+dD7D7RdGTwrmK 1aMcxSiZ4Q4vrgc2IKEUsEljvEquRL+I5Tl74ZnxBN35kIPtg15Fy1P/227XNX3p ueZjsTTCKdP9RYApWhcYGOF1XSvsaaAC1nP4ZHQM/qvYQEOFH+VR5+N3nRzU/wy8 ArgPumxl+2Ac9irAXhUGrWm0Cq3jn3UJtlUlYvBBKKGgX/9/+GdmosfSLXXwnPet wE1qOfKfbRq6Sj9R6UdCDb8mRGe9AdSTSatpW2deadnPIvXpHo4Hn9Xe76AxAPYV SXrFZqqJ0y1OkbQReDmnmktMdzDoWavpHzo= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:44 2025 by rpki-client