$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa File: 1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa (raw, json) Hash identifier: JaFHU3tEczHplZKEHXucN+Zg3GW6Nm2V8uY7Me4P/ww= Subject key identifier: B0:45:AD:4C:7B:21:8F:68:64:AB:9C:5B:C8:58:35:29:37:71:BE:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFF3F4002B9FC451CD100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ff:3f:40:02:b9:fc:45:1c:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=88b7f56f-7ec4-4230-87cf-bac310d63a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9a:2c:a8:1b:73:38:c8:54:c6:32:75:55:5b: b8:25:fa:dc:2f:c7:58:72:f2:ca:62:73:11:4e:f1: 8b:27:24:ea:21:a1:0b:c5:9e:1b:16:7f:dc:6a:0c: 88:22:01:0a:1c:a0:b6:ce:49:78:e7:5e:4f:84:3a: 88:c2:11:4a:f5:1b:45:4a:32:18:ab:d3:8f:0c:e3: 42:9f:b8:22:17:63:a7:36:c2:6a:73:c7:06:b8:bc: 9d:a6:3d:5a:35:30:3a:99:69:15:a3:41:93:32:6e: 72:41:6b:e5:81:78:8b:fd:80:38:47:e2:c2:71:f8: 6c:8a:69:b4:28:e7:ba:a3:73:4a:b1:7e:e0:91:d9: 5d:2e:7c:e3:78:d4:6e:cf:a0:34:bc:7a:78:91:8a: 85:3e:0c:ea:f6:1a:6e:e7:58:88:41:1e:4c:e4:7f: 5a:55:00:6d:98:65:36:bb:9e:55:b7:33:bf:66:46: 64:38:2f:f1:39:78:d5:51:91:56:0d:a3:f6:b7:77: 75:05:43:a4:a3:72:72:02:3c:bf:ac:98:e5:e3:aa: c0:ed:90:b7:4b:0c:6f:ba:55:e9:5d:e0:3d:48:05: f4:68:88:10:ae:53:d9:6f:b0:67:e6:5b:3d:19:7f: bf:a6:87:03:b8:19:a9:57:69:db:84:98:fa:ce:d1: c8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:45:AD:4C:7B:21:8F:68:64:AB:9C:5B:C8:58:35:29:37:71:BE:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:35::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:30:8e:3e:b3:20:71:b1:3b:7a:02:20:ef:d4:52:5c:8c:fb: 23:6f:9f:0c:38:91:67:9c:c1:f2:46:1c:65:e0:17:f8:5b:5d: c3:c7:74:0e:d8:9d:dc:25:af:27:99:e4:3d:b8:8f:02:f4:6e: ce:27:5c:06:7c:ad:72:26:ab:96:ec:2d:0f:00:fb:ce:13:fa: 8d:14:ed:c0:7a:bd:ee:bc:bf:32:12:52:cb:dc:ec:72:6b:2a: 7d:a6:78:03:9e:b2:cb:b8:8e:ba:d3:00:3c:88:82:bd:c4:02: 71:97:8a:15:de:4d:4b:fb:6f:9c:f1:ca:55:2f:bb:ab:7b:b7: 5a:9c:ea:15:6a:a3:0a:6f:a9:4a:dc:bb:81:38:72:57:b8:ab: 9c:ba:34:67:df:a1:fa:f2:80:23:1c:2e:94:ce:e8:c4:0b:01: 20:44:79:e6:43:1d:b1:7e:40:40:11:bd:0d:f2:cf:05:c8:ef: b4:c9:1d:b6:d2:7d:74:5f:98:9a:ff:d8:4d:0e:5b:18:95:82: 7c:f9:1c:1a:41:a3:f3:80:b3:f5:9f:91:4c:17:b0:7a:7c:05: d3:73:36:37:00:19:7f:bc:52:16:ff:80:81:68:b1:84:89:87: 7c:04:98:10:c0:89:4c:bd:1e:52:85:c7:2f:35:73:b4:fb:51: 1d:21:19:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXP8/QAK5/EUc0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODhiN2Y1NmYtN2VjNC00MjMwLTg3Y2YtYmFjMzEwZDYzYTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZosqBtzOMhUxjJ1VVu4JfrcL8dYcvLKYnMR TvGLJyTqIaELxZ4bFn/cagyIIgEKHKC2zkl4515PhDqIwhFK9RtFSjIYq9OPDONC n7giF2OnNsJqc8cGuLydpj1aNTA6mWkVo0GTMm5yQWvlgXiL/YA4R+LCcfhsimm0 KOe6o3NKsX7gkdldLnzjeNRuz6A0vHp4kYqFPgzq9hpu51iIQR5M5H9aVQBtmGU2 u55VtzO/ZkZkOC/xOXjVUZFWDaP2t3d1BUOko3JyAjy/rJjl46rA7ZC3SwxvulXp XeA9SAX0aIgQrlPZb7Bn5ls9GX+/pocDuBmpV2nbhJj6ztHIcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLBFrUx7IY9oZKucW8hYNSk3cb4uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEzOGQ2NzUtNTNhYS0z Y2VkLThhNWUtY2E0ZGUxZTM5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHQwjj6zIHGxO3oCIO/UUlyM+yNvnww4kWecwfJGHGXgF/hbXcPH dA7YndwlryeZ5D24jwL0bs4nXAZ8rXImq5bsLQ8A+84T+o0U7cB6ve68vzISUsvc 7HJrKn2meAOessu4jrrTADyIgr3EAnGXihXeTUv7b5zxylUvu6t7t1qc6hVqowpv qUrcu4E4cle4q5y6NGffofrygCMcLpTO6MQLASBEeeZDHbF+QEARvQ3yzwXI77TJ HbbSfXRfmJr/2E0OWxiVgnz5HBpBo/OAs/WfkUwXsHp8BdNzNjcAGX+8Uhb/gIFo sYSJh3wEmBDAiUy9HlKFxy81c7T7UR0hGf4= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:37 2025 by rpki-client