$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa File: 1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa (raw, json) Hash identifier: e+YABzAsfVp1x7qFnk43Z0doOKS0UDfAIbdux1uEw4c= Subject key identifier: 67:2A:4D:DB:8B:0B:79:53:AF:7E:E9:BD:10:8B:EF:8E:8E:1E:D6:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D00673EF31F7366B6EE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:2200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:00:67:3e:f3:1f:73:66:b6:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=4abe42ee-d5c5-4697-954f-2491f697bc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:3d:98:56:88:ee:15:60:1a:09:a4:4a:7a: 51:04:dc:a1:30:be:85:3d:5d:5f:18:db:ee:7b:8e: 4e:5f:0b:cc:e0:06:a8:31:59:2d:43:fa:91:b0:ce: ac:6b:ce:47:d1:cf:b8:de:2c:a4:6b:ce:0c:b6:b7: 4f:26:2e:04:bb:8b:ae:c0:6b:86:65:bb:22:38:67: 4b:3f:aa:b6:71:c1:3b:54:72:29:42:ef:4c:12:d6: d2:28:ea:45:01:99:bd:58:ba:91:2b:0a:4b:6a:d0: 31:3b:39:4f:57:71:5d:76:ea:e9:12:f0:c1:ee:97: fd:42:a1:50:1c:45:81:c3:60:6f:42:5c:a0:0a:95: ee:4e:b2:4c:ec:45:48:f2:d7:e9:d7:7f:94:a6:06: 8e:b7:84:fd:f1:c5:ed:f8:d3:42:2b:29:57:18:e6: 01:5b:44:a2:5a:4a:6e:1d:d1:d6:f5:e1:fb:b5:6b: 8f:4e:ee:3d:89:ed:75:81:fa:1e:13:d5:3c:61:5c: 5a:33:2a:65:8d:5c:eb:f4:dd:5e:9f:44:6c:b7:0b: 5f:37:91:0c:17:0e:38:7b:6a:da:0b:8e:ee:47:45: 86:db:45:ea:e6:eb:81:9e:f7:45:e0:85:a3:8e:34: 9b:85:b5:a1:71:b1:ad:98:dc:03:8d:0a:4e:54:c2: 03:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:4D:DB:8B:0B:79:53:AF:7E:E9:BD:10:8B:EF:8E:8E:1E:D6:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:25:60:d9:9f:fb:76:26:24:94:dd:dd:58:97:cd:3c:78:93: ea:7d:62:07:8a:59:e4:57:de:e5:b7:af:5d:71:c6:20:86:d4: fc:da:0c:fd:f1:7d:cd:16:08:23:06:d9:ea:1f:05:dc:62:e0: 01:73:c5:11:5e:af:ef:7f:d9:09:f8:bb:df:8d:fa:c4:bf:96: e8:71:c9:73:60:29:db:40:71:ea:bc:72:aa:09:b0:92:d0:96: 98:57:00:b4:13:13:62:93:27:34:ee:08:d5:68:2b:fa:48:9e: cf:56:f0:2f:a4:89:11:91:3b:5f:d9:05:8e:ad:94:02:55:5d: 7b:64:0f:75:cd:fe:b8:2c:9e:27:79:f0:b6:48:99:3e:c8:ef: 03:d1:b4:0e:23:6e:85:81:66:ee:95:7a:ed:d0:ac:a6:b9:4e: d8:37:25:8d:77:05:de:25:85:32:84:ee:68:f4:1c:cf:77:4c: 5d:6d:3b:05:74:39:16:58:4d:6e:87:a3:af:de:2f:d1:9e:1d: 6a:9f:46:a1:27:43:da:b8:0e:7b:ea:e2:b8:8e:ee:2b:da:50: 29:23:75:9f:9a:93:14:10:86:73:b9:57:dc:5d:80:87:fb:8f: 76:b3:76:2f:cf:9e:52:ef:71:62:a0:e2:39:ac:02:65:36:73: b3:4d:3c:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXQBnPvMfc2a27oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NGFiZTQyZWUtZDVjNS00Njk3LTk1NGYtMjQ5MWY2OTdiYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJQ9mFaI7hVgGgmkSnpRBNyhML6FPV1fGNvu e45OXwvM4AaoMVktQ/qRsM6sa85H0c+43iyka84MtrdPJi4Eu4uuwGuGZbsiOGdL P6q2ccE7VHIpQu9MEtbSKOpFAZm9WLqRKwpLatAxOzlPV3FddurpEvDB7pf9QqFQ HEWBw2BvQlygCpXuTrJM7EVI8tfp13+UpgaOt4T98cXt+NNCKylXGOYBW0SiWkpu HdHW9eH7tWuPTu49ie11gfoeE9U8YVxaMypljVzr9N1en0RstwtfN5EMFw44e2ra C47uR0WG20Xq5uuBnvdF4IWjjjSbhbWhcbGtmNwDjQpOVMIDGwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGcqTduLC3lTr37pvRCL746OHtbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjZGNiMTgtOWRiNC0z OTM5LWJjMzMtZmMzMzdkODBiZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHiVg2Z/7diYklN3dWJfNPHiT6n1iB4pZ5Ffe5bevXXHGIIbU/NoM /fF9zRYIIwbZ6h8F3GLgAXPFEV6v73/ZCfi73436xL+W6HHJc2Ap20Bx6rxyqgmw ktCWmFcAtBMTYpMnNO4I1Wgr+kiez1bwL6SJEZE7X9kFjq2UAlVde2QPdc3+uCye J3nwtkiZPsjvA9G0DiNuhYFm7pV67dCsprlO2DcljXcF3iWFMoTuaPQcz3dMXW07 BXQ5FlhNboejr94v0Z4dap9GoSdD2rgOe+riuI7uK9pQKSN1n5qTFBCGc7lX3F2A h/uPdrN2L8+eUu9xYqDiOawCZTZzs008/Q== -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:41 2025 by rpki-client