$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cad5d43-69f5-315b-bb25-ea88239524b0.roa File: 1cad5d43-69f5-315b-bb25-ea88239524b0.roa (raw, json) Hash identifier: SD0PGR3oSJY69CPpM4AyI1yvuXLLcT7aMcGOe/J0zYE= Subject key identifier: 79:DF:EC:B6:9B:A0:C3:B5:8F:DD:25:71:78:55:AE:51:54:BC:4B:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCE5D5D6CCD1AD7496CA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cad5d43-69f5-315b-bb25-ea88239524b0.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:1900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ce:5d:5d:6c:cd:1a:d7:49:6c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=83f307cb-c74a-4463-96db-9ba2407449fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:86:3d:66:47:94:e6:83:25:50:4c:6e:0f: 77:df:6c:25:d5:3b:83:97:06:05:80:8e:7f:b7:cc: 70:6c:95:d7:4a:67:ae:2d:3b:98:bf:a1:48:a5:8a: 3b:20:7f:83:fc:87:87:06:6d:d7:ef:61:88:2a:5e: 41:66:98:e1:ad:e7:a2:95:bb:58:de:a9:71:1f:bb: 21:2e:a5:69:50:0d:20:07:95:76:9b:d7:74:4c:9e: 6e:25:d0:63:6e:c4:0d:04:6c:84:5d:79:b3:20:a5: 4d:1e:82:4a:4b:27:3b:44:96:ad:0f:21:a4:cc:b1: e5:88:c6:cf:dc:4a:ba:70:66:25:5c:e2:76:cb:c8: c3:17:4b:a9:10:2e:ee:e8:24:e7:23:51:a2:9e:5d: 6f:d4:5f:b4:2b:18:6b:91:fc:f5:e0:4c:58:f2:1d: 09:3a:e2:46:99:8a:50:1b:11:4c:19:1c:7a:3d:87: 8f:77:6b:dd:97:3e:6a:ca:39:9f:e7:a0:2d:d9:b2: b2:ed:5e:31:4c:38:ee:2c:ac:e9:b3:0c:6e:27:02: 43:b3:95:4f:f2:e8:92:e6:df:30:41:80:77:e5:e7: 82:05:d5:99:30:08:ca:9d:b2:3b:bd:97:be:bb:db: 8c:7a:18:97:6e:32:0a:30:6f:2b:59:f4:b4:8a:08: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:EC:B6:9B:A0:C3:B5:8F:DD:25:71:78:55:AE:51:54:BC:4B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cad5d43-69f5-315b-bb25-ea88239524b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:61:3b:90:bb:48:7a:c0:b3:f1:cd:f5:36:92:ff:5f:37:df: 4e:92:eb:35:42:a4:04:b9:e7:bf:23:99:cc:a6:0e:fe:34:1f: 3f:5c:b8:bf:6c:f9:fa:d4:4f:9b:bf:2e:e8:4e:b2:0f:77:ce: 83:a0:cc:86:af:d3:94:90:ac:73:98:f8:75:1e:ca:cf:c5:c1: 64:17:bd:c4:d2:ba:3d:29:31:38:c1:d0:80:e2:cb:0b:fb:f3: 69:32:c8:a5:fb:d3:97:91:5d:49:98:d0:3b:69:ab:fa:63:76: 01:92:df:77:0c:89:bc:a7:cd:73:7b:0e:11:79:f8:d3:d8:b6: 05:2c:3c:93:99:81:d4:0c:4f:38:83:d5:85:28:22:99:f1:9c: 22:e6:88:c4:5a:b4:ee:0f:49:e8:fc:0f:5c:de:ce:ce:d0:93: 7a:ef:61:96:17:47:4a:32:f3:63:ec:c8:b2:f0:25:f3:eb:3c: 45:f6:f7:62:c6:dd:1e:70:e2:47:99:e2:8f:3e:70:9f:84:ed: 24:8a:be:76:95:2a:16:1d:db:d9:59:72:77:fa:72:19:b8:0d: f4:7c:c4:20:11:dc:ec:f1:c0:30:7b:ca:0d:35:9c:5c:c1:e9: 79:bf:af:c0:c4:48:ff:43:54:f7:0a:5e:91:2c:15:47:1d:70: e1:ae:ed:0f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM5dXWzNGtdJbKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODNmMzA3Y2ItYzc0YS00NDYzLTk2ZGItOWJhMjQwNzQ0OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzaGPWZHlOaDJVBMbg9332wl1TuDlwYFgI5/ t8xwbJXXSmeuLTuYv6FIpYo7IH+D/IeHBm3X72GIKl5BZpjhreeilbtY3qlxH7sh LqVpUA0gB5V2m9d0TJ5uJdBjbsQNBGyEXXmzIKVNHoJKSyc7RJatDyGkzLHliMbP 3Eq6cGYlXOJ2y8jDF0upEC7u6CTnI1Ginl1v1F+0Kxhrkfz14ExY8h0JOuJGmYpQ GxFMGRx6PYePd2vdlz5qyjmf56At2bKy7V4xTDjuLKzpswxuJwJDs5VP8uiS5t8w QYB35eeCBdWZMAjKnbI7vZe+u9uMehiXbjIKMG8rWfS0ighirQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHnf7LaboMO1j90lcXhVrlFUvEsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWNhZDVkNDMtNjlmNS0z MTViLWJiMjUtZWE4ODIzOTUyNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAa2E7kLtIesCz8c31NpL/XzffTpLrNUKkBLnnvyOZzKYO/jQfP1y4 v2z5+tRPm78u6E6yD3fOg6DMhq/TlJCsc5j4dR7Kz8XBZBe9xNK6PSkxOMHQgOLL C/vzaTLIpfvTl5FdSZjQO2mr+mN2AZLfdwyJvKfNc3sOEXn409i2BSw8k5mB1AxP OIPVhSgimfGcIuaIxFq07g9J6PwPXN7OztCTeu9hlhdHSjLzY+zIsvAl8+s8Rfb3 YsbdHnDiR5nijz5wn4TtJIq+dpUqFh3b2Vlyd/pyGbgN9HzEIBHc7PHAMHvKDTWc XMHpeb+vwMRI/0NU9wpekSwVRx1w4a7tDw== -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:35 2025 by rpki-client