$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa File: 2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa (raw, json) Hash identifier: we0FWPsbPjFAn0fbIJuBFi45HBGGensmJnH8XLdkva8= Subject key identifier: 35:2D:F1:40:5C:AB:1D:FC:46:72:BC:6E:0A:93:F4:93:AF:BD:37:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFE3CA49AD8DD1E4B1480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fe:3c:a4:9a:d8:dd:1e:4b:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=4211d441-c5c6-4b1c-bde0-a54999c10449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:8f:61:b8:7d:d1:16:2f:6c:da:b4:a1:c1: ce:6e:d1:92:61:b3:97:cc:aa:4b:a4:f5:93:db:cb: e2:17:a7:5f:06:59:90:36:79:10:ea:0d:88:c2:4f: b9:21:f9:f7:29:38:cb:79:4d:00:c8:fb:ce:c1:4b: 9d:3b:d7:d1:06:b8:ed:c6:7e:5a:7b:20:30:61:61: fc:81:24:50:b9:e0:fe:74:10:45:c0:c2:bc:8f:0a: 7f:cc:b1:2f:b5:a7:96:ce:a7:2f:a3:a1:9e:16:2a: a7:d4:c5:9e:54:52:11:3e:4f:0d:0d:6b:1a:57:dc: 0d:31:e7:7f:6a:99:93:80:92:f9:55:be:1c:16:39: 9d:28:48:9a:b0:ae:5b:72:9d:0e:2d:d2:f1:f0:32: cc:2e:5c:77:a1:6e:02:9a:b9:05:36:4b:ee:62:e0: a6:1e:f9:6f:01:08:6d:61:f2:aa:da:5c:35:83:b5: 47:08:ef:fa:9c:d9:2a:44:f9:bd:62:6f:09:b2:8d: 0c:17:e2:19:91:49:3d:f8:af:02:da:a1:ea:7f:35: 52:90:b1:62:8d:1b:c5:46:1b:4a:20:33:f5:18:3f: 21:93:eb:1a:0d:57:48:ab:22:99:46:30:36:d6:23: c2:0e:11:b5:57:5b:d0:33:d6:cc:1e:10:2f:c6:a5: 26:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2D:F1:40:5C:AB:1D:FC:46:72:BC:6E:0A:93:F4:93:AF:BD:37:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:28:1a:9c:59:21:12:6a:84:69:6d:dd:a1:28:8e:b9:9c:c6: a0:46:a1:ee:80:aa:ce:d1:fa:82:e6:7f:b5:31:5a:c7:a4:93: 7a:5f:19:53:19:d8:43:11:ef:61:28:90:0b:53:01:5e:35:46: 8f:f8:cf:8a:60:b8:a3:d5:26:38:66:52:6c:dd:6f:17:ec:37: 7b:7f:82:0a:6d:1d:74:4b:79:30:48:7b:6f:c1:cf:e4:cf:9b: dc:8b:5c:aa:95:ea:21:3a:e8:ae:6d:58:66:5c:45:4f:35:d2: 03:dc:ad:d5:06:91:6e:cd:e8:a0:72:2a:c3:e9:97:7c:f4:2f: 84:ff:27:ba:58:3c:80:81:34:c0:18:68:9f:11:91:10:16:58: c2:95:26:a2:d9:fc:a1:ca:3f:d0:e9:16:ac:06:b2:42:26:57: d0:bb:5d:64:d2:c6:0a:e2:21:ed:05:97:9c:6f:7d:2f:29:02: ee:c2:12:4f:a5:e3:aa:c4:4f:af:a9:80:61:ce:98:35:bf:30: 63:6c:be:c5:21:ac:57:f6:b8:be:25:5c:e1:55:15:74:21:e6: be:56:ca:8b:3d:d3:94:a5:db:e6:28:05:71:48:84:a6:15:cb: 56:24:0e:d2:e0:ae:90:aa:a7:20:46:37:41:54:37:1e:45:29: 0a:4b:43:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXP48pJrY3R5LFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NDIxMWQ0NDEtYzVjNi00YjFjLWJkZTAtYTU0OTk5YzEwNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSePYbh90RYvbNq0ocHObtGSYbOXzKpLpPWT 28viF6dfBlmQNnkQ6g2Iwk+5Ifn3KTjLeU0AyPvOwUudO9fRBrjtxn5aeyAwYWH8 gSRQueD+dBBFwMK8jwp/zLEvtaeWzqcvo6GeFiqn1MWeVFIRPk8NDWsaV9wNMed/ apmTgJL5Vb4cFjmdKEiasK5bcp0OLdLx8DLMLlx3oW4CmrkFNkvuYuCmHvlvAQht YfKq2lw1g7VHCO/6nNkqRPm9Ym8Jso0MF+IZkUk9+K8C2qHqfzVSkLFijRvFRhtK IDP1GD8hk+saDVdIqyKZRjA21iPCDhG1V1vQM9bMHhAvxqUm3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDUt8UBcqx38RnK8bgqT9JOvvTdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmJmMGM0YzYtYjgwYy0z YzQwLWI4YzgtMmE0ZDBlZjljM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGooGpxZIRJqhGlt3aEojrmcxqBGoe6Aqs7R+oLmf7UxWsekk3pf GVMZ2EMR72EokAtTAV41Ro/4z4pguKPVJjhmUmzdbxfsN3t/ggptHXRLeTBIe2/B z+TPm9yLXKqV6iE66K5tWGZcRU810gPcrdUGkW7N6KByKsPpl3z0L4T/J7pYPICB NMAYaJ8RkRAWWMKVJqLZ/KHKP9DpFqwGskImV9C7XWTSxgriIe0Fl5xvfS8pAu7C Ek+l46rET6+pgGHOmDW/MGNsvsUhrFf2uL4lXOFVFXQh5r5Wyos905Sl2+YoBXFI hKYVy1YkDtLgrpCqpyBGN0FUNx5FKQpLQ3c= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:03 2025 by rpki-client