$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37b96e1c-0727-31a1-a8d7-074ffa472f99.roa File: 37b96e1c-0727-31a1-a8d7-074ffa472f99.roa (raw, json) Hash identifier: kDp0gwgNs4t7ZbtqICrjYiJMhXoM6L32p8Rk3YN8dxU= Subject key identifier: 47:8D:5F:18:5B:4B:4A:DD:84:FB:4E:3D:EA:33:06:7C:60:7A:DA:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCF86756030875621D800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37b96e1c-0727-31a1-a8d7-074ffa472f99.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:4100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cf:86:75:60:30:87:56:21:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=dfe6ab78-08ad-4b34-88ba-8df484bd12aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:72:2d:ac:70:98:de:f4:bf:8d:01:e0:ed: 17:69:f3:3f:12:69:da:87:0c:35:b8:66:39:c9:18: 09:c7:ee:88:3f:3e:ef:13:ef:a6:1c:39:17:5f:7f: 02:2e:19:03:67:85:ca:f3:0a:a8:ad:c4:69:6a:c0: 35:44:ab:dd:15:5a:c7:2a:02:8a:83:21:4c:83:6f: 5f:26:10:67:80:fa:af:bd:43:78:4e:1f:de:1f:c5: e6:cf:22:f6:c8:1b:28:56:f8:1b:7e:fe:4a:7c:f1: 35:bf:9d:ff:6b:7f:0e:38:21:e8:98:f9:2f:3e:e0: 1b:80:c2:3a:70:23:d9:21:28:40:85:f3:b8:61:ea: ca:b7:b9:6d:c3:13:03:06:19:49:be:de:ae:df:8f: bb:34:c7:68:13:a3:35:81:9d:01:9d:12:58:40:f2: db:61:86:45:76:15:19:fc:a0:f9:96:ce:27:28:4a: 12:40:db:a6:76:34:d8:a6:9a:61:49:47:cd:e9:33: 02:7a:60:e4:fc:78:14:ef:30:72:dd:74:2b:6b:25: 60:b6:5c:7e:2c:1d:3f:fa:5e:79:17:ea:e9:98:a9: 14:70:4a:67:c2:8a:ea:00:55:f6:19:74:27:ee:24: 36:b2:15:a1:5d:f0:ae:75:bd:15:0e:ff:2e:61:07: 18:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8D:5F:18:5B:4B:4A:DD:84:FB:4E:3D:EA:33:06:7C:60:7A:DA:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37b96e1c-0727-31a1-a8d7-074ffa472f99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:4100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e3:4f:f5:b3:01:ee:fa:ee:40:26:d8:6e:0c:ed:5f:b2:97: c9:77:44:f8:e1:73:c4:c5:f2:a7:05:06:6c:75:65:09:d5:79: e5:9d:c1:fb:10:64:66:b8:a2:95:e2:f6:7b:e2:67:e3:e9:89: 59:2d:5c:b0:dc:7a:4e:d7:2a:ce:4e:7a:79:13:db:e4:64:49: 3a:69:b0:d4:cd:8a:39:bf:08:a6:12:a4:72:2f:5e:ac:a8:ec: 1d:ef:5a:c2:32:bb:d8:da:10:a1:2c:e5:c5:fb:20:58:bf:c9: dd:12:53:9f:35:85:a3:62:74:1e:10:56:ea:0b:40:eb:8d:1c: 88:8c:27:f7:ba:52:6a:26:88:51:dd:15:aa:d5:a1:56:ca:c4: c4:0d:92:6c:4f:95:51:6a:dc:05:03:cc:27:9a:2f:2c:43:b9: a2:49:fa:19:c1:22:48:5c:9c:76:55:0f:24:a5:d4:5a:84:7a: c9:e3:fe:25:4e:e0:ad:4e:14:a9:9f:a5:e0:88:ec:2e:26:c3: d6:d9:38:2d:61:a2:11:8d:7c:13:37:79:28:ff:25:e3:01:af: 34:bb:48:83:bf:53:97:01:9d:88:27:72:1f:16:9d:f9:62:fa: 28:63:fc:8b:21:49:0a:4d:0b:74:7d:85:95:9f:77:0a:af:16: 4e:81:30:f0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM+GdWAwh1Yh2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZGZlNmFiNzgtMDhhZC00YjM0LTg4YmEtOGRmNDg0YmQxMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hFyLaxwmN70v40B4O0XafM/Emnahww1uGY5 yRgJx+6IPz7vE++mHDkXX38CLhkDZ4XK8wqorcRpasA1RKvdFVrHKgKKgyFMg29f JhBngPqvvUN4Th/eH8XmzyL2yBsoVvgbfv5KfPE1v53/a38OOCHomPkvPuAbgMI6 cCPZIShAhfO4YerKt7ltwxMDBhlJvt6u34+7NMdoE6M1gZ0BnRJYQPLbYYZFdhUZ /KD5ls4nKEoSQNumdjTYppphSUfN6TMCemDk/HgU7zBy3XQrayVgtlx+LB0/+l55 F+rpmKkUcEpnworqAFX2GXQn7iQ2shWhXfCudb0VDv8uYQcY0wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEeNXxhbS0rdhPtOPeozBnxgetqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdiOTZlMWMtMDcyNy0z MWExLWE4ZDctMDc0ZmZhNDcyZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAEEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAS+NP9bMB7vruQCbYbgztX7KXyXdE+OFzxMXypwUGbHVlCdV55Z3B +xBkZriileL2e+Jn4+mJWS1csNx6Ttcqzk56eRPb5GRJOmmw1M2KOb8IphKkci9e rKjsHe9awjK72NoQoSzlxfsgWL/J3RJTnzWFo2J0HhBW6gtA640ciIwn97pSaiaI Ud0VqtWhVsrExA2SbE+VUWrcBQPMJ5ovLEO5okn6GcEiSFycdlUPJKXUWoR6yeP+ JU7grU4UqZ+l4IjsLibD1tk4LWGiEY18Ezd5KP8l4wGvNLtIg79TlwGdiCdyHxad +WL6KGP8iyFJCk0LdH2FlZ93Cq8WToEw8A== -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:22 2025 by rpki-client