$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa File: 47a38678-065d-3329-a105-fa94cfdcfee1.roa (raw, json) Hash identifier: YaeoxmP8NY5n1gvDOvEjZqm8CoieA6lt7/lKuQsTHCs= Subject key identifier: 88:C2:8A:10:03:49:A7:DE:C4:66:96:83:B6:72:FC:86:45:A1:AB:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFDC5EB70A4F8CCE2C020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2600:5000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fd:c5:eb:70:a4:f8:cc:e2:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=2c86e9bd-9e28-49f6-86e0-6f43254dfdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:68:a1:bf:3b:8f:5a:b5:53:9a:c7:02:a2: 73:80:cd:db:e3:36:de:44:02:d2:af:84:3e:56:e6: f1:3f:ef:c2:db:e0:1c:e1:3a:75:d1:65:3f:4b:63: 34:05:50:04:d9:ad:e9:ea:02:9b:12:a8:56:d2:79: ec:78:4f:85:c5:b1:a4:21:91:2f:9c:b0:9c:ea:c0: 95:35:5a:1d:7e:ee:3b:58:af:99:7a:0e:41:3b:d5: cb:05:db:eb:27:34:5b:ce:eb:cb:a6:33:c9:49:d0: ec:46:13:cc:30:05:1f:8b:91:a5:60:af:8a:cb:23: 24:f6:a9:12:d3:73:1b:d4:49:5a:bc:9a:95:34:7f: 88:5c:dd:12:7a:77:4b:4a:ec:25:ac:c3:46:c7:b9: ca:60:47:cd:e9:89:65:84:56:a8:9d:f7:fb:a6:34: d1:68:0f:8f:7b:ed:84:5f:83:98:7e:c7:a1:65:e4: 89:ab:18:ae:0c:f8:cd:53:22:89:02:5e:35:d9:f9: 3b:22:3f:0e:07:ae:4f:9b:cf:f7:a3:2f:b5:03:1d: b3:e0:62:00:99:ca:b1:14:f2:27:d6:d4:c8:26:69: 7c:54:91:ee:fe:35:0f:76:1b:5c:8f:b9:f2:a2:7e: ca:c9:12:53:72:ea:f7:83:97:25:c0:53:42:b9:b6: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C2:8A:10:03:49:A7:DE:C4:66:96:83:B6:72:FC:86:45:A1:AB:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2600:5000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:aa:30:66:fb:d9:87:85:76:b2:1f:3c:a6:e3:81:dc:5a:82: a4:7b:cc:f2:c8:99:0c:8c:6d:5d:38:98:5b:59:ad:45:61:3e: 86:1e:38:66:63:81:75:ec:3a:a9:e7:dd:4b:6e:63:9a:39:6c: 59:c2:c9:3b:e8:d0:50:52:e2:96:06:29:61:d8:2f:85:07:a0: 6a:fa:6a:10:22:a7:7a:79:1e:ea:65:01:8a:95:8b:64:a8:f6: 77:e0:13:a5:08:2d:49:9b:cb:f2:ed:bd:30:b2:f9:2b:db:3e: 9c:36:e5:6b:57:db:a1:a9:7c:91:06:1c:65:06:e9:60:9b:b4: 17:f7:42:06:73:45:fc:1f:be:f9:63:20:44:5b:ad:bd:f7:ff: 3c:27:3b:23:99:02:fc:a1:d4:ad:f0:1d:38:ed:c9:e6:ae:a0: 8d:fa:40:e0:e2:73:69:93:17:e7:d5:2a:6f:f9:56:ff:b9:3e: 9b:cf:75:5b:d0:0a:47:d9:95:55:e4:a2:d9:80:47:22:8d:e5: 16:ee:94:49:80:fd:8a:fc:d9:b6:7b:3f:e4:7d:31:a5:11:26: cf:19:f5:00:95:20:c8:de:d9:36:64:ad:a3:94:97:76:c8:ab: 1b:29:01:4e:fe:62:9c:de:f6:3e:44:5b:6a:8c:5b:c2:bc:38: 16:cb:7c:91 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxXP3F63Ck+MziwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MmM4NmU5YmQtOWUyOC00OWY2LTg2ZTAtNmY0MzI1NGRmZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozVoob87j1q1U5rHAqJzgM3b4zbeRALSr4Q+ VubxP+/C2+Ac4Tp10WU/S2M0BVAE2a3p6gKbEqhW0nnseE+FxbGkIZEvnLCc6sCV NVodfu47WK+Zeg5BO9XLBdvrJzRbzuvLpjPJSdDsRhPMMAUfi5GlYK+KyyMk9qkS 03Mb1ElavJqVNH+IXN0SendLSuwlrMNGx7nKYEfN6YllhFaonff7pjTRaA+Pe+2E X4OYfsehZeSJqxiuDPjNUyKJAl412fk7Ij8OB65Pm8/3oy+1Ax2z4GIAmcqxFPIn 1tTIJml8VJHu/jUPdhtcj7nyon7KyRJTcur3g5clwFNCubZzJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIjCihADSafexGaWg7Zy/IZFoavAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDdhMzg2NzgtMDY1ZC0z MzI5LWExMDUtZmE5NGNmZGNmZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgBQADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkqjBm+9mHhXayHzym44HcWoKke8zyyJkMjG1dOJhbWa1FYT6GHjhm Y4F17Dqp591LbmOaOWxZwsk76NBQUuKWBilh2C+FB6Bq+moQIqd6eR7qZQGKlYtk qPZ34BOlCC1Jm8vy7b0wsvkr2z6cNuVrV9uhqXyRBhxlBulgm7QX90IGc0X8H775 YyBEW6299/88JzsjmQL8odSt8B047cnmrqCN+kDg4nNpkxfn1Spv+Vb/uT6bz3Vb 0ApH2ZVV5KLZgEcijeUW7pRJgP2K/Nm2ez/kfTGlESbPGfUAlSDI3tk2ZK2jlJd2 yKsbKQFO/mKc3vY+RFtqjFvCvDgWy3yR -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:04 2025 by rpki-client