$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49a401fb-f0f8-3b4f-8096-47a512d39af1.roa File: 49a401fb-f0f8-3b4f-8096-47a512d39af1.roa (raw, json) Hash identifier: oL5AATq+kWRMkM3PGxzC/U7vmSvRoLiXkbzDuIbLC5A= Subject key identifier: 5A:90:A4:DA:C8:F5:FE:27:F2:F2:9D:30:D4:18:93:AA:31:8E:AE:9E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D00473D8D133B552DFA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49a401fb-f0f8-3b4f-8096-47a512d39af1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:00:47:3d:8d:13:3b:55:2d:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=db3155b5-8103-42f5-8676-e303cf57fc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:95:b7:e1:e4:67:a1:bb:1e:69:ce:0a:a0:6b: f1:80:6c:1d:8f:2e:c7:61:6c:8d:e9:53:d6:fe:91: 40:cb:a0:52:89:f8:a7:78:f2:4f:39:b7:82:a8:f0: 78:5f:5b:b2:45:9e:24:87:09:87:25:a0:ac:e0:5f: 11:54:c0:5b:2a:24:ee:23:84:6e:f9:f4:4d:70:26: 79:2c:0b:11:54:11:27:1b:f5:aa:ab:98:65:cc:ee: 90:34:28:e6:1c:35:f8:b3:15:c5:ea:1d:d1:e8:1d: 42:7f:a7:80:d6:bf:2b:3e:56:ec:05:47:8c:f0:5a: de:80:aa:52:da:c7:95:4e:f7:02:fb:04:9a:76:67: 30:cc:ee:79:1d:95:65:25:e1:bf:13:7a:61:90:04: f0:38:3e:c4:51:35:7a:12:be:99:62:7a:a4:40:68: ef:39:7f:c4:90:f2:75:18:7f:1b:50:1f:35:8f:a2: d6:5d:0f:f0:a2:64:fc:88:40:d5:b7:61:9c:6b:6f: 35:2b:40:ba:6c:31:7a:ad:f5:c0:62:30:22:3f:c5: 2b:c5:ae:d4:05:85:68:ce:b8:bb:41:cb:ce:a8:66: c6:6c:b4:47:63:3b:76:6e:fe:66:97:f7:fd:ee:cc: 3c:3e:44:fc:93:33:b9:b9:fd:1e:c2:b6:ae:29:ea: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:90:A4:DA:C8:F5:FE:27:F2:F2:9D:30:D4:18:93:AA:31:8E:AE:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49a401fb-f0f8-3b4f-8096-47a512d39af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6d:42:2d:0a:3a:b0:f4:ab:f1:e4:59:f5:ba:81:88:2e:f4: 39:02:08:69:64:bf:76:af:1a:fb:95:cb:28:3e:1d:36:8d:a4: 40:3b:c1:44:c0:81:4b:de:bc:af:60:b4:76:e3:f8:c8:01:a2: fe:e3:d6:cc:f3:04:1c:50:e4:38:31:61:df:8c:e8:94:94:d7: f9:85:be:87:03:50:c6:8a:69:07:9a:42:b3:f9:75:31:7c:6e: af:1b:8a:9c:b5:47:01:37:b8:9d:b7:dc:ab:26:c4:0a:63:ff: a4:1d:8c:53:a8:2d:24:4d:66:0e:3a:19:60:bf:40:da:06:93: 81:ac:a5:31:b3:96:e2:7d:96:5b:69:23:e3:24:b9:21:47:ca: 30:0d:ae:5f:97:30:4a:63:bf:16:30:df:fc:f0:f5:33:1a:60: 27:4a:89:dd:ce:99:a7:6e:42:92:9d:e7:e4:30:99:fe:2d:d3: f5:6f:22:c6:dc:88:13:79:89:8d:65:43:15:f7:42:bc:f3:82: 95:40:ce:67:04:df:c3:6b:16:17:37:9c:4d:f5:60:7f:b5:af: 86:63:74:70:34:5b:17:04:7f:2f:ca:13:37:03:c9:10:61:08: e1:86:54:15:c7:fc:c1:12:34:a1:15:83:99:a0:82:12:15:7d: 27:fe:9b:64 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXQBHPY0TO1Ut+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZGIzMTU1YjUtODEwMy00MmY1LTg2NzYtZTMwM2NmNTdmYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZW34eRnobseac4KoGvxgGwdjy7HYWyN6VPW /pFAy6BSifinePJPObeCqPB4X1uyRZ4khwmHJaCs4F8RVMBbKiTuI4Ru+fRNcCZ5 LAsRVBEnG/Wqq5hlzO6QNCjmHDX4sxXF6h3R6B1Cf6eA1r8rPlbsBUeM8FregKpS 2seVTvcC+wSadmcwzO55HZVlJeG/E3phkATwOD7EUTV6Er6ZYnqkQGjvOX/EkPJ1 GH8bUB81j6LWXQ/womT8iEDVt2Gca281K0C6bDF6rfXAYjAiP8Urxa7UBYVozri7 QcvOqGbGbLRHYzt2bv5ml/f97sw8PkT8kzO5uf0ewrauKer/PwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFqQpNrI9f4n8vKdMNQYk6oxjq6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDlhNDAxZmItZjBmOC0z YjRmLTgwOTYtNDdhNTEyZDM5YWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgW1CLQo6sPSr8eRZ9bqBiC70OQIIaWS/dq8a+5XLKD4dNo2kQDvB RMCBS968r2C0duP4yAGi/uPWzPMEHFDkODFh34zolJTX+YW+hwNQxoppB5pCs/l1 MXxurxuKnLVHATe4nbfcqybECmP/pB2MU6gtJE1mDjoZYL9A2gaTgaylMbOW4n2W W2kj4yS5IUfKMA2uX5cwSmO/FjDf/PD1MxpgJ0qJ3c6Zp25Ckp3n5DCZ/i3T9W8i xtyIE3mJjWVDFfdCvPOClUDOZwTfw2sWFzecTfVgf7WvhmN0cDRbFwR/L8oTNwPJ EGEI4YZUFcf8wRI0oRWDmaCCEhV9J/6bZA== -----END CERTIFICATE-----Generated at Fri Oct 10 19:55:06 2025 by rpki-client