$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c039c39-e476-312a-9552-a5ff4d658449.roa File: 5c039c39-e476-312a-9552-a5ff4d658449.roa (raw, json) Hash identifier: 5V2cU2F3IJu5qVcz6Ytyq/usP76timQPmOn6FiGzeck= Subject key identifier: 3A:3B:D8:86:53:02:FB:D3:1F:7E:95:D5:3D:18:77:00:2C:FF:2D:00 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCD651F5CABA9E2028180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c039c39-e476-312a-9552-a5ff4d658449.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cd:65:1f:5c:ab:a9:e2:02:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ddd6256a-0d40-42ae-ab12-ce640997969a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:37:e6:3f:9f:cc:56:5a:7d:33:65:c2:b7:10: 67:13:13:6c:44:41:bc:63:4a:cb:22:e8:ab:e8:00: cd:07:1b:00:8f:5d:4a:9c:57:84:ee:74:60:bd:c7: 92:9d:11:01:14:fc:27:30:02:bf:ea:f5:2a:50:9f: e8:6a:59:60:e4:f7:dc:20:8d:89:3b:b6:39:6f:9c: 1b:8e:b7:9b:fc:2e:c5:12:62:35:df:46:9f:ba:9a: be:52:bd:be:3b:9a:df:89:8b:3a:1d:06:22:b7:ab: 0c:7c:e2:91:aa:6e:3f:2d:23:8e:4c:6d:4c:5f:65: 09:0e:c6:39:2b:1c:55:92:27:21:5d:83:99:1a:4a: e4:84:36:8f:89:09:76:6c:58:8b:fc:a1:da:cc:93: 3f:f5:e4:b1:d3:ee:ac:a6:3b:3b:1b:45:23:5d:d8: ed:83:7e:bb:e4:48:6e:c4:83:97:da:6d:a5:46:90: 11:f7:af:0f:8a:ff:78:61:98:53:98:cd:ed:34:9d: 88:49:a4:e2:ca:d8:89:08:b0:71:f6:b6:96:b0:a8: 70:1f:be:44:54:04:00:8d:7b:bf:1b:cc:9a:0e:6c: 21:db:20:df:70:c6:1f:e5:3c:a3:38:9d:d1:84:47: 82:3e:d7:1e:29:c6:7d:49:0c:b6:1f:5f:93:d2:aa: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3B:D8:86:53:02:FB:D3:1F:7E:95:D5:3D:18:77:00:2C:FF:2D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c039c39-e476-312a-9552-a5ff4d658449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:00:19:49:ae:e1:c5:3b:22:52:c1:c3:fc:f5:96:cc:9e:fa: 52:61:42:35:b3:21:a1:f2:5e:f8:b8:e4:9b:12:45:c5:e7:37: fe:ba:b0:2e:3a:24:3e:03:6e:97:4a:ac:ac:22:27:c6:df:81: 05:60:83:11:44:f6:e2:e1:8c:b5:e6:06:b5:e4:93:8f:f5:a2: a1:f1:59:af:1a:1e:14:9b:e8:fd:b9:ef:0c:c4:89:f2:29:e1: 0a:54:02:1d:44:e4:72:5a:22:18:d8:00:cf:a7:c8:76:75:40: e9:12:d5:9b:a0:76:c2:cc:49:c3:ec:e9:fa:f3:c3:f5:7b:6b: 0f:60:5c:86:2b:ca:1a:b6:d0:17:f9:05:a6:c8:32:a6:cc:c4: 9e:84:11:b7:5b:98:ed:e0:6e:fa:d1:23:80:78:ce:84:ee:e1: e5:f8:23:2c:2d:34:70:03:66:b4:42:f8:61:8b:7a:a5:98:fd: db:5a:c2:db:71:91:96:89:b8:b8:13:77:33:89:b8:34:4e:c8: e7:83:a0:1e:31:fd:d3:2b:a3:fa:56:c0:d3:7a:c1:9b:fe:96: b9:86:c8:7d:f7:eb:16:01:b0:d3:c9:ca:65:b0:9f:89:65:2d: e3:53:b9:e1:fc:a6:02:74:47:81:60:49:af:d4:a7:12:b9:c6: 62:56:f8:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXM1lH1yrqeICgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZGRkNjI1NmEtMGQ0MC00MmFlLWFiMTItY2U2NDA5OTc5NjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjfmP5/MVlp9M2XCtxBnExNsREG8Y0rLIuir 6ADNBxsAj11KnFeE7nRgvceSnREBFPwnMAK/6vUqUJ/oallg5PfcII2JO7Y5b5wb jreb/C7FEmI130afupq+Ur2+O5rfiYs6HQYit6sMfOKRqm4/LSOOTG1MX2UJDsY5 KxxVkichXYOZGkrkhDaPiQl2bFiL/KHazJM/9eSx0+6spjs7G0UjXdjtg3675Ehu xIOX2m2lRpAR968Piv94YZhTmM3tNJ2ISaTiytiJCLBx9raWsKhwH75EVAQAjXu/ G8yaDmwh2yDfcMYf5TyjOJ3RhEeCPtceKcZ9SQy2H1+T0qqY7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDo72IZTAvvTH36V1T0YdwAs/y0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWMwMzljMzktZTQ3Ni0z MTJhLTk1NTItYTVmZjRkNjU4NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYAGUmu4cU7IlLBw/z1lsye+lJhQjWzIaHyXvi45JsSRcXnN/66 sC46JD4DbpdKrKwiJ8bfgQVggxFE9uLhjLXmBrXkk4/1oqHxWa8aHhSb6P257wzE ifIp4QpUAh1E5HJaIhjYAM+nyHZ1QOkS1ZugdsLMScPs6frzw/V7aw9gXIYryhq2 0Bf5BabIMqbMxJ6EEbdbmO3gbvrRI4B4zoTu4eX4IywtNHADZrRC+GGLeqWY/dta wttxkZaJuLgTdzOJuDROyOeDoB4x/dMro/pWwNN6wZv+lrmGyH336xYBsNPJymWw n4llLeNTueH8pgJ0R4FgSa/UpxK5xmJW+J8= -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:33 2025 by rpki-client