$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa File: 84bad8c2-46cd-3a42-80d0-ff2891389b87.roa (raw, json) Hash identifier: lWnUg8LCt3+Icz14OS3UNMoPrH9E77/8CtvRcK7mQqU= Subject key identifier: FD:47:90:63:A6:10:AD:C8:99:20:4A:29:9E:23:BF:FD:F1:C3:22:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D01187D2857548D560400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:3700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:01:18:7d:28:57:54:8d:56:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f7aac9ca-26e0-45cb-98a4-a8d4699e5c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:ac:83:ed:f4:b9:ee:69:9f:b0:27:46:3c: 65:73:31:64:da:e3:27:18:be:3d:50:4a:49:c9:86: 07:c6:2b:2d:d2:a6:4a:e0:94:66:18:e4:ee:83:ef: c6:89:ca:f8:db:c8:79:7a:e8:1f:9f:bf:1b:6c:1d: 3d:c5:e0:a9:76:9f:62:d2:49:df:48:a5:fe:a7:b5: 5e:2a:d9:34:a5:d8:2e:ef:83:3f:cd:d2:b5:85:87: 4a:eb:6b:3f:c7:2c:fc:2e:51:b9:c6:3f:72:e7:6e: 97:f8:78:6c:32:f4:2b:b2:2c:3a:5b:39:70:5b:e8: 50:54:ba:34:84:70:16:62:32:d9:54:fd:7a:1d:cf: 25:b4:07:32:97:47:d1:5d:a0:c4:ea:76:cc:f2:cd: 72:51:fd:43:02:7e:99:74:4c:be:47:0e:35:49:b6: 1c:e2:aa:23:d6:c9:bb:20:6c:d0:9a:cf:bb:01:46: 06:73:ee:3d:b6:6c:bf:91:81:13:d7:50:81:e1:6a: 01:6d:6b:ce:7b:0b:76:a7:33:eb:8c:2c:5c:9d:98: ec:43:e7:1f:2a:0b:d0:08:27:13:75:2a:89:ce:1e: 01:fd:d4:06:6a:33:05:8c:6c:54:6d:cb:23:dd:9f: d2:93:64:f0:90:b3:aa:ae:01:0e:e6:7f:e6:2c:34: fe:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:47:90:63:A6:10:AD:C8:99:20:4A:29:9E:23:BF:FD:F1:C3:22:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b0:35:9e:6e:64:de:01:88:39:31:d6:c2:5f:b9:2d:36:ea: 9f:1e:dd:c8:fa:d6:87:47:96:b9:1c:5f:a7:c0:bb:48:a0:29: 78:62:79:8c:d6:62:d6:f3:b6:e1:05:2b:95:ae:2c:53:d1:98: 0e:a6:ac:e4:da:31:43:9c:7d:ee:bc:2f:72:5b:e9:8c:23:c1: ef:30:87:3a:51:c8:0d:10:d2:75:2e:b6:09:2a:b0:14:e8:53: 6a:14:03:e9:c9:6f:56:be:08:3e:76:6b:94:43:22:22:88:17: e5:8e:8d:76:0f:5d:bf:67:d5:e7:74:da:2b:f0:50:77:7a:c4: 75:f9:de:b3:cd:f2:f0:bf:47:df:3c:71:9f:f2:d3:11:d8:e9: a8:14:08:8f:bc:ce:2c:01:2a:8e:8e:a7:25:27:43:30:39:16: 45:86:1a:6f:f5:5a:6d:2c:41:f7:50:36:54:d0:c1:f0:ca:fd: 95:25:2d:23:85:25:58:1d:6f:8f:89:2a:35:ac:e0:0e:c9:db: 23:10:97:7f:4e:7f:c3:28:3e:1c:a9:9a:d2:de:fa:75:40:5e: 01:57:c6:af:92:7c:b8:86:7c:a8:ee:2a:80:0d:cc:74:56:b9: 06:aa:f1:ff:97:b0:6b:d6:43:5b:67:70:7b:eb:b5:94:64:e8: 8a:02:3c:57 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXQEYfShXVI1WBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjdhYWM5Y2EtMjZlMC00NWNiLTk4YTQtYThkNDY5OWU1YzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN6sg+30ue5pn7AnRjxlczFk2uMnGL49UEpJ yYYHxist0qZK4JRmGOTug+/Gicr428h5eugfn78bbB09xeCpdp9i0knfSKX+p7Ve Ktk0pdgu74M/zdK1hYdK62s/xyz8LlG5xj9y526X+HhsMvQrsiw6WzlwW+hQVLo0 hHAWYjLZVP16Hc8ltAcyl0fRXaDE6nbM8s1yUf1DAn6ZdEy+Rw41SbYc4qoj1sm7 IGzQms+7AUYGc+49tmy/kYET11CB4WoBbWvOewt2pzPrjCxcnZjsQ+cfKgvQCCcT dSqJzh4B/dQGajMFjGxUbcsj3Z/Sk2TwkLOqrgEO5n/mLDT+RQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP1HkGOmEK3ImSBKKZ4jv/3xwyJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODRiYWQ4YzItNDZjZC0z YTQyLTgwZDAtZmYyODkxMzg5Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJ7A1nm5k3gGIOTHWwl+5LTbqnx7dyPrWh0eWuRxfp8C7SKApeGJ5 jNZi1vO24QUrla4sU9GYDqas5NoxQ5x97rwvclvpjCPB7zCHOlHIDRDSdS62CSqw FOhTahQD6clvVr4IPnZrlEMiIogX5Y6Ndg9dv2fV53TaK/BQd3rEdfnes83y8L9H 3zxxn/LTEdjpqBQIj7zOLAEqjo6nJSdDMDkWRYYab/VabSxB91A2VNDB8Mr9lSUt I4UlWB1vj4kqNazgDsnbIxCXf05/wyg+HKma0t76dUBeAVfGr5J8uIZ8qO4qgA3M dFa5Bqrx/5ewa9ZDW2dwe+u1lGToigI8Vw== -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:22 2025 by rpki-client