$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa File: 87e9af17-b83d-3cfb-b718-f367a270a589.roa (raw, json) Hash identifier: CzQks4b1fTZdEYKl/nsZVP2ydpgqITvV0Sg4ts4853w= Subject key identifier: E5:E6:6F:68:05:DF:41:59:14:9A:ED:97:24:EE:2B:4D:76:D4:C7:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFE6E8EE562ABE7298A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fe:6e:8e:e5:62:ab:e7:29:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=05467686-b69a-4265-a6cd-090d40c5e38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:b3:00:8e:ed:16:83:87:18:7e:a4:84:65: f8:d8:46:12:dd:ed:2a:90:c3:3a:db:42:6b:83:1f: bd:f6:6a:94:53:f4:76:34:d9:f8:20:1b:b0:cb:2a: 01:c7:c6:77:aa:9d:f2:6f:ee:48:64:61:7b:da:85: f9:a9:5c:66:50:84:ae:36:b5:72:5e:7b:5f:71:96: 08:b8:38:0e:5c:95:69:54:68:4a:97:34:24:ca:69: 30:4a:ad:80:63:66:a3:7b:fa:fd:b1:5b:7f:76:03: 80:d8:df:86:f3:53:f8:72:12:1a:45:78:5d:5d:a2: df:1a:06:4b:9d:ab:56:36:58:b1:a5:56:cf:ad:72: 76:30:9c:ce:07:42:58:0b:cf:77:92:c7:d7:01:0d: 1d:ec:01:27:89:c9:68:a5:0d:7e:f4:2d:a2:dd:29: c7:47:9a:06:cb:e8:4c:0e:70:c3:47:8a:2a:32:9a: 34:6a:d0:ea:3b:1d:91:7a:17:29:38:ed:af:d9:a3: 79:6d:df:03:ab:66:cd:5c:fd:8d:f5:d7:f9:20:4d: 19:a4:29:69:ec:8f:15:cb:51:6a:a5:da:dc:72:5b: ac:78:9d:ea:02:a3:d0:6b:0c:54:c2:e3:4f:ea:36: dd:d9:2d:33:ce:36:54:fc:8e:0e:3d:81:d4:6d:6b: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E6:6F:68:05:DF:41:59:14:9A:ED:97:24:EE:2B:4D:76:D4:C7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:09:1f:66:2d:04:e2:8a:a1:a3:69:04:cf:d4:95:14:fa:13: 76:24:d6:86:13:af:c4:07:5f:e4:ec:ec:b5:00:9f:e3:5e:b1: cf:47:80:5f:7a:53:8b:39:97:99:dd:92:96:6e:5e:c8:c0:0c: 90:a9:0a:37:ee:aa:97:01:51:8b:69:1c:dc:12:35:a2:40:6e: bd:02:18:d7:70:b5:24:08:39:42:b3:12:91:83:56:64:c5:a5: d5:81:81:65:7c:c2:9e:50:2d:52:7c:a4:2f:50:cd:79:28:35: f3:aa:41:7b:59:b2:b7:f1:d3:82:6e:9c:58:4a:9c:f1:5f:7e: 7c:1e:9b:93:d7:dd:d3:ef:5b:cf:25:a6:65:13:d1:c6:af:68: d4:3e:01:32:a9:28:21:1b:b0:22:0b:25:37:ba:6b:56:52:9d: 29:11:ce:0c:5c:ff:48:87:cf:fa:36:81:3f:db:66:4f:0a:67: b4:86:ed:cb:bc:a1:f1:01:a9:2b:b6:a2:32:ac:fb:ab:4b:8b: b9:38:18:25:b3:34:8d:04:4e:39:16:c9:45:02:d0:e9:62:35: b0:da:86:36:b5:45:3a:cc:21:82:8d:50:00:06:c0:ba:d4:fd: 65:fd:c0:49:a8:80:10:ad:c1:e9:4d:fa:57:fa:20:37:2c:7f: 36:ac:4d:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXP5ujuViq+cpigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDU0Njc2ODYtYjY5YS00MjY1LWE2Y2QtMDkwZDQwYzVlMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje+zAI7tFoOHGH6khGX42EYS3e0qkMM620Jr gx+99mqUU/R2NNn4IBuwyyoBx8Z3qp3yb+5IZGF72oX5qVxmUISuNrVyXntfcZYI uDgOXJVpVGhKlzQkymkwSq2AY2aje/r9sVt/dgOA2N+G81P4chIaRXhdXaLfGgZL natWNlixpVbPrXJ2MJzOB0JYC893ksfXAQ0d7AEniclopQ1+9C2i3SnHR5oGy+hM DnDDR4oqMpo0atDqOx2RehcpOO2v2aN5bd8Dq2bNXP2N9df5IE0ZpClp7I8Vy1Fq pdrccluseJ3qAqPQawxUwuNP6jbd2S0zzjZU/I4OPYHUbWu8HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOXmb2gF30FZFJrtlyTuK0121Mc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdlOWFmMTctYjgzZC0z Y2ZiLWI3MTgtZjM2N2EyNzBhNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwJH2YtBOKKoaNpBM/UlRT6E3Yk1oYTr8QHX+Ts7LUAn+Nesc9H gF96U4s5l5ndkpZuXsjADJCpCjfuqpcBUYtpHNwSNaJAbr0CGNdwtSQIOUKzEpGD VmTFpdWBgWV8wp5QLVJ8pC9QzXkoNfOqQXtZsrfx04JunFhKnPFffnwem5PX3dPv W88lpmUT0cavaNQ+ATKpKCEbsCILJTe6a1ZSnSkRzgxc/0iHz/o2gT/bZk8KZ7SG 7cu8ofEBqSu2ojKs+6tLi7k4GCWzNI0ETjkWyUUC0OliNbDahja1RTrMIYKNUAAG wLrU/WX9wEmogBCtwelN+lf6IDcsfzasTXk= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:41 2025 by rpki-client