$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98e1335a-f4ba-3aa9-9d4b-f7783e7af78c.roa File: 98e1335a-f4ba-3aa9-9d4b-f7783e7af78c.roa (raw, json) Hash identifier: aRmBf6pjR9/384nIvHgdt8CFUmsLFrRpCuJoktkYqoY= Subject key identifier: E1:42:50:81:BD:BF:51:C1:AC:B7:30:04:09:69:81:CF:AB:41:D9:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFFF3C3F97EF296D4F2C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98e1335a-f4ba-3aa9-9d4b-f7783e7af78c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ff:f3:c3:f9:7e:f2:96:d4:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5cafab84-270a-4845-a8f7-8acb431ee9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:b4:3e:d6:fe:31:43:d9:5b:ff:d7:3d:d1: 77:5f:50:10:19:86:bc:11:76:9c:d8:7c:a6:7f:08: 3e:39:28:64:57:a8:b8:27:65:36:8c:dc:db:b5:2e: 6c:fa:c8:9b:04:b9:a9:1f:54:2d:86:1a:70:42:48: 71:e5:66:76:24:df:e4:9b:78:7e:1a:1f:51:ce:87: fb:79:c3:0b:7a:cc:60:ae:7c:51:6e:c0:6d:83:fc: 0b:b2:c5:23:cf:fe:aa:da:d4:25:6b:e7:9a:82:2e: 54:ea:01:39:59:3e:b5:9c:a2:dd:58:ad:02:bd:f4: 32:bc:ad:82:6b:6a:5b:fa:d5:ea:33:db:c8:a1:a2: 12:7e:5a:60:96:45:3d:05:01:47:c6:50:0b:c5:91: 57:17:24:5e:4a:3a:4d:fc:5c:93:dc:e3:08:ce:49: b5:fe:69:04:e6:84:33:bf:fe:8d:84:77:3a:10:0f: 26:6a:54:70:da:7e:d3:a7:fd:ce:b3:ba:7e:98:de: 9a:aa:43:da:a6:d2:16:1b:7f:dc:ef:23:16:68:ca: 51:9d:06:f6:c3:0f:71:94:02:17:b2:15:84:fa:ad: 70:62:ad:52:59:81:b1:f2:ec:43:82:3f:d5:c4:50: 23:40:a2:40:d5:52:5b:3b:47:a1:13:8f:62:9d:5c: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:42:50:81:BD:BF:51:C1:AC:B7:30:04:09:69:81:CF:AB:41:D9:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98e1335a-f4ba-3aa9-9d4b-f7783e7af78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2f:66:4d:5e:17:46:28:4c:fd:5e:e0:94:4c:d5:24:c9:69: d7:63:8a:43:43:e7:e2:55:a3:ca:0c:9f:e8:10:ad:70:d9:9d: d4:63:47:87:4e:65:23:1d:50:a3:e8:84:48:1f:4e:6d:3a:a6: 04:64:a1:67:8b:bc:95:98:75:c5:a7:c3:ff:be:bb:f3:ac:36: 8e:a3:af:20:0c:ae:55:24:d9:6f:2e:75:e6:d9:c4:b4:19:5d: 81:67:91:e3:5f:b8:bd:68:a7:4a:55:5d:80:e0:a3:3d:55:37: 38:51:2f:22:36:c0:6c:ed:87:2a:59:ad:08:1f:17:88:f6:8a: 61:dd:5e:b1:fe:ac:2b:45:ac:44:95:63:4f:0e:72:7a:a3:a9: c8:68:05:94:aa:fd:f1:c5:f4:43:36:2d:ca:c4:66:09:e5:d1: c6:ef:07:cd:05:05:b7:b7:c1:05:24:9f:78:af:b6:b8:b6:f4: c1:6e:57:ed:04:8e:8b:c9:9d:80:fa:f5:d3:d2:be:dd:80:74: 68:70:03:b2:34:01:46:9f:95:21:e5:af:88:52:d7:96:49:15: 2b:9d:58:2e:fd:20:91:71:fb:37:96:5f:ea:6c:c7:61:de:56: ae:ef:2f:af:7a:77:9d:5d:da:99:9d:08:f7:68:e8:86:a1:ce: 95:5a:33:87 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXP/zw/l+8pbU8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NWNhZmFiODQtMjcwYS00ODQ1LWE4ZjctOGFjYjQzMWVlOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTO0Ptb+MUPZW//XPdF3X1AQGYa8EXac2Hym fwg+OShkV6i4J2U2jNzbtS5s+sibBLmpH1QthhpwQkhx5WZ2JN/km3h+Gh9Rzof7 ecMLesxgrnxRbsBtg/wLssUjz/6q2tQla+eagi5U6gE5WT61nKLdWK0CvfQyvK2C a2pb+tXqM9vIoaISflpglkU9BQFHxlALxZFXFyReSjpN/FyT3OMIzkm1/mkE5oQz v/6NhHc6EA8malRw2n7Tp/3Os7p+mN6aqkPaptIWG3/c7yMWaMpRnQb2ww9xlAIX shWE+q1wYq1SWYGx8uxDgj/VxFAjQKJA1VJbO0ehE49inVyt7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOFCUIG9v1HBrLcwBAlpgc+rQdlnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOThlMTMzNWEtZjRiYS0z YWE5LTlkNGItZjc3ODNlN2FmNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcS9mTV4XRihM/V7glEzVJMlp12OKQ0Pn4lWjygyf6BCtcNmd1GNH h05lIx1Qo+iESB9ObTqmBGShZ4u8lZh1xafD/76786w2jqOvIAyuVSTZby515tnE tBldgWeR41+4vWinSlVdgOCjPVU3OFEvIjbAbO2HKlmtCB8XiPaKYd1esf6sK0Ws RJVjTw5yeqOpyGgFlKr98cX0QzYtysRmCeXRxu8HzQUFt7fBBSSfeK+2uLb0wW5X 7QSOi8mdgPr109K+3YB0aHADsjQBRp+VIeWviFLXlkkVK51YLv0gkXH7N5Zf6mzH Yd5Wru8vr3p3nV3amZ0I92johqHOlVozhw== -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:14 2025 by rpki-client