$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa File: 9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa (raw, json) Hash identifier: 8/8wuJMrDrcC2Jnj3K5u0JNQZxxZzKcqoyVAgavjE6M= Subject key identifier: 01:A2:04:DF:3A:22:1A:39:36:B1:2F:8D:7C:A3:49:F1:7A:13:DD:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B76F25FE23E0B33D2E0866D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 2604:cb00:4300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5f:e2:3e:0b:33:d2:e0:86:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=de26aab5-57dd-491c-8db5-ce2947918d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:7f:71:2c:95:11:aa:b1:ec:5c:80:6f:a5: aa:55:c7:50:1b:18:b6:f6:20:83:92:f3:c3:26:a2: c4:91:10:6a:11:f5:d1:4d:6e:ea:4a:30:56:12:5f: 1e:0c:9d:cf:4a:83:06:7b:29:62:f7:fd:bb:de:d1: 2b:f2:37:27:58:1b:40:ce:ec:d9:51:a1:13:1c:61: eb:e6:c0:dd:86:73:85:05:ae:e3:0d:d1:a8:20:78: 11:5c:0d:2d:19:8d:c2:04:09:4c:ab:e4:d7:e8:67: de:b1:ff:30:39:e7:e7:3f:cf:26:51:79:e1:b9:17: e0:9a:10:c2:59:07:a9:ad:fa:38:43:ad:ce:56:4e: a9:26:7a:0b:eb:04:41:1f:0c:f8:fb:29:7d:8d:b6: 28:6e:bb:f0:ec:b1:77:c5:90:92:94:42:10:cc:91: c3:c5:3b:d0:e2:5c:04:15:9e:ba:bd:dd:93:ae:eb: 0a:0f:c0:12:a7:5c:0a:da:fe:a0:6e:b7:cc:08:57: 45:53:e3:97:4b:c0:54:cd:0f:6f:f8:b5:bb:a5:3d: 4f:41:b4:c4:45:cd:28:b9:97:36:48:4e:e0:4a:35: 92:c8:8a:ed:71:d4:99:83:93:1c:fa:74:7c:76:02: bc:58:c4:7b:06:6d:af:f9:15:d7:3d:3a:b0:4f:fc: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A2:04:DF:3A:22:1A:39:36:B1:2F:8D:7C:A3:49:F1:7A:13:DD:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:4300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c1:cb:be:c1:7b:12:23:8c:21:8b:ef:75:d2:f7:26:47:45: 62:29:5d:69:c5:ed:a4:79:d4:5d:be:0f:02:99:ad:4f:53:2a: 6f:d3:19:fa:72:a9:c3:c5:21:36:e5:14:3a:07:ce:6b:71:8f: a4:51:bb:cf:d6:e8:80:b8:aa:86:03:8d:49:30:a1:1c:d1:e7: 5d:c0:ed:d0:75:9d:3f:9f:4c:b4:d5:a2:36:17:bf:35:11:6d: bd:99:5e:13:db:01:cd:4a:7a:e6:86:9a:b5:0e:08:7c:6d:ef: cb:4c:61:c3:b3:ab:db:d4:e4:3e:fb:3f:7e:e6:35:b3:50:85: 3b:fd:f9:4f:23:fe:b3:52:1e:16:ee:ad:70:f5:ba:78:79:87: b0:f1:10:5f:36:b0:05:90:c7:0c:75:c1:52:4d:8a:a7:ff:ed: d2:86:dd:67:a7:ae:80:16:e8:ff:b8:e1:90:fe:19:21:82:ae: 3d:d8:cc:1c:ac:e5:7d:61:dc:c4:ab:fe:ab:41:82:a8:23:89: 47:54:03:96:38:7e:f8:96:bd:13:ba:af:0c:bb:81:29:73:82: f3:83:53:1f:53:78:a6:0f:b7:6d:7f:d2:63:d2:ac:d6:91:5a: 14:5e:6c:de:cb:00:14:9d:ed:11:30:76:25:b3:5e:22:b6:e7: d6:22:8b:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt28l/iPgsz0uCGbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZGUyNmFhYjUtNTdkZC00OTFjLThkYjUtY2UyOTQ3OTE4ZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRV/cSyVEaqx7FyAb6WqVcdQGxi29iCDkvPD JqLEkRBqEfXRTW7qSjBWEl8eDJ3PSoMGeyli9/273tEr8jcnWBtAzuzZUaETHGHr 5sDdhnOFBa7jDdGoIHgRXA0tGY3CBAlMq+TX6Gfesf8wOefnP88mUXnhuRfgmhDC WQeprfo4Q63OVk6pJnoL6wRBHwz4+yl9jbYobrvw7LF3xZCSlEIQzJHDxTvQ4lwE FZ66vd2TrusKD8ASp1wK2v6gbrfMCFdFU+OXS8BUzQ9v+LW7pT1PQbTERc0ouZc2 SE7gSjWSyIrtcdSZg5Mc+nR8dgK8WMR7Bm2v+RXXPTqwT/xb5QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAGiBN86Iho5NrEvjXyjSfF6E92YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNkMTQ2YTAtMmQwYy0z MTBiLWE1ZTMtZDc0ZDAyNTRiMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAEMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOcHLvsF7EiOMIYvvddL3JkdFYildacXtpHnUXb4PApmtT1Mqb9MZ +nKpw8UhNuUUOgfOa3GPpFG7z9bogLiqhgONSTChHNHnXcDt0HWdP59MtNWiNhe/ NRFtvZleE9sBzUp65oaatQ4IfG3vy0xhw7Or29TkPvs/fuY1s1CFO/35TyP+s1Ie Fu6tcPW6eHmHsPEQXzawBZDHDHXBUk2Kp//t0obdZ6eugBbo/7jhkP4ZIYKuPdjM HKzlfWHcxKv+q0GCqCOJR1QDljh++Ja9E7qvDLuBKXOC84NTH1N4pg+3bX/SY9Ks 1pFaFF5s3ssAFJ3tETB2JbNeIrbn1iKL/Q== -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:06 2025 by rpki-client