$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa File: 9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa (raw, json) Hash identifier: Dl3Aa74BAmobTq/hqw4tF+UbaPNXfaBJ+oJsB7u8CWY= Subject key identifier: 67:01:75:EB:6A:4E:B4:ED:32:FA:80:E9:11:41:A4:07:4D:4E:56:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCB680DB7266708D3DEA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cb:68:0d:b7:26:67:08:d3:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e140dd41-c9ef-4fd5-a2c0-44aa008545b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:66:e5:c7:ae:f4:a6:3e:07:10:71:c5:3b: ad:88:5d:ce:6c:bf:9c:ce:c4:f2:6f:f2:05:c3:b9: 93:d9:36:1a:a1:58:36:8f:df:db:40:cc:00:5f:b4: 48:85:42:f5:c0:37:33:f2:34:39:1b:32:ba:76:52: fa:b6:cc:a2:c4:1d:77:b6:4b:60:31:f8:e7:1e:e8: 9d:1f:24:ff:3b:30:69:22:19:62:2d:f2:18:c2:7f: 62:72:cc:ee:9b:5c:c8:a7:ef:06:c5:90:8e:db:8e: f5:66:14:4b:e7:9e:4e:1e:46:ec:4e:79:7b:52:69: 2c:99:c4:f7:ab:3c:3a:7d:cb:c3:6b:3f:45:16:7a: 27:a8:78:34:fd:4d:24:96:ae:83:b4:62:65:7b:cc: 87:92:3a:0d:8b:6c:85:e4:62:6f:e3:51:86:a7:fc: a8:03:90:21:11:5e:69:15:3c:fc:7f:1c:e1:24:6c: 4f:8e:08:18:5a:16:b1:83:b1:22:04:4b:af:58:4c: 8a:f5:29:a0:5f:44:04:00:76:12:0e:7b:28:8f:ef: 8f:89:c3:a2:f7:00:b8:32:54:60:3b:b5:1a:d9:29: fd:f5:a6:68:af:6e:a3:6d:28:e4:65:f5:e4:fe:32: 46:80:09:14:3f:9b:35:f9:cb:f9:a0:f0:7d:94:f4: 97:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:01:75:EB:6A:4E:B4:ED:32:FA:80:E9:11:41:A4:07:4D:4E:56:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:3a:ac:97:fc:c9:ba:c6:52:d3:80:6e:11:87:57:b1:78:6f: 92:a8:00:dd:5b:d1:cd:e2:4e:44:50:ce:cb:ce:fb:62:86:f6: c1:7e:10:a3:88:b4:8e:ca:a2:74:b5:be:17:d1:8d:e1:26:e8: 1b:71:a5:d5:86:23:36:46:94:7c:fa:27:86:57:08:f8:f3:70: cb:c9:d8:b0:36:eb:13:db:38:4b:3d:a3:9b:6e:0f:73:eb:ac: c8:a6:db:1e:08:c5:8c:90:07:ec:b7:81:15:72:5c:b9:ba:4e: 3f:d4:53:cd:6c:0a:5c:95:69:1f:eb:8d:97:85:3d:2c:bb:22: c4:b3:bc:2e:63:f7:59:2b:13:c7:a3:69:82:4f:3d:4a:06:ab: 5f:7e:a3:d2:30:97:1e:c3:a9:34:65:ad:18:9a:b1:11:37:a4: 05:ab:ce:f5:a6:6c:92:27:65:8f:e2:59:0e:9a:d0:d3:f0:47: 13:72:fa:f6:9c:c4:f0:ae:c3:b6:99:2b:b2:11:4b:74:49:61: 86:f6:b6:57:6d:69:7b:fc:a7:40:18:83:43:03:2b:e8:72:06: 2b:57:d8:96:aa:a8:5f:5d:e6:f8:99:a4:1b:7e:64:e2:30:a3: 55:83:a7:fd:a0:79:37:e8:6c:59:e1:59:55:e6:07:0c:8a:7c: 13:45:1a:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXMtoDbcmZwjT3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZTE0MGRkNDEtYzllZi00ZmQ1LWEyYzAtNDRhYTAwODU0NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2dm5ceu9KY+BxBxxTutiF3ObL+czsTyb/IF w7mT2TYaoVg2j9/bQMwAX7RIhUL1wDcz8jQ5GzK6dlL6tsyixB13tktgMfjnHuid HyT/OzBpIhliLfIYwn9icszum1zIp+8GxZCO2471ZhRL555OHkbsTnl7UmksmcT3 qzw6fcvDaz9FFnonqHg0/U0klq6DtGJle8yHkjoNi2yF5GJv41GGp/yoA5AhEV5p FTz8fxzhJGxPjggYWhaxg7EiBEuvWEyK9SmgX0QEAHYSDnsoj++PicOi9wC4MlRg O7Ua2Sn99aZor26jbSjkZfXk/jJGgAkUP5s1+cv5oPB9lPSXAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGcBdetqTrTtMvqA6RFBpAdNTlY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZiNWE3MDEtMWM0My0z ZjdhLTlkMGQtZDc4ZjcxZWQwYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD46rJf8ybrGUtOAbhGHV7F4b5KoAN1b0c3iTkRQzsvO+2KG9sF+ EKOItI7KonS1vhfRjeEm6BtxpdWGIzZGlHz6J4ZXCPjzcMvJ2LA26xPbOEs9o5tu D3PrrMim2x4IxYyQB+y3gRVyXLm6Tj/UU81sClyVaR/rjZeFPSy7IsSzvC5j91kr E8ejaYJPPUoGq19+o9Iwlx7DqTRlrRiasRE3pAWrzvWmbJInZY/iWQ6a0NPwRxNy +vacxPCuw7aZK7IRS3RJYYb2tldtaXv8p0AYg0MDK+hyBitX2JaqqF9d5viZpBt+ ZOIwo1WDp/2geTfobFnhWVXmBwyKfBNFGmM= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:29 2025 by rpki-client