$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa File: a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa (raw, json) Hash identifier: O0lg9xRY5WGZTipKRs0er9Oga7pR6QRUSlFuiNzn5zI= Subject key identifier: 0B:BA:B1:A8:72:10:1E:06:CF:06:A0:A6:3E:B4:66:04:52:B6:BF:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFF501171799F2789C800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ff:50:11:71:79:9f:27:89:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e23ae42f-b308-4375-a9cf-f9aa15e4de91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:95:c1:ac:e6:27:80:c2:63:64:c9:d5:5b:fc: f2:f2:b2:14:36:8b:eb:40:7e:eb:0c:07:d4:7c:5a: f0:9a:de:e3:a4:b2:3d:44:44:fb:da:be:e4:7e:0d: f6:ce:53:12:59:d9:bb:b0:ca:cb:da:9e:6d:04:ed: 57:32:0f:6f:08:1e:19:40:42:f8:ea:8a:87:1b:78: ff:7f:7d:b7:84:7d:4d:5c:5d:f1:23:40:91:55:a2: 5e:aa:af:aa:3d:7f:0b:ad:51:b7:27:66:d7:28:67: 01:26:f5:c2:ba:cd:cd:64:5d:e5:70:40:41:2b:76: e2:f1:1e:ea:e1:b7:d8:3c:8e:f3:d2:aa:f2:85:e8: b8:b5:47:d3:13:fd:04:f8:5a:80:e4:0f:31:40:49: 88:bd:93:99:5a:f5:91:be:c6:58:cd:bc:e9:3c:27: bc:bb:94:c3:82:c1:26:fc:28:36:b9:4d:17:93:bd: eb:92:21:4b:96:3d:05:82:6c:b6:28:98:1c:c3:2d: 62:78:28:f2:b6:19:82:a6:62:dd:76:f2:24:c3:57: c9:16:80:db:81:19:f4:41:4f:e4:e9:b4:ca:e9:3b: b8:c7:97:a9:79:f5:24:68:d1:cc:fc:90:c4:cd:9b: 69:96:e2:59:4f:a7:5d:00:3e:0e:27:0d:c3:51:d4: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BA:B1:A8:72:10:1E:06:CF:06:A0:A6:3E:B4:66:04:52:B6:BF:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:37::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:93:38:36:73:01:7f:5a:b5:8d:82:8a:32:ce:85:9d:4f:46: 37:04:18:2e:2d:59:6e:a6:c8:45:f5:64:34:32:35:c6:a7:f5: d4:33:3b:3f:f2:e5:a1:1a:de:25:90:64:50:ac:10:c8:ba:86: b7:2c:11:ec:59:d1:be:54:fa:b7:da:6e:f4:01:a3:24:f5:68: f2:c2:e4:4a:24:c1:d9:7c:36:f8:13:d7:4e:9b:b3:bc:ea:98: c8:ea:eb:23:bf:d1:6b:cd:10:ea:45:da:99:fb:8c:11:e2:c1: ac:1e:88:b3:16:fd:bd:eb:f9:c6:eb:e3:28:ee:14:44:34:39: 7a:58:47:a8:d7:5b:24:a9:b5:ee:9d:04:72:db:77:a7:b8:0d: 16:8e:57:97:ca:0e:6e:82:44:63:1b:84:78:45:e9:35:73:93: 08:fb:64:e4:c2:51:cf:e1:39:b4:8c:1a:7b:1e:b7:65:3a:06: 6c:3a:b3:1e:c6:87:6f:54:4e:8a:10:42:2b:1f:1d:11:46:d7: b3:22:00:fd:01:42:f1:0f:13:ac:98:b7:4a:fc:53:bb:72:f3: 43:2b:21:9f:07:9b:75:52:50:9e:22:b1:47:ef:57:20:41:9c: 40:cd:42:9e:fa:51:70:b6:27:bd:ba:79:41:e9:f7:ab:90:09: fe:6c:40:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXP9QEXF5nyeJyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZTIzYWU0MmYtYjMwOC00Mzc1LWE5Y2YtZjlhYTE1ZTRkZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5XBrOYngMJjZMnVW/zy8rIUNovrQH7rDAfU fFrwmt7jpLI9RET72r7kfg32zlMSWdm7sMrL2p5tBO1XMg9vCB4ZQEL46oqHG3j/ f323hH1NXF3xI0CRVaJeqq+qPX8LrVG3J2bXKGcBJvXCus3NZF3lcEBBK3bi8R7q 4bfYPI7z0qryhei4tUfTE/0E+FqA5A8xQEmIvZOZWvWRvsZYzbzpPCe8u5TDgsEm /Cg2uU0Xk73rkiFLlj0Fgmy2KJgcwy1ieCjythmCpmLddvIkw1fJFoDbgRn0QU/k 6bTK6Tu4x5epefUkaNHM/JDEzZtpluJZT6ddAD4OJw3DUdRTYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAu6sahyEB4Gzwagpj60ZgRStr+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTllYjM3YzktZTY5Zi0z MWZlLWFiY2YtZThmZmYwM2U0NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEGTODZzAX9atY2CijLOhZ1PRjcEGC4tWW6myEX1ZDQyNcan9dQz Oz/y5aEa3iWQZFCsEMi6hrcsEexZ0b5U+rfabvQBoyT1aPLC5Eokwdl8NvgT106b s7zqmMjq6yO/0WvNEOpF2pn7jBHiwaweiLMW/b3r+cbr4yjuFEQ0OXpYR6jXWySp te6dBHLbd6e4DRaOV5fKDm6CRGMbhHhF6TVzkwj7ZOTCUc/hObSMGnset2U6Bmw6 sx7Gh29UTooQQisfHRFG17MiAP0BQvEPE6yYt0r8U7ty80MrIZ8Hm3VSUJ4isUfv VyBBnEDNQp76UXC2J726eUHp96uQCf5sQH4= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:33 2025 by rpki-client