$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa File: af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa (raw, json) Hash identifier: o3jYMWA7/TzE941XcMKzwA+BKc7c3L1PtLA/Jl6/VUE= Subject key identifier: 67:2C:CB:7C:AC:2E:34:D3:7E:31:2B:6C:FC:3E:A3:3C:4E:02:2D:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D0147A4E9000F7C13A5C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2607:f400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:01:47:a4:e9:00:0f:7c:13:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=208eafb3-9d5b-42f8-a38a-31686a75635b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:3f:5a:65:53:a7:65:fa:1c:cc:7c:aa:9f: 6f:e8:48:34:21:d2:9f:6c:bf:5a:94:d6:94:41:2a: c0:0c:0b:71:60:48:dd:70:97:3a:c3:36:79:72:eb: 3c:d1:79:49:a2:3a:a1:33:6c:8b:2e:9a:65:0c:73: 22:34:f8:27:3d:86:73:50:2b:7e:68:21:23:16:d4: fa:c9:89:f5:86:78:48:b9:07:cc:48:a0:b8:4d:8f: 43:0a:ee:9a:f3:ad:44:55:9f:36:94:47:73:35:c8: b4:a8:99:83:a9:da:24:d3:f3:d2:23:24:94:0b:5e: 66:ed:f1:6e:f7:d4:e4:94:9a:53:f5:99:f9:bc:6f: 45:f7:d4:d8:e4:05:a8:e6:a8:cf:2f:19:9b:e7:9c: 17:33:d8:50:15:7b:72:b6:09:32:3b:5d:8f:2d:76: 3b:ac:23:c0:18:d5:2d:21:57:d3:40:e2:dc:57:f3: a4:f1:0b:67:43:f3:08:6b:14:ab:49:50:af:15:f7: a6:28:7a:6a:bc:e7:18:0e:4e:5d:e5:56:e0:d2:6e: 2d:6e:b5:40:8e:47:5f:f4:65:f2:17:a7:0c:16:70: 7d:e8:b2:81:5c:d4:61:74:8b:5a:11:90:8b:9e:df: 3e:1b:82:7b:29:d0:2b:8e:f8:e1:0b:13:e8:cc:b8: c6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2C:CB:7C:AC:2E:34:D3:7E:31:2B:6C:FC:3E:A3:3C:4E:02:2D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:68:09:48:b4:02:c0:0b:54:d9:34:e0:dd:20:87:78:95:b4: ee:c6:95:7f:87:d1:18:4a:26:ef:b7:06:6d:ef:61:39:cd:d2: 4e:b2:13:81:87:8f:a6:2b:88:00:ac:35:b4:73:c6:21:fe:dc: 0f:d3:fc:18:37:d8:89:a2:2a:4a:c0:06:35:07:c4:66:5b:8e: 47:1a:88:49:04:c6:f4:1b:6c:6a:43:54:55:5d:ba:79:17:3b: 0f:46:18:d6:cc:e7:5b:93:18:f0:1f:82:4a:8b:5e:1b:38:65: 5f:e4:07:1b:6b:be:eb:b9:6b:91:29:2b:25:ec:ff:03:9e:fb: bb:c8:00:7b:e1:4e:cc:6e:8d:3b:fc:4e:5e:49:93:44:ad:e6: 6e:f9:82:89:98:56:fa:d2:e5:ab:33:94:af:3f:94:1a:29:8c: a6:ba:fb:66:d8:37:30:94:81:6e:eb:fa:5f:2c:3c:0e:8a:b5: 80:59:e0:34:15:68:c7:95:fd:cc:81:76:25:95:00:e2:60:90: 27:c1:ef:b4:b2:dd:af:26:a4:e9:63:46:45:d0:e3:93:b8:68: 2f:59:c0:1a:39:e2:31:b8:19:ac:4b:85:c1:ee:d7:70:92:c4: d7:a5:29:f7:ad:55:9a:37:a3:ff:72:f5:d3:11:da:ff:c0:9e: c1:a1:1a:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxXQFHpOkAD3wTpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MjA4ZWFmYjMtOWQ1Yi00MmY4LWEzOGEtMzE2ODZhNzU2MzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOE/WmVTp2X6HMx8qp9v6Eg0IdKfbL9alNaU QSrADAtxYEjdcJc6wzZ5cus80XlJojqhM2yLLpplDHMiNPgnPYZzUCt+aCEjFtT6 yYn1hnhIuQfMSKC4TY9DCu6a861EVZ82lEdzNci0qJmDqdok0/PSIySUC15m7fFu 99TklJpT9Zn5vG9F99TY5AWo5qjPLxmb55wXM9hQFXtytgkyO12PLXY7rCPAGNUt IVfTQOLcV/Ok8QtnQ/MIaxSrSVCvFfemKHpqvOcYDk5d5Vbg0m4tbrVAjkdf9GXy F6cMFnB96LKBXNRhdItaEZCLnt8+G4J7KdArjvjhCxPozLjG+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGcsy3ysLjTTfjErbPw+ozxOAi31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWY2ZWI2YWItMDIwNS0z N2I0LWI3MjgtY2U5MGVmNDRhZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsaAlItALAC1TZNODdIId4lbTuxpV/h9EYSibvtwZt72E5zdJOshOB h4+mK4gArDW0c8Yh/twP0/wYN9iJoipKwAY1B8RmW45HGohJBMb0G2xqQ1RVXbp5 FzsPRhjWzOdbkxjwH4JKi14bOGVf5Acba77ruWuRKSsl7P8Dnvu7yAB74U7Mbo07 /E5eSZNEreZu+YKJmFb60uWrM5SvP5QaKYymuvtm2DcwlIFu6/pfLDwOirWAWeA0 FWjHlf3MgXYllQDiYJAnwe+0st2vJqTpY0ZF0OOTuGgvWcAaOeIxuBmsS4XB7tdw ksTXpSn3rVWaN6P/cvXTEdr/wJ7BoRqd -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:25 2025 by rpki-client