$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c647cc5a-170a-36ba-9e36-30f3ec122c8c.roa File: c647cc5a-170a-36ba-9e36-30f3ec122c8c.roa (raw, json) Hash identifier: JDKcu55UtySeBHg7TZskPJk5qjzgf8A9fVsn9W18cag= Subject key identifier: 92:6E:19:D2:FC:6F:5C:2C:18:FC:06:11:D5:AE:1A:3C:BC:EA:C4:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCE1773662DBB119C98C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c647cc5a-170a-36ba-9e36-30f3ec122c8c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:1300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ce:17:73:66:2d:bb:11:9c:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=4835039c-35d9-41d6-8707-2e24a228b897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:65:11:1d:84:be:ef:39:7f:8b:15:f4:c1:4e: d9:f9:23:3d:3e:51:14:53:fb:4f:50:bd:9b:7c:b6: ac:0f:fa:ee:85:81:62:06:07:b8:9a:41:63:49:c1: 97:95:97:e2:5e:a0:2b:3e:db:44:e0:70:9c:57:9a: b3:0b:89:e9:36:2c:3a:cb:6f:54:df:92:31:a8:4b: 7e:7a:a7:72:17:10:c6:d3:71:a2:08:bc:df:cf:8c: fd:0c:52:cd:36:bb:05:28:ee:19:19:d1:29:ce:7d: 44:0e:cf:ad:f2:f1:51:ea:30:48:f6:71:74:0d:ca: cf:64:18:17:03:b1:3c:55:01:0a:10:1d:93:1e:64: df:5c:fb:03:61:59:e8:0b:ae:01:5c:06:7e:55:f8: ea:83:c1:13:f7:40:ad:ce:c6:e6:fe:63:c4:c1:32: 11:57:67:65:14:60:0a:77:44:00:97:33:55:a3:0d: f0:94:e1:47:f1:74:a2:c4:d5:f5:e1:0f:88:7f:48: 31:3f:64:51:ea:1a:cb:3e:ae:34:a6:e9:59:ac:14: 98:21:f6:3c:04:95:16:89:c8:c3:05:36:cf:20:60: 99:3a:c2:58:07:f1:7f:05:be:31:7e:04:b8:86:76: d7:81:8c:d8:66:5a:3a:21:b7:5c:84:42:89:90:07: 49:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6E:19:D2:FC:6F:5C:2C:18:FC:06:11:D5:AE:1A:3C:BC:EA:C4:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c647cc5a-170a-36ba-9e36-30f3ec122c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:48:46:06:49:7f:56:ed:3f:22:d8:57:54:a0:b8:85:e0:99: 44:a6:c4:97:7e:d5:a4:26:de:74:b0:56:c2:2c:2e:ed:0c:37: 06:48:77:2c:85:c0:d7:0a:e7:9e:34:b5:2e:1c:ec:02:e9:48: 6e:74:48:8a:d6:2f:26:d0:7e:5e:f4:b7:bf:f7:7d:df:39:78: 6c:50:bf:14:3a:0f:12:d7:b1:c5:07:68:df:a8:86:42:8e:15: 98:f7:79:7a:6b:50:b7:54:8d:11:d5:fb:e4:1f:50:f8:c4:2e: 46:70:da:f8:b2:24:e9:a2:73:c6:ff:87:f9:65:00:d0:18:80: ce:16:95:05:76:ca:05:54:5a:49:87:a6:ba:03:74:9b:dc:29: d0:db:22:51:16:1e:20:88:24:98:af:22:dd:89:e1:f3:a0:b7: 88:73:4a:cd:d1:11:c2:7d:86:bb:ca:fd:a3:25:4a:3b:01:cf: e1:eb:83:0a:df:f3:c5:8f:09:16:71:75:3b:f1:c4:60:a4:30: 64:62:c4:0b:b7:89:f4:d7:b0:6f:9b:50:21:60:9a:2c:c2:dc: 20:d4:8c:55:97:37:61:72:70:46:11:ed:ed:56:38:8f:3f:7b: cf:c5:af:29:cc:ea:c3:d6:a0:f4:bd:0a:fc:30:04:3b:01:a4: 1b:82:56:9d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM4Xc2YtuxGcmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NDgzNTAzOWMtMzVkOS00MWQ2LTg3MDctMmUyNGEyMjhiODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWURHYS+7zl/ixX0wU7Z+SM9PlEUU/tPUL2b fLasD/ruhYFiBge4mkFjScGXlZfiXqArPttE4HCcV5qzC4npNiw6y29U35IxqEt+ eqdyFxDG03GiCLzfz4z9DFLNNrsFKO4ZGdEpzn1EDs+t8vFR6jBI9nF0DcrPZBgX A7E8VQEKEB2THmTfXPsDYVnoC64BXAZ+Vfjqg8ET90Ctzsbm/mPEwTIRV2dlFGAK d0QAlzNVow3wlOFH8XSixNX14Q+If0gxP2RR6hrLPq40pulZrBSYIfY8BJUWicjD BTbPIGCZOsJYB/F/Bb4xfgS4hnbXgYzYZlo6IbdchEKJkAdJAQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJJuGdL8b1wsGPwGEdWuGjy86sQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzY0N2NjNWEtMTcwYS0z NmJhLTllMzYtMzBmM2VjMTIyYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAX0hGBkl/Vu0/IthXVKC4heCZRKbEl37VpCbedLBWwiwu7Qw3Bkh3 LIXA1wrnnjS1LhzsAulIbnRIitYvJtB+XvS3v/d93zl4bFC/FDoPEtexxQdo36iG Qo4VmPd5emtQt1SNEdX75B9Q+MQuRnDa+LIk6aJzxv+H+WUA0BiAzhaVBXbKBVRa SYemugN0m9wp0NsiURYeIIgkmK8i3Ynh86C3iHNKzdERwn2Gu8r9oyVKOwHP4euD Ct/zxY8JFnF1O/HEYKQwZGLEC7eJ9Newb5tQIWCaLMLcINSMVZc3YXJwRhHt7VY4 jz97z8WvKczqw9ag9L0K/DAEOwGkG4JWnQ== -----END CERTIFICATE-----Generated at Fri Oct 10 22:09:36 2025 by rpki-client