$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa File: c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa (raw, json) Hash identifier: 1T5o+3XDA2gpZH44dWFOJeixBUsg7yqHk0ToZ8Fn05g= Subject key identifier: A8:BA:4D:15:F8:41:00:DF:C0:4F:09:B1:EC:C4:67:E3:BB:93:EC:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCFA816972AA2C94EE880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2607:f560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cf:a8:16:97:2a:a2:c9:4e:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=bd58df4a-4861-415c-b798-6cabcd593f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:ba:46:db:71:39:ba:c1:1f:73:60:39:21: 86:5d:03:76:28:69:b2:3b:b9:7e:19:84:09:46:a2: ab:c7:dd:cd:05:cf:0e:e7:1d:71:99:81:dc:f6:ba: a7:eb:58:ea:6a:c3:bc:12:90:37:46:5b:8e:9b:83: b4:45:03:1a:03:aa:48:30:ba:3e:14:f1:fd:27:9b: 81:69:d8:06:98:33:ab:f5:7a:3d:c2:2f:13:85:aa: 77:e5:70:db:1d:ab:84:99:6e:b3:ea:a9:10:ce:7f: 65:67:06:f5:e3:d7:f8:92:26:19:b9:87:46:6b:ce: fb:eb:eb:f3:b5:30:17:0e:d8:a1:8c:1d:3d:c8:41: 2a:b5:1b:71:2e:85:2d:62:65:94:e8:00:32:ef:c3: 78:8f:24:72:e0:ec:ba:e8:45:81:b8:58:43:db:f9: 3d:e9:ad:0c:d2:f3:7b:2a:ea:9f:3e:18:b2:cb:12: f9:d0:0b:4b:93:28:d7:a1:14:94:9f:d4:45:53:58: b0:4f:58:fe:95:94:13:33:f3:fc:5a:99:f7:33:18: e3:05:34:d0:40:51:a9:bb:7d:5b:93:20:78:3b:4e: b9:3d:ad:5e:50:7a:17:98:02:ea:bf:a8:bf:d3:b8: 32:0b:b3:3c:6d:36:5c:6c:8a:43:d7:0d:16:b1:38: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BA:4D:15:F8:41:00:DF:C0:4F:09:B1:EC:C4:67:E3:BB:93:EC:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f560::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c0:58:ee:21:69:5c:0f:b6:3b:bf:00:3b:31:cc:d0:b0:65: 86:8e:c5:5b:91:53:14:a9:a0:61:0c:b8:90:9a:1b:9a:1d:49: e2:59:76:e4:a5:03:04:44:a5:ec:2e:d1:34:28:64:c1:5a:8e: ba:7f:e1:3d:c5:4e:78:49:e4:78:e7:86:d1:51:58:29:8d:cb: 04:4f:f1:00:c2:72:dd:b4:1a:0e:9d:f2:85:f2:93:98:67:b4: b5:bf:98:cd:6a:17:17:23:8a:74:86:d1:9a:03:9b:58:d2:13: bf:bf:34:f5:15:d8:c0:d0:a4:c3:c5:2f:a1:8d:12:e3:3d:de: 65:e5:a6:96:64:ba:1c:7d:e6:f2:8d:fa:11:d4:bb:ae:ad:25: 99:c0:b7:1e:8f:26:0d:80:d5:dd:75:db:1e:0f:28:e4:83:ff: 40:5a:d2:bf:2e:e2:e3:38:95:d1:4e:ab:77:61:26:b3:b9:15: a9:f8:27:06:03:4f:bd:13:40:55:b0:5d:76:c0:93:02:89:3a: b8:dc:f0:b7:f6:44:57:36:af:8a:32:3b:1c:27:5e:77:bf:ed: 56:14:6a:21:06:4b:60:b4:58:1c:75:2e:2a:0a:71:8e:7d:4a: 45:c6:0c:52:b5:46:4c:e5:86:3c:88:c6:85:d1:6f:1f:ba:03: bb:01:b4:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxXM+oFpcqoslO6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YmQ1OGRmNGEtNDg2MS00MTVjLWI3OTgtNmNhYmNkNTkzZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH66RttxObrBH3NgOSGGXQN2KGmyO7l+GYQJ RqKrx93NBc8O5x1xmYHc9rqn61jqasO8EpA3RluOm4O0RQMaA6pIMLo+FPH9J5uB adgGmDOr9Xo9wi8Thap35XDbHauEmW6z6qkQzn9lZwb149f4kiYZuYdGa8776+vz tTAXDtihjB09yEEqtRtxLoUtYmWU6AAy78N4jyRy4Oy66EWBuFhD2/k96a0M0vN7 KuqfPhiyyxL50AtLkyjXoRSUn9RFU1iwT1j+lZQTM/P8Wpn3MxjjBTTQQFGpu31b kyB4O065Pa1eUHoXmALqv6i/07gyC7M8bTZcbIpD1w0WsThllwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKi6TRX4QQDfwE8JsezEZ+O7k+wOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdmZjQ2ODMtZDU2YS0z OThiLWJmN2YtYTA2MTdmN2Q5NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1YDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRwFjuIWlcD7Y7vwA7MczQsGWGjsVbkVMUqaBhDLiQmhuaHUniWXbk pQMERKXsLtE0KGTBWo66f+E9xU54SeR454bRUVgpjcsET/EAwnLdtBoOnfKF8pOY Z7S1v5jNahcXI4p0htGaA5tY0hO/vzT1FdjA0KTDxS+hjRLjPd5l5aaWZLocfeby jfoR1LuurSWZwLcejyYNgNXdddseDyjkg/9AWtK/LuLjOJXRTqt3YSazuRWp+CcG A0+9E0BVsF12wJMCiTq43PC39kRXNq+KMjscJ153v+1WFGohBktgtFgcdS4qCnGO fUpFxgxStUZM5YY8iMaF0W8fugO7AbSW -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:15 2025 by rpki-client