$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa File: c9d29c32-a313-3797-8f77-559ae3991224.roa (raw, json) Hash identifier: nPkoFaqT8EpMW9LeGMClKPiffXEV8mpHVjFp2jkripU= Subject key identifier: 31:81:B2:3D:13:FD:81:27:A4:5E:E3:C3:D9:D7:26:50:A8:72:D2:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCDA96C54B79863AFD980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cd:a9:6c:54:b7:98:63:af:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c0d1ce14-24e0-4840-a5cf-0034e181943b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:71:02:fb:d5:3d:92:ed:44:6a:b9:2a:36: ad:33:0b:1d:6d:a4:ad:e6:ce:ef:d4:a4:06:6b:80: 9d:6c:48:40:e2:ef:ac:11:1e:f7:82:a4:c7:99:91: f1:94:8e:d9:6f:4f:73:53:46:4b:8e:16:1c:86:96: 6d:00:a3:54:0e:07:91:b2:45:6b:d0:66:a9:17:13: e9:8a:e9:09:fe:ce:48:39:da:74:f6:1b:05:b8:82: c3:2d:ab:a0:09:20:3b:fd:db:d4:89:99:a0:73:30: ad:e2:40:64:6e:38:08:42:56:11:94:aa:59:56:93: 30:ae:8b:95:2e:7a:f3:ca:36:6c:a5:a0:0b:78:2d: af:96:93:71:29:1a:a6:1b:0d:5e:ab:e3:52:b2:a9: 1c:79:56:b7:06:22:1e:21:50:6b:eb:7c:90:f4:39: 0d:44:2b:f9:63:e4:c3:69:61:c0:f5:b2:47:44:42: 07:32:ef:5f:e2:40:51:fb:40:13:dc:f7:52:03:00: 3a:ec:97:94:82:23:8d:02:b4:96:d8:09:09:61:82: f3:47:04:df:77:78:75:d8:aa:ab:78:be:2c:c0:b2: 34:b1:0b:9a:cd:cc:70:f4:be:5e:2a:8d:e2:17:4f: 40:65:1d:59:0a:2b:46:14:2c:db:9b:c2:dd:a9:e2: 04:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:81:B2:3D:13:FD:81:27:A4:5E:E3:C3:D9:D7:26:50:A8:72:D2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5a:53:7b:92:f1:b6:46:aa:49:3c:72:56:6c:11:d1:fb:a7: d3:99:0f:96:d2:ee:de:59:c6:91:20:e4:b9:1f:11:0e:54:5e: 6e:24:48:5a:81:39:07:f5:0c:e6:86:84:c7:28:a0:30:de:e0: cd:27:01:51:2e:32:6f:13:b0:ad:a3:5e:70:96:9c:14:9a:82: b1:70:39:1f:22:72:49:02:e1:ff:46:a0:52:bb:f0:1e:56:de: d4:ac:31:f4:70:0c:f8:5a:a4:9e:57:45:90:cf:ad:09:f0:b8: c3:05:31:42:f4:ff:a7:d1:e8:b5:78:d4:0d:2c:95:95:71:76: 70:8f:c7:0e:e5:7d:e6:52:30:f6:9e:c6:1c:fe:17:ca:95:7d: 7d:0c:7f:5d:24:64:0c:38:36:5c:34:de:27:b2:fc:ee:c6:58: de:24:8e:d8:e6:24:c4:8f:2e:f0:de:d7:9f:77:52:d9:7b:8f: 2c:02:a1:9d:8f:bd:c3:7f:df:ee:d5:9f:ae:37:e8:27:4e:30: b5:21:43:7a:81:de:ea:00:62:73:fd:86:aa:28:d3:2f:b0:76: 93:e0:f1:bb:7b:9d:e9:f9:c5:85:c8:63:ff:aa:d6:a8:18:b3: 11:d1:aa:c1:e9:19:1c:bd:4f:08:8e:47:6c:f9:a2:04:08:dd: 24:de:60:7b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM2pbFS3mGOv2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzBkMWNlMTQtMjRlMC00ODQwLWE1Y2YtMDAzNGUxODE5NDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxRxAvvVPZLtRGq5KjatMwsdbaSt5s7v1KQG a4CdbEhA4u+sER73gqTHmZHxlI7Zb09zU0ZLjhYchpZtAKNUDgeRskVr0GapFxPp iukJ/s5IOdp09hsFuILDLaugCSA7/dvUiZmgczCt4kBkbjgIQlYRlKpZVpMwrouV LnrzyjZspaALeC2vlpNxKRqmGw1eq+NSsqkceVa3BiIeIVBr63yQ9DkNRCv5Y+TD aWHA9bJHREIHMu9f4kBR+0AT3PdSAwA67JeUgiONArSW2AkJYYLzRwTfd3h12Kqr eL4swLI0sQuazcxw9L5eKo3iF09AZR1ZCitGFCzbm8LdqeIEuQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDGBsj0T/YEnpF7jw9nXJlCoctJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzlkMjljMzItYTMxMy0z Nzk3LThmNzctNTU5YWUzOTkxMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOFpTe5LxtkaqSTxyVmwR0fun05kPltLu3lnGkSDkuR8RDlRebiRI WoE5B/UM5oaExyigMN7gzScBUS4ybxOwraNecJacFJqCsXA5HyJySQLh/0agUrvw Hlbe1Kwx9HAM+FqknldFkM+tCfC4wwUxQvT/p9HotXjUDSyVlXF2cI/HDuV95lIw 9p7GHP4XypV9fQx/XSRkDDg2XDTeJ7L87sZY3iSO2OYkxI8u8N7Xn3dS2XuPLAKh nY+9w3/f7tWfrjfoJ04wtSFDeoHe6gBic/2GqijTL7B2k+Dxu3ud6fnFhchj/6rW qBizEdGqwekZHL1PCI5HbPmiBAjdJN5gew== -----END CERTIFICATE-----Generated at Fri Oct 10 20:04:34 2025 by rpki-client