$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9f28c3c-81b4-3515-825b-a41239eb04c5.roa File: c9f28c3c-81b4-3515-825b-a41239eb04c5.roa (raw, json) Hash identifier: CrZRffEUJqOwe4G9Txpk9lEp86YrpGeiYLd50zukFAk= Subject key identifier: B3:F6:86:F7:AB:68:5E:1A:24:DA:7C:CA:EE:49:70:E6:AB:6B:23:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCE6E3524F92315BA4280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9f28c3c-81b4-3515-825b-a41239eb04c5.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:1a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ce:6e:35:24:f9:23:15:ba:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=811cbec8-89a8-4e35-8e5f-ee6a906e9803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d7:87:ba:ee:85:6d:98:aa:fe:d1:18:41:cd: 5a:bf:e2:de:fd:0c:26:11:36:35:e7:4e:cf:7b:4d: b3:b8:0d:18:ce:29:c0:cb:33:61:d2:18:fc:8e:fb: 24:e8:1f:75:6e:d7:23:5c:2f:47:6c:7f:87:bc:5c: e7:40:bc:49:47:26:01:64:f4:11:a2:94:1f:2f:5e: 04:2a:e3:3c:fb:e0:80:9a:d3:a7:af:3d:35:82:8c: fa:87:c1:00:a5:b0:74:6d:4a:f8:39:22:af:e6:cd: 39:a2:9f:f3:e5:12:67:fa:9d:25:0c:15:f1:7a:62: 63:0d:66:31:63:83:c1:5e:62:8d:b4:a8:c0:40:2c: f5:ef:59:8e:d1:82:6e:0f:ec:70:3d:54:e9:7d:b5: 1c:97:d1:92:44:85:7f:25:a3:17:d6:c0:5e:32:1b: 3a:8c:61:e2:f2:35:79:97:14:7c:94:e8:ab:cb:1c: 4b:48:5d:2f:f6:2c:ab:33:8f:02:e8:bd:4d:0b:11: ee:f5:a5:c7:c3:5a:34:b6:b2:1b:76:3c:f3:bf:57: 4c:25:69:f1:af:68:37:a7:8e:8c:39:0b:f4:60:81: a4:a1:00:c8:1d:eb:e6:5b:b3:64:81:df:c9:23:ce: e2:43:88:68:b9:fb:d2:54:63:39:69:ee:d8:d2:7e: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F6:86:F7:AB:68:5E:1A:24:DA:7C:CA:EE:49:70:E6:AB:6B:23:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9f28c3c-81b4-3515-825b-a41239eb04c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e5:a0:52:1b:aa:61:29:b3:b1:aa:e8:97:53:0c:a3:aa:f5: 24:54:19:c7:50:12:89:7d:e2:10:88:47:d7:7b:05:c0:39:6d: 49:62:60:17:9c:7a:cd:79:25:c7:ed:10:9c:16:38:c8:ba:4d: f8:70:7a:fc:b7:16:be:ba:89:a2:14:8d:ac:1f:01:5b:15:44: 50:c5:8b:ef:5a:89:84:24:32:13:9e:fd:78:0a:6a:c8:ac:7b: 19:c4:60:f4:60:84:80:cb:df:65:e3:84:b5:9d:4f:da:e3:a2: 7c:d9:31:7d:da:83:50:d1:68:32:8d:78:8a:52:44:cf:e4:6a: 56:3e:71:cc:5a:d1:e2:96:62:24:b4:a0:72:fa:5f:e9:28:58: 4d:6f:6e:17:95:58:a4:e0:b0:21:d9:5b:1f:b8:58:26:f3:cd: 84:30:f5:6b:e9:09:e6:65:ac:5f:ce:6c:28:f4:26:1a:8c:bf: a8:eb:5f:f0:17:9f:7b:99:65:bf:32:3c:f7:1d:49:7d:38:7c: 54:42:14:ca:fa:4a:f0:1d:34:ff:ea:a3:e3:f4:e1:9b:4b:15: 2d:70:2c:93:bf:76:98:5b:2b:b8:e9:8e:41:24:54:45:53:ba: 23:ce:11:49:c6:5e:c3:b4:29:53:cd:6f:8c:24:db:6f:92:95: 83:35:49:64 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM5uNST5IxW6QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODExY2JlYzgtODlhOC00ZTM1LThlNWYtZWU2YTkwNmU5ODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdeHuu6FbZiq/tEYQc1av+Le/QwmETY1507P e02zuA0YzinAyzNh0hj8jvsk6B91btcjXC9HbH+HvFznQLxJRyYBZPQRopQfL14E KuM8++CAmtOnrz01goz6h8EApbB0bUr4OSKv5s05op/z5RJn+p0lDBXxemJjDWYx Y4PBXmKNtKjAQCz171mO0YJuD+xwPVTpfbUcl9GSRIV/JaMX1sBeMhs6jGHi8jV5 lxR8lOiryxxLSF0v9iyrM48C6L1NCxHu9aXHw1o0trIbdjzzv1dMJWnxr2g3p46M OQv0YIGkoQDIHevmW7Nkgd/JI87iQ4houfvSVGM5ae7Y0n5KzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLP2hveraF4aJNp8yu5JcOarayNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzlmMjhjM2MtODFiNC0z NTE1LTgyNWItYTQxMjM5ZWIwNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMeWgUhuqYSmzsarol1MMo6r1JFQZx1ASiX3iEIhH13sFwDltSWJg F5x6zXklx+0QnBY4yLpN+HB6/LcWvrqJohSNrB8BWxVEUMWL71qJhCQyE579eApq yKx7GcRg9GCEgMvfZeOEtZ1P2uOifNkxfdqDUNFoMo14ilJEz+RqVj5xzFrR4pZi JLSgcvpf6ShYTW9uF5VYpOCwIdlbH7hYJvPNhDD1a+kJ5mWsX85sKPQmGoy/qOtf 8Befe5llvzI89x1JfTh8VEIUyvpK8B00/+qj4/Thm0sVLXAsk792mFsruOmOQSRU RVO6I84RScZew7QpU81vjCTbb5KVgzVJZA== -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:48 2025 by rpki-client