$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d95407e8-1a1c-31d7-a321-c8d942be6426.roa File: d95407e8-1a1c-31d7-a321-c8d942be6426.roa (raw, json) Hash identifier: xrodZZnuLdTI1i+mVpsNlLtKYGu707JWthn+58fOwHs= Subject key identifier: 14:75:3E:06:37:C8:A7:64:ED:FF:AF:73:2C:A6:AA:CD:3B:7F:37:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCB562D97AEAF33F96F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d95407e8-1a1c-31d7-a321-c8d942be6426.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cb:56:2d:97:ae:af:33:f9:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ed0eba81-3e02-4079-9509-d52b1c7a4fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ad:0c:d9:07:ed:ad:d6:b0:f2:c6:de:fd:94: 1d:4b:96:96:29:1c:a5:3f:21:1b:6d:b1:ba:bf:88: b3:92:2b:3c:1d:6d:b4:53:c2:b0:c4:07:c4:60:4b: c5:0d:60:15:69:95:08:b3:95:fa:70:03:42:67:66: cb:88:68:52:af:f2:99:b4:c5:e1:50:71:e8:5d:38: a8:9e:a7:dd:a7:6e:5a:5a:91:cc:e7:17:8f:e9:b3: d0:74:95:57:18:49:c6:22:10:80:c9:d1:04:f9:99: 27:4c:5b:8f:9d:fe:6c:81:69:0d:ee:f7:43:6a:b1: 04:81:d0:20:ec:d0:7b:22:a1:c0:9b:a9:ef:f5:1e: 9a:45:6a:62:89:4d:2f:3a:29:41:34:cb:0a:b4:ff: 06:50:26:01:2c:14:14:96:9c:da:8d:2f:0b:b0:0b: e5:09:ad:55:d8:f6:32:4d:30:e5:97:e8:1f:a2:9e: 51:31:42:92:ba:a7:07:f7:fa:41:f0:fb:2c:d9:9b: cd:15:68:d0:20:ce:1d:e5:07:b6:26:6e:0d:a2:78: be:70:5a:8d:05:01:88:b5:9c:92:64:64:22:62:f5: 06:40:a4:10:2b:5d:81:28:ba:77:92:ec:59:b5:3a: 52:6a:6b:47:95:69:44:28:bd:c0:bf:c6:f9:89:48: 06:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:75:3E:06:37:C8:A7:64:ED:FF:AF:73:2C:A6:AA:CD:3B:7F:37:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d95407e8-1a1c-31d7-a321-c8d942be6426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:bc:81:6c:41:49:f8:e5:bb:e7:61:f6:d5:66:7b:97:95:05: 3a:47:15:21:81:68:b4:86:19:f4:2c:22:fe:89:1e:f4:5c:ec: e3:6f:64:f9:5f:cd:b7:e8:d6:9f:d2:60:4c:fb:02:fa:5f:ae: 57:e6:27:6d:9e:04:f4:82:ec:31:a2:d4:ff:9b:57:19:a6:97: 4a:58:95:32:5d:a6:84:f8:94:5c:cb:70:fc:4b:cf:45:41:61: 5f:ec:4b:34:da:b0:f3:66:4d:0d:03:89:71:9c:8b:7f:81:b7: 98:85:22:ad:07:25:3f:cf:0c:4a:af:09:fd:00:e8:2a:00:4f: db:8f:fb:5c:c5:8b:31:c7:0a:4a:ae:d3:4e:6c:ce:4f:0a:35: f6:23:9e:34:61:e4:ef:89:66:f1:b9:63:33:ab:df:5f:3b:da: 64:88:a0:24:e3:ef:34:5c:61:4f:26:03:35:0c:24:98:27:65: 81:c7:a5:eb:14:de:c6:84:55:4b:02:eb:06:4e:ba:0e:aa:0a: db:8c:2b:5c:0d:41:e3:03:94:36:2d:39:06:c4:8e:4f:96:4d: cf:c9:7c:f2:ed:f6:2c:ed:d1:dd:ef:81:f9:f0:c4:c5:7f:65: e3:80:ee:a8:4d:9b:28:46:4a:7c:45:bf:a6:a7:85:95:4a:2f: 46:f1:35:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXMtWLZeurzP5bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZWQwZWJhODEtM2UwMi00MDc5LTk1MDktZDUyYjFjN2E0ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja0M2Qftrdaw8sbe/ZQdS5aWKRylPyEbbbG6 v4izkis8HW20U8KwxAfEYEvFDWAVaZUIs5X6cANCZ2bLiGhSr/KZtMXhUHHoXTio nqfdp25aWpHM5xeP6bPQdJVXGEnGIhCAydEE+ZknTFuPnf5sgWkN7vdDarEEgdAg 7NB7IqHAm6nv9R6aRWpiiU0vOilBNMsKtP8GUCYBLBQUlpzajS8LsAvlCa1V2PYy TTDll+gfop5RMUKSuqcH9/pB8Pss2ZvNFWjQIM4d5Qe2Jm4Noni+cFqNBQGItZyS ZGQiYvUGQKQQK12BKLp3kuxZtTpSamtHlWlEKL3Av8b5iUgGJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBR1PgY3yKdk7f+vcyymqs07fzdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDk1NDA3ZTgtMWExYy0z MWQ3LWEzMjEtYzhkOTQyYmU2NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACi8gWxBSfjlu+dh9tVme5eVBTpHFSGBaLSGGfQsIv6JHvRc7ONv ZPlfzbfo1p/SYEz7AvpfrlfmJ22eBPSC7DGi1P+bVxmml0pYlTJdpoT4lFzLcPxL z0VBYV/sSzTasPNmTQ0DiXGci3+Bt5iFIq0HJT/PDEqvCf0A6CoAT9uP+1zFizHH Ckqu005szk8KNfYjnjRh5O+JZvG5YzOr31872mSIoCTj7zRcYU8mAzUMJJgnZYHH pesU3saEVUsC6wZOug6qCtuMK1wNQeMDlDYtOQbEjk+WTc/JfPLt9izt0d3vgfnw xMV/ZeOA7qhNmyhGSnxFv6anhZVKL0bxNes= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:06 2025 by rpki-client