$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da8cd73a-ee7f-3309-8392-13f3c6d2b8dd.roa File: da8cd73a-ee7f-3309-8392-13f3c6d2b8dd.roa (raw, json) Hash identifier: k2UhSdtbwoQhH3pmZNP6uSqrrFoN+8UfgSsTRzXSbug= Subject key identifier: 80:F6:A7:B8:FD:4F:8D:2B:03:16:63:60:A4:10:B2:C0:A9:20:98:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFE19F76B2298BBEC6F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da8cd73a-ee7f-3309-8392-13f3c6d2b8dd.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fe:19:f7:6b:22:98:bb:ec:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=02cfd014-a49f-4b5c-bfbf-6e73ed48f648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3d:9c:d3:cd:dd:5c:46:59:f7:9c:74:b8:2b: bb:dd:49:2e:c6:89:c4:e7:73:15:84:97:65:83:d6: a3:78:9b:05:f4:4c:13:52:68:52:6f:fb:fc:8d:93: 7e:ad:9f:ea:49:6f:52:19:2a:ae:36:6a:cd:0d:00: f9:89:c4:b5:2d:55:ee:18:4b:ed:bd:06:cc:8a:bb: 39:4c:66:ca:61:2d:bd:9c:5c:db:10:6a:af:1b:1f: 6d:64:fe:c2:9c:e1:5a:d1:25:0c:02:63:17:ec:86: 48:1e:01:68:8b:41:5b:a7:0d:77:89:11:38:82:92: 9d:55:19:3e:08:22:75:a2:f7:3f:dd:9e:b0:fd:98: cf:a5:3a:7a:3f:4f:05:da:43:e0:5d:cf:25:74:ac: 8d:e0:04:2d:b2:ad:67:11:fb:12:ed:7f:c7:bc:0d: 9d:05:9d:54:15:57:cd:eb:e0:6d:5b:38:59:a9:9c: d2:7e:c6:43:6d:5e:f9:d7:41:78:77:3f:ae:28:f3: b4:2c:f5:f8:41:aa:22:68:4a:ca:57:15:19:ec:55: 39:4b:ae:2a:1a:70:fe:0e:50:ce:49:e3:d8:e2:33: 8e:98:06:53:b9:3d:13:d0:88:71:fa:d5:06:8b:f7: f4:cf:fa:09:4d:57:59:b6:d8:01:6b:55:e2:e6:2d: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F6:A7:B8:FD:4F:8D:2B:03:16:63:60:A4:10:B2:C0:A9:20:98:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da8cd73a-ee7f-3309-8392-13f3c6d2b8dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1a:54:67:7c:a4:da:52:4a:4b:18:ec:13:bf:5c:a6:56:05: 94:64:bf:17:66:b7:6e:f3:3e:62:49:1e:42:77:9a:f6:2a:bb: b3:75:45:b5:a3:3b:9b:80:c7:84:ac:4b:cf:26:b6:02:b0:40: be:7f:af:3f:0f:db:18:14:bb:10:24:3f:e8:8d:06:41:1a:ff: dd:04:47:e3:2f:b9:1c:69:50:0e:b4:4e:a0:08:da:b4:e8:38: 72:4d:c0:9e:50:47:fc:70:ef:e9:cc:16:e5:43:07:cd:b8:18: 66:6e:31:22:ea:a8:49:6b:09:db:6b:76:b0:fa:25:3e:7e:e2: 84:e1:8a:15:48:46:2c:96:22:ed:85:21:cf:cd:49:72:6a:26: 48:0d:52:9b:d1:09:c3:06:a5:76:c2:64:77:15:69:50:65:68: a1:68:50:fd:cb:16:85:bb:bd:78:fb:db:a7:de:56:f0:54:c1: 5f:9c:7e:21:fe:28:8c:fc:f6:70:61:d7:32:40:ce:d9:09:73: 78:a0:01:ea:3a:b0:7b:8c:d5:bb:55:e1:2f:06:7d:44:6e:f1: 52:27:62:26:ff:ee:86:d0:76:43:07:b0:7f:e7:05:f7:a0:39: 8c:36:61:43:76:ee:cd:af:ed:1d:ab:c9:60:22:5d:8a:2a:05: 4f:2b:0e:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXP4Z92simLvsb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDJjZmQwMTQtYTQ5Zi00YjVjLWJmYmYtNmU3M2VkNDhmNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz2c083dXEZZ95x0uCu73UkuxonE53MVhJdl g9ajeJsF9EwTUmhSb/v8jZN+rZ/qSW9SGSquNmrNDQD5icS1LVXuGEvtvQbMirs5 TGbKYS29nFzbEGqvGx9tZP7CnOFa0SUMAmMX7IZIHgFoi0Fbpw13iRE4gpKdVRk+ CCJ1ovc/3Z6w/ZjPpTp6P08F2kPgXc8ldKyN4AQtsq1nEfsS7X/HvA2dBZ1UFVfN 6+BtWzhZqZzSfsZDbV7510F4dz+uKPO0LPX4QaoiaErKVxUZ7FU5S64qGnD+DlDO SePY4jOOmAZTuT0T0Ihx+tUGi/f0z/oJTVdZttgBa1Xi5i1edwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFID2p7j9T40rAxZjYKQQssCpIJj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGE4Y2Q3M2EtZWU3Zi0z MzA5LTgzOTItMTNmM2M2ZDJiOGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYaVGd8pNpSSksY7BO/XKZWBZRkvxdmt27zPmJJHkJ3mvYqu7N1 RbWjO5uAx4SsS88mtgKwQL5/rz8P2xgUuxAkP+iNBkEa/90ER+MvuRxpUA60TqAI 2rToOHJNwJ5QR/xw7+nMFuVDB824GGZuMSLqqElrCdtrdrD6JT5+4oThihVIRiyW Iu2FIc/NSXJqJkgNUpvRCcMGpXbCZHcVaVBlaKFoUP3LFoW7vXj726feVvBUwV+c fiH+KIz89nBh1zJAztkJc3igAeo6sHuM1btV4S8GfURu8VInYib/7obQdkMHsH/n BfegOYw2YUN27s2v7R2ryWAiXYoqBU8rDqM= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:44 2025 by rpki-client