$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa File: e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa (raw, json) Hash identifier: BK8xRnLQh1Ydec1ryZn7kQl+PmmBD3AFVXxKgoG/C1k= Subject key identifier: 54:E8:DC:B2:8E:44:BA:DF:26:7B:C0:0F:A7:F0:1B:0D:F0:31:26:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCCCBAC98B233608F4140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cc:cb:ac:98:b2:33:60:8f:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=690a8715-0698-4904-aed4-cb841e150ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:7b:b6:0a:1c:63:fd:06:52:95:98:f4:3a: a9:e6:bd:59:f1:76:50:13:71:28:c8:ad:e4:25:f3: 63:dd:32:83:b0:77:03:24:58:16:69:98:f5:bc:ed: 6d:eb:fb:1f:59:ac:d1:9a:26:3a:7e:47:ea:e5:64: 9f:14:72:6e:a5:9c:f4:09:3a:cf:f4:01:6b:78:55: a3:0a:d9:5f:7a:a9:29:e0:2c:c4:ae:7e:54:42:1c: 4e:73:22:6b:19:f7:9f:43:84:2f:5b:0b:dd:9e:9c: 15:03:bb:a5:f1:38:97:9d:98:eb:1a:89:0f:ec:01: 36:8b:56:4f:f5:db:f8:63:8f:ef:b8:aa:64:4a:44: 6e:2b:32:60:fe:dc:0a:3b:ff:5b:ea:c3:03:e3:6f: b2:73:fc:f4:23:d9:72:c4:60:c0:a8:a0:5c:76:cc: 9e:14:1a:38:51:fc:70:c5:df:f4:de:ec:2a:49:15: b4:9b:86:ad:d5:cf:13:da:8e:b4:2e:0c:1c:10:b5: ec:5f:bb:36:b2:a1:fd:6e:bc:43:c3:39:6c:5b:14: 75:6f:70:67:27:f1:04:79:92:e2:f5:1b:73:78:48: 66:f3:21:5f:fb:84:8c:3c:99:bc:8b:6c:a8:4f:6a: 1f:bd:63:a2:e4:3d:09:38:4b:12:0c:5a:a6:3e:80: 69:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E8:DC:B2:8E:44:BA:DF:26:7B:C0:0F:A7:F0:1B:0D:F0:31:26:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:df:f2:6b:ac:d5:d5:a0:42:49:7d:54:c9:40:d8:8a:16:c0: c9:a9:ba:ee:64:c1:bf:d7:fd:f7:52:b5:89:c4:0e:98:2e:25: b9:4d:f6:fb:29:24:12:7a:e0:1a:fd:06:93:95:dd:08:c5:1b: dd:f7:ff:f6:54:27:96:29:5c:e3:c4:88:47:a4:11:7f:0d:73: 16:3e:7d:1d:e8:ce:5a:96:01:3b:98:5f:de:df:24:d5:cb:2e: 18:fc:ce:e5:d6:7c:9e:89:11:23:a1:ed:22:f0:81:73:ed:68: ce:47:5f:2b:6c:a5:31:d5:28:b1:b5:dc:b3:ff:d7:f3:5a:c5: cf:c6:af:0f:f4:b6:b7:10:12:49:6d:0e:35:f5:02:ab:a9:02: c9:7b:11:1e:02:19:87:91:ac:3e:c8:8b:76:e9:e1:3a:30:ab: b1:bb:93:84:69:ea:95:00:5b:17:27:81:8a:f4:52:46:98:b2: 23:f1:9c:9d:80:7b:a1:50:ab:f8:cf:2b:80:ed:dd:b8:1d:57: 1f:ac:7f:3d:a4:89:10:26:e5:d6:74:4b:9c:39:b6:9b:ac:7f: a9:ed:c5:14:4d:8d:97:d9:c5:5f:8b:43:fd:f2:ae:6e:1e:b8: 12:65:30:09:74:82:e5:f0:e0:f7:52:c1:33:33:be:33:2d:d3: 45:ad:19:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXMzLrJiyM2CPQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjkwYTg3MTUtMDY5OC00OTA0LWFlZDQtY2I4NDFlMTUwZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xd7tgocY/0GUpWY9Dqp5r1Z8XZQE3EoyK3k JfNj3TKDsHcDJFgWaZj1vO1t6/sfWazRmiY6fkfq5WSfFHJupZz0CTrP9AFreFWj Ctlfeqkp4CzErn5UQhxOcyJrGfefQ4QvWwvdnpwVA7ul8TiXnZjrGokP7AE2i1ZP 9dv4Y4/vuKpkSkRuKzJg/twKO/9b6sMD42+yc/z0I9lyxGDAqKBcdsyeFBo4Ufxw xd/03uwqSRW0m4at1c8T2o60LgwcELXsX7s2sqH9brxDwzlsWxR1b3BnJ/EEeZLi 9RtzeEhm8yFf+4SMPJm8i2yoT2ofvWOi5D0JOEsSDFqmPoBpvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFTo3LKORLrfJnvAD6fwGw3wMSasMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTMwY2U0ZmItZWQyYi0z NDYyLThhNDctMWY5ZTI3ZjdlMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXf8mus1dWgQkl9VMlA2IoWwMmpuu5kwb/X/fdStYnEDpguJblN 9vspJBJ64Br9BpOV3QjFG933//ZUJ5YpXOPEiEekEX8NcxY+fR3ozlqWATuYX97f JNXLLhj8zuXWfJ6JESOh7SLwgXPtaM5HXytspTHVKLG13LP/1/Naxc/Grw/0trcQ EkltDjX1AqupAsl7ER4CGYeRrD7Ii3bp4Towq7G7k4Rp6pUAWxcngYr0UkaYsiPx nJ2Ae6FQq/jPK4Dt3bgdVx+sfz2kiRAm5dZ0S5w5tpusf6ntxRRNjZfZxV+LQ/3y rm4euBJlMAl0guXw4PdSwTMzvjMt00WtGXM= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:04 2025 by rpki-client