$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e73e1694-3851-3d79-bc0b-1b1acb8ed753.roa File: e73e1694-3851-3d79-bc0b-1b1acb8ed753.roa (raw, json) Hash identifier: oGLulwsCgETFyfa06quOL7/uTGl8wQGYtxH9N3caBWo= Subject key identifier: 86:B0:83:FC:55:BD:96:22:A1:95:56:AA:FD:3B:3F:56:F5:82:FE:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCEB8733F5635F62E3300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e73e1694-3851-3d79-bc0b-1b1acb8ed753.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:1f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ce:b8:73:3f:56:35:f6:2e:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=138098b6-ae30-4954-b817-4ad454eac468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:e4:17:a4:82:da:82:27:0a:7b:c5:43:5a: e9:68:c1:42:7c:aa:ee:13:80:bd:03:aa:02:72:e5: e2:de:87:7c:da:21:0e:76:57:7d:50:d4:30:c6:62: 31:3c:2f:dd:45:60:c2:58:65:ec:3a:59:3e:08:68: 90:6e:c8:14:1f:46:b6:a6:14:b9:ed:49:1f:8b:63: ee:69:72:6c:f0:12:2d:67:b5:a3:fb:03:ae:70:24: 92:9d:c1:ca:eb:7a:fa:4f:a4:9b:06:f9:f1:44:60: 68:c2:8b:e8:4c:20:67:17:0d:83:1a:5d:9c:a8:b1: 13:b0:7e:2b:05:2d:9a:47:d9:ef:f3:bc:6b:e8:4c: e9:84:ed:59:9a:36:1a:1f:ac:7e:7f:38:2b:4c:00: 1e:23:b4:9f:d3:6f:1a:ed:13:a6:54:9c:c7:15:6d: 68:2b:a8:18:e5:81:74:39:be:ff:d5:60:08:79:15: e1:c2:23:b0:cc:ce:31:15:75:0a:e0:b9:12:6e:36: ca:4e:80:00:02:02:24:1b:09:a1:5b:b1:af:29:fa: 34:68:d4:eb:c2:ca:e6:fb:8d:97:51:0c:72:c9:12: 4c:39:1f:a6:ab:b1:1b:ae:9d:23:3e:7b:45:fe:fd: 9b:25:2f:b7:a6:62:36:3b:97:42:e0:30:5e:05:1b: 95:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B0:83:FC:55:BD:96:22:A1:95:56:AA:FD:3B:3F:56:F5:82:FE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e73e1694-3851-3d79-bc0b-1b1acb8ed753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1f00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:7f:6c:3b:13:88:00:45:db:e5:c7:12:3b:09:fa:82:28:9e: 4d:b5:4b:57:71:1a:42:92:34:21:ff:09:a3:b5:aa:ca:1f:09: 9f:43:e1:c8:c1:9b:93:47:4c:e0:9f:d0:a2:5d:f9:d6:1a:11: 63:06:e1:6e:6a:de:e2:94:d0:6d:15:19:b6:e4:17:da:36:f4: 20:65:26:c7:53:4c:ac:77:74:9d:08:d4:74:2c:0a:5f:c3:c3: d0:8e:8b:e9:4f:5e:8a:03:72:d2:4a:c9:02:79:d1:30:c0:4f: 9a:63:22:a2:05:70:9d:65:60:1f:9c:97:c1:78:85:85:90:18: 9d:89:2e:3b:35:a8:93:1d:f0:1c:0b:77:15:b1:a2:94:ea:58: 09:f3:07:17:bf:9e:69:68:fc:c6:aa:76:66:96:fd:1e:5e:3a: 1e:17:fc:80:40:c2:ac:ea:b1:bc:39:9c:e6:5d:43:7a:23:c7: 0d:19:50:48:39:b8:61:1a:ae:32:a7:20:ce:ee:fd:21:d8:a3: d0:8f:74:f6:ab:87:ec:cc:b8:f5:e6:e2:bf:97:36:a1:2d:bb: e5:41:c8:08:b8:69:50:6c:7a:1b:e6:f1:9d:b3:71:2d:41:74: 04:2b:58:11:ff:52:96:30:47:67:19:24:6f:97:a9:68:72:69: b0:a8:47:e0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM64cz9WNfYuMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTM4MDk4YjYtYWUzMC00OTU0LWI4MTctNGFkNDU0ZWFjNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTnkF6SC2oInCnvFQ1rpaMFCfKruE4C9A6oC cuXi3od82iEOdld9UNQwxmIxPC/dRWDCWGXsOlk+CGiQbsgUH0a2phS57Ukfi2Pu aXJs8BItZ7Wj+wOucCSSncHK63r6T6SbBvnxRGBowovoTCBnFw2DGl2cqLETsH4r BS2aR9nv87xr6EzphO1ZmjYaH6x+fzgrTAAeI7Sf028a7ROmVJzHFW1oK6gY5YF0 Ob7/1WAIeRXhwiOwzM4xFXUK4LkSbjbKToAAAgIkGwmhW7GvKfo0aNTrwsrm+42X UQxyyRJMOR+mq7Ebrp0jPntF/v2bJS+3pmI2O5dC4DBeBRuVdwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIawg/xVvZYioZVWqv07P1b1gv4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTczZTE2OTQtMzg1MS0z ZDc5LWJjMGItMWIxYWNiOGVkNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAB8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcH9sOxOIAEXb5ccSOwn6giieTbVLV3EaQpI0If8Jo7Wqyh8Jn0Ph yMGbk0dM4J/Qol351hoRYwbhbmre4pTQbRUZtuQX2jb0IGUmx1NMrHd0nQjUdCwK X8PD0I6L6U9eigNy0krJAnnRMMBPmmMiogVwnWVgH5yXwXiFhZAYnYkuOzWokx3w HAt3FbGilOpYCfMHF7+eaWj8xqp2Zpb9Hl46Hhf8gEDCrOqxvDmc5l1DeiPHDRlQ SDm4YRquMqcgzu79Idij0I909quH7My49ebiv5c2oS275UHICLhpUGx6G+bxnbNx LUF0BCtYEf9SljBHZxkkb5epaHJpsKhH4A== -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:27 2025 by rpki-client