$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa File: e81ede32-402d-39a2-ac55-2465ea2716a5.roa (raw, json) Hash identifier: ju3hD1FAapGrxqJT6Q0bAxMm9zxeiuIzqMlrdbVtPjY= Subject key identifier: F7:40:DD:6B:EF:7A:D7:A8:D1:56:74:E1:43:10:87:5D:D7:56:A6:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFF71AB9108BEB0E7DD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ff:71:ab:91:08:be:b0:e7:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c141dffb-9bcf-4997-8664-7cb50884e292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9e:4a:0e:ab:58:36:bb:5b:8b:6b:8d:dd:6f: c1:0f:31:34:d3:d1:af:d2:3e:51:e9:81:9c:9a:96: 19:24:5f:f9:7f:ab:f2:a4:d8:9c:99:3b:cc:fd:a9: 14:85:23:64:25:81:05:f2:77:cd:2d:dd:c2:56:f0: ac:99:cf:ae:df:49:e7:5d:d1:bb:17:04:d2:3d:5e: 34:f5:d6:f4:f3:ee:c6:b2:e9:f9:41:7f:82:0d:2f: 67:7a:b4:f1:2b:31:07:fa:b9:b0:44:5f:73:c0:0a: b0:27:19:9b:b1:e7:21:1f:b7:0f:ce:be:1a:7a:eb: 4f:45:8c:d2:5a:ed:3b:b0:1d:99:03:c0:3f:c4:77: 91:a1:b2:21:70:75:47:22:c2:c8:b0:10:0e:02:ee: a5:3c:c7:9b:ff:52:e1:ee:ec:fb:db:11:20:24:64: 08:f2:3b:6e:39:6e:cd:bb:85:68:11:75:0b:ad:ad: 2c:b3:36:54:95:10:09:8c:f2:57:31:eb:e7:ab:af: f0:86:21:02:1e:93:68:03:ca:1f:54:bf:a1:e7:2c: 40:64:97:98:f0:4f:bf:41:7d:14:75:38:e1:fb:e7: 2d:55:c8:3d:a5:7d:d0:a3:c2:fe:02:fa:38:12:5d: d0:94:01:df:54:9a:84:68:aa:23:e3:1e:80:5e:81: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:40:DD:6B:EF:7A:D7:A8:D1:56:74:E1:43:10:87:5D:D7:56:A6:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:98:62:91:c0:0a:8f:29:38:9c:d0:f6:0f:e1:8f:36:1f:cf: 5d:38:6d:44:9e:06:ec:89:ad:83:4d:20:39:2c:d7:17:29:7b: b7:65:92:6c:80:35:ff:7a:c7:2a:85:20:52:3e:e6:d0:b1:84: 6c:1a:b8:b2:59:ee:fb:8a:46:fd:55:4b:2f:c1:c3:cc:90:2c: 57:76:db:fb:c1:cb:46:83:f0:70:51:e8:2b:df:01:12:6f:0c: cb:63:9a:a2:bb:83:76:82:5f:e8:55:6d:ea:7e:b9:76:d2:a2: 1d:be:77:c9:b3:e9:1c:00:a7:ef:29:34:a9:d0:37:6f:60:7b: 3b:35:d2:d8:d4:ba:f0:84:0d:7b:e6:ac:5e:3b:59:48:1a:c9: be:fe:89:cb:02:f9:20:d9:e2:1b:3e:db:ac:a2:c2:0d:79:cd: 60:fa:00:5d:ef:29:5c:fb:97:b9:de:c7:cb:80:9d:25:d5:1b: 5b:06:03:61:97:a0:7e:f0:5e:ae:27:b6:b3:3c:03:e9:42:f5: d2:ce:2d:e5:68:05:22:3a:75:c0:94:d6:70:8e:0d:3a:c1:f0: 84:e9:94:4c:0b:8c:85:38:48:a3:13:43:65:4c:4f:6c:a4:91: 6f:e2:ec:10:98:ba:45:db:24:c6:f2:f8:53:e9:61:2a:77:02: f7:52:11:85 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXP9xq5EIvrDn3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzE0MWRmZmItOWJjZi00OTk3LTg2NjQtN2NiNTA4ODRlMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ5KDqtYNrtbi2uN3W/BDzE009Gv0j5R6YGc mpYZJF/5f6vypNicmTvM/akUhSNkJYEF8nfNLd3CVvCsmc+u30nnXdG7FwTSPV40 9db08+7Gsun5QX+CDS9nerTxKzEH+rmwRF9zwAqwJxmbsechH7cPzr4aeutPRYzS Wu07sB2ZA8A/xHeRobIhcHVHIsLIsBAOAu6lPMeb/1Lh7uz72xEgJGQI8jtuOW7N u4VoEXULra0sszZUlRAJjPJXMevnq6/whiECHpNoA8ofVL+h5yxAZJeY8E+/QX0U dTjh++ctVcg9pX3Qo8L+Avo4El3QlAHfVJqEaKoj4x6AXoE3sQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPdA3Wvveteo0VZ04UMQh13XVqYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgxZWRlMzItNDAyZC0z OWEyLWFjNTUtMjQ2NWVhMjcxNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfZhikcAKjyk4nND2D+GPNh/PXThtRJ4G7Imtg00gOSzXFyl7t2WS bIA1/3rHKoUgUj7m0LGEbBq4slnu+4pG/VVLL8HDzJAsV3bb+8HLRoPwcFHoK98B Em8My2OaoruDdoJf6FVt6n65dtKiHb53ybPpHACn7yk0qdA3b2B7OzXS2NS68IQN e+asXjtZSBrJvv6JywL5INniGz7brKLCDXnNYPoAXe8pXPuXud7Hy4CdJdUbWwYD YZegfvBerie2szwD6UL10s4t5WgFIjp1wJTWcI4NOsHwhOmUTAuMhThIoxNDZUxP bKSRb+LsEJi6RdskxvL4U+lhKncC91IRhQ== -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:43 2025 by rpki-client