$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa File: e872bf65-3c44-37d5-974f-d352d3753c1e.roa (raw, json) Hash identifier: DEtaPYdJxzTsH5HWI8r8ky6UXxuY/RqlxgzSM8uMrb8= Subject key identifier: C0:F1:60:97:70:D4:9B:8C:1A:E9:55:3C:7D:BA:78:F5:10:9E:0D:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCF0E1CEA1736401BD980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:2c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cf:0e:1c:ea:17:36:40:1b:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3c7bb511-b9b6-44d8-a835-2dfb12cf728e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:12:af:ea:65:57:41:0d:c3:64:f8:f1:17: 0a:8e:6d:fd:28:11:ca:3a:10:aa:7a:cc:fa:09:ee: a6:e2:11:f5:05:ff:03:66:d5:10:cc:c1:a1:66:b6: be:90:90:4e:94:57:08:a9:e1:e7:9d:3c:19:e1:47: 41:a2:04:a2:7f:91:00:ea:17:1a:24:ec:f4:b8:59: e4:7f:49:83:c5:a5:66:6b:63:07:a3:c6:0e:99:53: 14:38:46:3b:c6:de:af:2e:8d:73:f1:2c:bc:4e:2e: 2d:e7:d4:29:2e:8b:32:bd:02:f7:9a:c1:7d:ed:28: af:ef:c1:2c:8e:c8:dc:15:ed:c3:98:88:85:f9:f9: f4:77:65:79:29:0e:96:e3:4e:ee:63:e8:77:45:20: 90:a6:ee:a4:a8:e4:0f:63:8e:10:c0:74:7b:50:04: dd:8b:f4:b4:97:a2:1e:83:c7:65:2b:f1:fb:dc:05: bd:5c:df:3f:70:dc:4e:4c:0f:6d:a4:d0:00:25:d8: 26:99:89:11:b2:ed:4b:c9:0b:61:82:46:bc:d8:4c: 79:89:29:88:3c:87:46:11:99:d2:bb:f9:a0:c0:7c: 90:bd:3a:b8:0f:40:c2:3e:bc:92:c9:cf:5e:e8:09: a1:d6:46:22:b7:31:9a:a6:cb:ac:5b:5c:04:e7:42: 44:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F1:60:97:70:D4:9B:8C:1A:E9:55:3C:7D:BA:78:F5:10:9E:0D:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:af:b4:47:b3:9e:37:4b:3e:c2:2f:5e:66:76:ef:36:a2:9e: 70:cd:e2:61:fd:40:31:3b:60:31:a2:1b:fd:9c:e7:97:b0:11: 31:c9:51:68:70:a8:7a:39:b6:17:3b:7d:5f:4c:b8:c9:93:2a: f7:11:ab:a6:f3:b8:e2:f2:60:de:2c:b2:93:96:36:1f:88:a1: bf:5d:8f:be:10:53:99:18:52:14:9a:68:f9:fd:03:dd:c6:ce: 13:5a:eb:ba:dd:e7:44:1e:b9:53:ed:63:fd:57:10:78:05:d1: f2:24:bf:ef:a8:cc:bc:e7:f9:97:18:29:5b:65:33:0b:1d:2a: 1f:8c:9b:c0:db:b3:90:d1:d9:16:ad:a3:67:2a:63:0f:be:b8: 54:13:14:50:2d:ac:75:2e:21:5c:3e:02:ad:94:4a:a1:80:8f: 7b:97:70:27:45:06:b8:65:ba:26:13:22:2d:61:93:4a:5f:29: 92:29:7d:26:17:df:c3:3b:17:8e:83:b4:eb:f5:e1:5e:04:9e: 98:a0:69:41:bd:78:aa:73:32:2e:7c:77:02:c0:a0:d3:5f:d7: a9:99:1b:b2:76:f0:46:49:1c:a2:db:5c:d1:af:9e:21:88:50: de:94:c3:3e:14:c1:ce:b2:a4:5d:51:52:59:b5:1a:4f:d0:10: 01:00:0e:c8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM8OHOoXNkAb2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk M2M3YmI1MTEtYjliNi00NGQ4LWE4MzUtMmRmYjEyY2Y3MjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXQSr+plV0ENw2T48RcKjm39KBHKOhCqesz6 Ce6m4hH1Bf8DZtUQzMGhZra+kJBOlFcIqeHnnTwZ4UdBogSif5EA6hcaJOz0uFnk f0mDxaVma2MHo8YOmVMUOEY7xt6vLo1z8Sy8Ti4t59QpLosyvQL3msF97Siv78Es jsjcFe3DmIiF+fn0d2V5KQ6W407uY+h3RSCQpu6kqOQPY44QwHR7UATdi/S0l6Ie g8dlK/H73AW9XN8/cNxOTA9tpNAAJdgmmYkRsu1LyQthgka82Ex5iSmIPIdGEZnS u/mgwHyQvTq4D0DCPrySyc9e6Amh1kYitzGapsusW1wE50JEowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMDxYJdw1JuMGulVPH26ePUQng2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTg3MmJmNjUtM2M0NC0z N2Q1LTk3NGYtZDM1MmQzNzUzYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAD6+0R7OeN0s+wi9eZnbvNqKecM3iYf1AMTtgMaIb/Zznl7ARMclR aHCoejm2Fzt9X0y4yZMq9xGrpvO44vJg3iyyk5Y2H4ihv12PvhBTmRhSFJpo+f0D 3cbOE1rrut3nRB65U+1j/VcQeAXR8iS/76jMvOf5lxgpW2UzCx0qH4ybwNuzkNHZ Fq2jZypjD764VBMUUC2sdS4hXD4CrZRKoYCPe5dwJ0UGuGW6JhMiLWGTSl8pkil9 JhffwzsXjoO06/XhXgSemKBpQb14qnMyLnx3AsCg01/XqZkbsnbwRkkcottc0a+e IYhQ3pTDPhTBzrKkXVFSWbUaT9AQAQAOyA== -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:34 2025 by rpki-client