$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec3eca9b-03d7-300f-822a-3b44e00a104b.roa File: ec3eca9b-03d7-300f-822a-3b44e00a104b.roa (raw, json) Hash identifier: p2h/+QdBOnvpX51INKIsF3X9nErVaN9YHXcep2AyGP4= Subject key identifier: C6:8B:C0:28:40:24:E0:E3:14:5F:DC:3B:99:45:E0:DA:30:16:E5:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCE4C8C9C2A3EB21F4D58 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec3eca9b-03d7-300f-822a-3b44e00a104b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:1700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ce:4c:8c:9c:2a:3e:b2:1f:4d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e04fe92f-83d5-44f2-b045-c6478f142dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:19:4b:8a:8c:94:29:0b:e1:02:82:ce:d1:c7: c0:36:58:87:3d:b7:16:53:6e:f9:b3:dc:5b:b4:c4: 14:d0:b4:e4:9f:d8:82:7c:d4:e9:90:27:a0:49:c1: 31:6b:f8:48:8e:ec:ef:19:f3:41:ee:56:b8:45:29: c2:f0:08:f8:ba:7d:0f:af:40:e6:bf:aa:25:b4:73: e7:fb:46:84:ee:e5:4a:94:70:be:2a:fe:40:73:f2: 0b:51:1a:96:df:ec:23:db:60:23:f6:9f:51:21:14: 86:87:02:a5:28:ee:ad:54:21:ad:cd:24:d8:bd:f8: dc:1c:70:98:fc:50:b0:fa:be:19:c2:46:8e:84:d3: ce:fa:f7:f1:30:15:3f:70:bb:05:e7:5c:78:3a:9c: 34:2f:c7:0c:33:6a:64:87:e4:ea:24:0a:3b:9c:b7: bf:a1:e6:ce:e8:0a:7e:3c:2d:dd:8d:c0:cc:82:63: f8:bf:d4:c8:ed:57:64:e7:dd:54:9a:8e:6a:b2:3b: ae:23:62:78:29:d1:21:4f:07:c4:21:ff:1d:73:b0: d0:07:1f:ac:88:44:3b:a4:f6:7a:19:08:87:e4:79: b3:9d:e9:a9:13:1b:55:a9:82:95:9a:81:a9:72:43: 48:72:af:4d:36:b4:bd:50:54:1a:17:6f:85:bb:34: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:C0:28:40:24:E0:E3:14:5F:DC:3B:99:45:E0:DA:30:16:E5:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec3eca9b-03d7-300f-822a-3b44e00a104b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:85:1e:ee:98:c2:ad:24:c8:22:ef:79:7b:8e:a6:b8:b6:32: 98:96:d5:d4:52:9d:84:4d:02:78:c7:ed:79:27:8b:85:2b:8b: c3:50:84:19:46:2a:2e:3d:ae:ef:3b:64:ff:50:e3:64:83:4f: a0:86:fe:99:eb:75:fc:e7:42:f5:27:d2:62:ce:1e:ce:4d:65: 52:c8:54:24:ac:cf:37:84:57:ef:72:4e:23:f6:9e:89:c5:74: 27:5e:8f:c9:43:59:54:54:4b:9f:18:1a:e9:92:70:3c:19:a7: 61:db:ac:9e:c0:cd:74:95:8c:7e:13:d4:9e:f7:ab:e2:48:87: 93:02:4b:ac:4e:72:0d:64:df:d6:15:c1:69:0f:9d:79:83:fa: b7:51:eb:72:90:9b:11:e8:0e:7e:90:07:fe:ae:5b:c6:27:f7: f4:6d:0b:1b:9e:b5:06:e0:6e:b3:e6:74:1c:73:33:5e:07:f6: 86:84:11:41:8c:d9:34:cd:bf:bf:9d:72:a8:81:fb:ce:1c:30: d8:7c:1f:29:92:e4:91:b7:71:3f:4e:81:53:9b:f5:12:60:4e: 49:09:ce:da:b0:36:ba:b0:13:9c:74:a7:d5:87:a4:81:8c:07: 74:87:28:bf:8e:40:e2:b9:2e:65:f0:71:5e:4c:97:bf:af:fc: 56:b9:92:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM5MjJwqPrIfTVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZTA0ZmU5MmYtODNkNS00NGYyLWIwNDUtYzY0NzhmMTQyZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xlLioyUKQvhAoLO0cfANliHPbcWU275s9xb tMQU0LTkn9iCfNTpkCegScExa/hIjuzvGfNB7la4RSnC8Aj4un0Pr0Dmv6oltHPn +0aE7uVKlHC+Kv5Ac/ILURqW3+wj22Aj9p9RIRSGhwKlKO6tVCGtzSTYvfjcHHCY /FCw+r4ZwkaOhNPO+vfxMBU/cLsF51x4Opw0L8cMM2pkh+TqJAo7nLe/oebO6Ap+ PC3djcDMgmP4v9TI7Vdk591Umo5qsjuuI2J4KdEhTwfEIf8dc7DQBx+siEQ7pPZ6 GQiH5HmznempExtVqYKVmoGpckNIcq9NNrS9UFQaF2+FuzRexQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMaLwChAJODjFF/cO5lF4NowFuWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWMzZWNhOWItMDNkNy0z MDBmLTgyMmEtM2I0NGUwMGExMDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAP4Ue7pjCrSTIIu95e46muLYymJbV1FKdhE0CeMfteSeLhSuLw1CE GUYqLj2u7ztk/1DjZINPoIb+met1/OdC9SfSYs4ezk1lUshUJKzPN4RX73JOI/ae icV0J16PyUNZVFRLnxga6ZJwPBmnYdusnsDNdJWMfhPUnver4kiHkwJLrE5yDWTf 1hXBaQ+deYP6t1HrcpCbEegOfpAH/q5bxif39G0LG561BuBus+Z0HHMzXgf2hoQR QYzZNM2/v51yqIH7zhww2HwfKZLkkbdxP06BU5v1EmBOSQnO2rA2urATnHSn1Yek gYwHdIcov45A4rkuZfBxXkyXv6/8VrmSRg== -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:17 2025 by rpki-client