$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa File: f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa (raw, json) Hash identifier: NXdXlIbafG7uk+EoFHn18COH30/twcYjbHjP+NSRc1w= Subject key identifier: 4C:9B:D6:D1:E5:54:1B:91:18:F8:BB:30:27:01:83:1E:E8:A1:1A:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCC8A1CE2D91C6DA11A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cc:8a:1c:e2:d9:1c:6d:a1:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=4d0b3902-3e51-4161-8ed0-77fe73e1ba68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:68:54:1e:8d:b0:83:aa:8a:1e:6a:15:d3:12: e1:39:5f:fa:f0:c1:99:5d:5e:85:4c:3c:82:56:2b: e8:9e:71:a6:61:40:55:3d:25:4a:12:5b:e5:e0:cb: 1c:cd:0e:6d:ec:d6:04:37:b9:46:a1:ae:2c:36:16: a0:c7:8c:6a:4e:41:45:62:22:5a:ce:ee:ea:df:55: 89:3d:30:64:48:85:e5:16:5b:b0:16:96:38:35:90: d2:f8:bb:a6:a7:31:8e:3a:25:b7:33:e9:b5:1a:cc: 0e:66:1b:ac:10:d8:f7:11:73:35:6d:1b:1f:ca:d2: d5:75:c2:a9:c4:2c:c6:c7:25:9a:ee:d4:d8:45:fa: f2:f4:e9:f0:8f:c6:23:47:13:ac:05:cc:d6:97:61: e5:a9:2b:bf:e6:81:70:a4:1e:6e:23:06:c2:0c:e0: 45:31:93:a3:9d:1c:b6:43:02:3a:ec:f5:e1:de:81: 20:43:d4:10:11:16:c7:27:68:c0:83:5e:80:f5:0c: d5:a3:c1:d8:37:f7:45:08:aa:04:d2:f6:0d:82:65: 1d:ff:72:a3:4a:20:63:ac:77:49:e7:84:13:f5:1d: d8:07:e6:de:d8:75:21:27:24:e7:ea:3d:5e:80:87: 53:04:3c:2d:0a:c4:17:a3:6a:86:5a:c7:76:24:b4: ae:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9B:D6:D1:E5:54:1B:91:18:F8:BB:30:27:01:83:1E:E8:A1:1A:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0a:35:64:42:76:02:6c:0f:c1:1b:a1:49:6a:b6:fc:6f:29: a0:65:92:5c:28:50:97:2b:1c:79:3c:08:17:1f:95:d6:65:82: 91:ef:61:f8:5b:ec:7a:35:b3:e2:9a:c1:38:64:5b:77:e1:ad: 07:fe:9f:5f:b9:4e:f5:80:fb:fd:88:39:c7:26:b7:e4:af:38: 83:a6:e9:59:35:49:e3:aa:b3:11:a3:5c:70:97:cd:93:7b:e4: f1:c5:3e:ad:23:96:ae:4d:ea:d7:38:a4:8d:3c:ce:71:e8:a6: a5:a3:1d:8d:09:56:69:87:76:38:c7:37:a3:3d:29:b6:67:e7: 17:35:7a:e4:49:c1:45:f2:7c:cf:b4:07:a8:ed:22:5a:fe:3c: bf:34:d6:c0:35:43:01:b3:b3:14:53:07:1c:a3:3e:89:ee:35: 20:56:c2:10:ee:42:19:37:83:23:c9:c5:a0:3f:e7:51:79:c4: f2:29:24:23:fe:59:61:65:cb:7a:b5:86:93:ae:99:a7:22:32: d4:33:d6:b1:17:24:46:a1:bc:10:ed:12:05:bf:fb:f7:8c:d2: b5:17:a2:13:c0:46:9b:28:58:ad:03:54:d4:dc:c6:d3:b8:68: 7b:2d:33:ed:5b:c4:64:57:b4:4b:3f:f1:ee:13:f4:5b:b2:f1: f1:25:93:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXMyKHOLZHG2hGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NGQwYjM5MDItM2U1MS00MTYxLThlZDAtNzdmZTczZTFiYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGhUHo2wg6qKHmoV0xLhOV/68MGZXV6FTDyC VivonnGmYUBVPSVKElvl4MsczQ5t7NYEN7lGoa4sNhagx4xqTkFFYiJazu7q31WJ PTBkSIXlFluwFpY4NZDS+LumpzGOOiW3M+m1GswOZhusENj3EXM1bRsfytLVdcKp xCzGxyWa7tTYRfry9Onwj8YjRxOsBczWl2HlqSu/5oFwpB5uIwbCDOBFMZOjnRy2 QwI67PXh3oEgQ9QQERbHJ2jAg16A9QzVo8HYN/dFCKoE0vYNgmUd/3KjSiBjrHdJ 54QT9R3YB+be2HUhJyTn6j1egIdTBDwtCsQXo2qGWsd2JLSuSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEyb1tHlVBuRGPi7MCcBgx7ooRqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjE0N2FiOWEtNzFmYy0z YjAzLThjZDctYzhkNTczNjI5YTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQKNWRCdgJsD8EboUlqtvxvKaBlklwoUJcrHHk8CBcfldZlgpHv Yfhb7Ho1s+KawThkW3fhrQf+n1+5TvWA+/2IOccmt+SvOIOm6Vk1SeOqsxGjXHCX zZN75PHFPq0jlq5N6tc4pI08znHopqWjHY0JVmmHdjjHN6M9KbZn5xc1euRJwUXy fM+0B6jtIlr+PL801sA1QwGzsxRTBxyjPonuNSBWwhDuQhk3gyPJxaA/51F5xPIp JCP+WWFly3q1hpOumaciMtQz1rEXJEahvBDtEgW/+/eM0rUXohPARpsoWK0DVNTc xtO4aHstM+1bxGRXtEs/8e4T9Fuy8fElk5o= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:40 2025 by rpki-client