$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa File: f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa (raw, json) Hash identifier: Me1Dau37zi9/edraadSuQOcdhJ3vhUyT/WK6Riku0w0= Subject key identifier: 9F:69:1C:CB:F9:B6:99:BF:A0:AD:EA:10:D0:E6:63:3D:5F:DD:24:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCB8BDBF903CEED68C700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cb:8b:db:f9:03:ce:ed:68:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=55932820-5249-41eb-8438-2603ae5b9af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:96:a4:fa:8b:d9:48:d3:5f:0b:a7:1e:96: 63:e7:05:ad:a5:31:09:6a:59:8b:f7:41:b8:ae:b1: 05:a3:ce:cc:b1:a4:99:60:0d:3d:ab:9f:52:08:e3: 48:43:b4:d6:9c:36:c5:6b:43:98:83:e2:8d:0a:03: 7a:9c:b0:28:1f:4b:39:29:ec:51:15:7c:83:c7:8b: e2:ac:b5:b8:cc:85:3f:1f:d1:e5:90:74:9a:35:48: b1:f9:70:35:f5:c2:5e:43:b3:eb:4c:73:22:20:0c: d1:bf:b7:c4:df:09:d0:25:1f:4e:82:38:78:2f:c3: 86:52:3e:29:2e:23:03:b5:a3:81:60:1c:55:39:eb: 0e:4d:8f:f7:70:68:3d:11:c0:38:6e:55:ab:ea:29: 04:05:6f:c2:03:24:d3:be:08:fd:70:0e:20:c9:71: f0:50:fc:58:bd:ff:4d:4f:fa:49:41:5b:3a:16:ed: 47:25:06:a8:b9:0a:df:b8:97:4d:be:40:97:70:42: 00:ef:a6:4d:cd:c3:12:89:78:b0:e1:1b:4c:26:65: 59:1d:4a:b0:cc:69:75:11:8f:2c:ff:d8:91:72:f8: 82:29:61:25:49:81:dc:27:19:a8:f7:4d:79:00:1d: 97:47:58:04:6b:3b:22:8d:54:f3:5b:62:9a:b4:0a: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:69:1C:CB:F9:B6:99:BF:A0:AD:EA:10:D0:E6:63:3D:5F:DD:24:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:74:89:7c:0f:38:f5:07:f9:46:b9:45:81:cd:68:e7:54:4c: 80:f8:23:40:d5:be:3b:5a:36:c5:08:82:3d:b8:8a:a0:88:9e: a7:fa:93:e0:f8:44:8b:97:e6:2f:d3:67:2c:d2:30:a8:67:62: c4:a4:b6:1e:5a:e2:ca:53:23:68:d6:54:ae:04:32:22:e7:00: 5b:c5:b0:3a:ce:35:50:15:f9:94:be:80:e8:78:16:18:b3:ea: 73:26:f7:ae:70:c8:cf:a3:60:54:7b:29:e7:58:a4:82:63:a9: 87:2d:dc:ed:01:5f:23:32:c9:2a:c4:ae:61:14:43:ff:43:d0: db:45:96:7c:40:6e:fe:27:1b:51:3a:43:8a:53:50:98:e2:02: 40:16:67:37:d1:9d:4c:56:3d:12:f4:cd:46:47:cc:7a:60:f2: 0a:de:c5:02:e5:20:e7:2b:99:3e:8d:cc:93:9f:f8:56:2d:d1: 83:c5:64:43:ab:a0:2f:80:f6:95:6f:0a:32:48:8f:97:14:e3: 14:1c:05:ed:44:a4:ac:df:d9:ed:82:d3:5e:2c:08:53:64:09: c8:4d:d1:0b:5d:cd:a0:15:aa:e6:4b:4b:aa:97:8c:34:28:bc: f4:c2:ec:fd:e0:a6:4e:96:7b:79:99:2e:fe:b4:35:b2:85:65: c3:83:77:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXMuL2/kDzu1oxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTU5MzI4MjAtNTI0OS00MWViLTg0MzgtMjYwM2FlNWI5YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3KWpPqL2UjTXwunHpZj5wWtpTEJalmL90G4 rrEFo87MsaSZYA09q59SCONIQ7TWnDbFa0OYg+KNCgN6nLAoH0s5KexRFXyDx4vi rLW4zIU/H9HlkHSaNUix+XA19cJeQ7PrTHMiIAzRv7fE3wnQJR9Ogjh4L8OGUj4p LiMDtaOBYBxVOesOTY/3cGg9EcA4blWr6ikEBW/CAyTTvgj9cA4gyXHwUPxYvf9N T/pJQVs6Fu1HJQaouQrfuJdNvkCXcEIA76ZNzcMSiXiw4RtMJmVZHUqwzGl1EY8s /9iRcviCKWElSYHcJxmo9015AB2XR1gEazsijVTzW2KatAqZNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9pHMv5tpm/oK3qENDmYz1f3STSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjhlYjRlYTMtNGJkMi0z MGYxLWE1OGEtMjI3NGM5NTFhNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH90iXwPOPUH+Ua5RYHNaOdUTID4I0DVvjtaNsUIgj24iqCInqf6 k+D4RIuX5i/TZyzSMKhnYsSkth5a4spTI2jWVK4EMiLnAFvFsDrONVAV+ZS+gOh4 Fhiz6nMm965wyM+jYFR7KedYpIJjqYct3O0BXyMyySrErmEUQ/9D0NtFlnxAbv4n G1E6Q4pTUJjiAkAWZzfRnUxWPRL0zUZHzHpg8grexQLlIOcrmT6NzJOf+FYt0YPF ZEOroC+A9pVvCjJIj5cU4xQcBe1EpKzf2e2C014sCFNkCchN0QtdzaAVquZLS6qX jDQovPTC7P3gpk6We3mZLv60NbKFZcODd+Y= -----END CERTIFICATE-----Generated at Sat Oct 11 00:00:28 2025 by rpki-client