$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa File: f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa (raw, json) Hash identifier: ngRNHejEWNu7H8Pau2Rx7vnbsx0cb5SyLPyozjpbv0w= Subject key identifier: 49:2C:DF:51:03:7A:E2:D2:67:E4:70:35:32:E1:03:5B:B4:1C:3B:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFEFDA329F6C196717200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fe:fd:a3:29:f6:c1:96:71:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c6914a89-11bd-4ed9-a2bb-f00ac79119a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:b2:68:cb:9c:3e:f2:46:82:8e:fa:13:41: c5:a8:a4:ba:a1:ef:2c:fb:b1:74:5b:7f:52:5d:e3: 8a:9e:be:11:7b:4b:19:b6:5b:72:4c:54:25:9a:2d: c7:b4:86:c2:51:57:97:41:55:ae:23:bb:ce:3d:d6: 5a:ae:80:ef:e6:2b:3f:87:1b:07:7e:f6:f9:1b:3f: 6d:e8:65:3d:cb:44:2a:68:20:5c:99:42:ec:98:26: 56:23:8b:1e:8a:85:37:20:f7:18:08:74:61:49:1c: 88:d0:73:07:1e:73:0d:bc:53:61:1a:b9:97:17:2f: 9e:a9:6f:e7:e5:c6:be:da:84:40:4e:b4:da:e5:fd: 20:fb:79:3f:ce:39:09:27:1d:a2:d0:92:14:27:ab: e4:dd:a2:5f:5a:75:96:46:86:1b:69:ee:85:96:7f: 58:da:e9:0c:8e:d1:53:c7:46:6f:1b:be:df:91:5d: e7:94:60:9d:84:41:2e:06:87:d7:8e:35:3e:6c:0b: 4f:6e:ec:07:e1:ef:a3:80:59:a5:59:95:64:6f:c0: a9:c4:04:97:35:3b:0f:aa:8c:2e:24:d1:b3:3d:6b: 19:19:c0:81:16:74:70:7b:91:10:ad:41:ec:c5:68: 0d:97:72:b9:66:5b:e1:8c:77:b2:f9:e4:60:e0:91: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2C:DF:51:03:7A:E2:D2:67:E4:70:35:32:E1:03:5B:B4:1C:3B:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:25::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:95:61:ce:2c:55:3a:1a:c2:1c:91:4d:90:82:9d:83:bb:bd: 6e:19:ac:64:0d:08:4c:9b:dd:88:f3:36:59:ca:1b:5f:9a:ce: 4a:a2:f6:9e:90:d8:f1:0c:6e:07:e6:bf:a6:75:13:07:57:9c: b2:6d:d0:9c:31:ce:93:20:1b:ea:2e:56:4a:65:eb:4b:e2:b2: 75:28:1c:49:6f:38:f7:48:1d:eb:84:a1:fa:1f:5f:c3:ba:a0: a6:bd:b6:b7:e6:9e:86:db:9b:36:e2:3c:7c:b3:50:38:74:05: 67:7d:77:44:09:75:c9:0e:48:57:31:fd:ee:6f:12:cc:49:5c: 4a:1d:91:8e:36:0d:3c:42:73:de:2f:95:b6:e9:d1:48:94:27: ec:7d:95:93:78:16:5c:20:d8:66:75:d5:c5:ce:3f:11:70:93: c7:05:e0:ed:fa:4a:dd:6c:68:0d:5c:e7:12:fe:b0:ee:04:ff: 28:d1:46:17:95:d8:5c:44:99:aa:53:3c:40:4c:13:ce:2a:b2: eb:36:8e:d0:1e:de:cf:78:54:fa:78:63:0c:fa:e2:17:06:e1: c4:08:9e:9a:ed:48:d6:fb:e9:59:9d:25:75:21:75:e5:75:59: 78:ff:06:a9:ae:b4:53:c2:ed:7c:d3:fb:af:12:1b:ab:28:a1: b3:c3:ad:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXP79oyn2wZZxcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzY5MTRhODktMTFiZC00ZWQ5LWEyYmItZjAwYWM3OTExOWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGyyaMucPvJGgo76E0HFqKS6oe8s+7F0W39S XeOKnr4Re0sZtltyTFQlmi3HtIbCUVeXQVWuI7vOPdZaroDv5is/hxsHfvb5Gz9t 6GU9y0QqaCBcmULsmCZWI4seioU3IPcYCHRhSRyI0HMHHnMNvFNhGrmXFy+eqW/n 5ca+2oRATrTa5f0g+3k/zjkJJx2i0JIUJ6vk3aJfWnWWRoYbae6Fln9Y2ukMjtFT x0ZvG77fkV3nlGCdhEEuBofXjjU+bAtPbuwH4e+jgFmlWZVkb8CpxASXNTsPqowu JNGzPWsZGcCBFnRwe5EQrUHsxWgNl3K5ZlvhjHey+eRg4JHKvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEks31EDeuLSZ+RwNTLhA1u0HDsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjk5YWNjOTUtMjFjOS0z YTVlLWJiMjMtYTZiNThiMGM0YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFuVYc4sVToawhyRTZCCnYO7vW4ZrGQNCEyb3YjzNlnKG1+azkqi 9p6Q2PEMbgfmv6Z1EwdXnLJt0JwxzpMgG+ouVkpl60visnUoHElvOPdIHeuEofof X8O6oKa9trfmnobbmzbiPHyzUDh0BWd9d0QJdckOSFcx/e5vEsxJXEodkY42DTxC c94vlbbp0UiUJ+x9lZN4Flwg2GZ11cXOPxFwk8cF4O36St1saA1c5xL+sO4E/yjR RheV2FxEmapTPEBME84qsus2jtAe3s94VPp4Ywz64hcG4cQInprtSNb76VmdJXUh deV1WXj/BqmutFPC7XzT+68SG6soobPDrRs= -----END CERTIFICATE-----Generated at Fri Oct 10 19:54:21 2025 by rpki-client