$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa File: 14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa (raw, json) Hash identifier: jMpAmJR4jsc//QjPhZglmjw0mPayIR9ZC+C0CgD5fWA= Subject key identifier: 05:DE:A3:49:5B:B0:3D:29:17:B0:55:09:E4:1D:7F:ED:D5:F9:20:48 Certificate issuer: /CN=cb49febe-7885-4a3a-8290-3710b3f34905 Certificate serial: 010D0C9F4328584BB02CFDD26A670D823DFA3378 Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 376 IP address blocks: 2001:510:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:fd:d2:6a:67:0d:82:3d:fa:33:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=46aa92f6-8b1b-4e8e-9f25-8cfb76d1a5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:20:e4:c0:d2:e9:4e:a1:6a:3b:0a:a6:98: 67:aa:d8:7b:d2:5c:7e:1d:1e:4f:4d:b9:10:84:3e: 19:58:55:7c:ce:01:35:80:54:89:7c:72:3d:45:c8: 02:bd:1b:93:87:5c:cf:c5:56:89:15:1d:ce:0a:55: e6:ae:49:28:55:af:0d:be:fe:c1:66:db:c6:43:5c: 01:80:1c:52:8c:b3:69:bf:24:8d:9c:a2:7f:d3:32: 7c:b1:c5:8f:f1:d9:4c:13:56:99:5f:ea:8e:34:80: 78:9c:2d:29:77:90:6d:20:cb:c9:c0:fb:2f:be:a2: c5:31:26:e6:1a:7e:f3:ef:f0:f5:c0:58:79:e8:ca: 45:e6:6d:c2:c8:70:5c:96:00:fb:31:ec:7b:80:36: c2:f8:84:47:6c:50:f4:f1:05:df:62:59:d1:95:e8: 09:c8:77:f9:c8:fb:fd:7c:e4:9d:2f:83:2e:69:00: da:c9:c8:cf:d3:3b:f8:a8:52:52:de:e5:00:f7:79: b3:99:93:ab:fe:c1:05:46:d4:10:02:a8:4f:fd:95: a7:63:f9:ac:e2:c2:4b:9f:91:5b:54:fe:4b:5b:9e: 90:ad:7e:1b:43:69:d3:df:09:8c:59:50:ed:c0:89: 86:b3:52:fd:f8:02:bb:1b:cc:a4:a2:0d:d1:ff:a6: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DE:A3:49:5B:B0:3D:29:17:B0:55:09:E4:1D:7F:ED:D5:F9:20:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl X509v3 Authority Key Identifier: keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer sbgp-ipAddrBlock: critical IPv6: 2001:510:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:48:4a:fc:61:16:72:1a:50:0f:5e:0f:86:5b:35:6b:6c:9b: 11:46:eb:e5:9b:35:16:dd:43:56:50:13:d3:58:9c:5f:73:f4: 69:72:5b:d7:72:6b:77:a8:ed:36:81:dd:8d:1b:8d:7d:f9:cd: d9:f0:f2:8b:d9:87:1b:10:12:e1:ab:bd:0c:10:22:40:9d:3d: f1:7e:fd:63:64:c5:7e:6c:1e:03:88:3e:e2:23:39:e9:98:7c: c2:4d:75:86:05:d8:0e:88:2e:54:fe:b4:ad:13:ec:2a:8c:e3: 80:19:4c:b6:de:0f:e9:82:86:e3:33:ea:25:3d:c5:00:36:c3: 54:c1:c2:df:af:b8:ce:99:11:26:97:d1:5b:c3:fa:86:ed:4c: a1:53:64:a0:d2:42:7d:af:e4:f4:80:e4:fa:0c:c5:e3:05:61: b6:19:38:b6:45:dc:e9:d7:f7:29:23:d6:6e:95:ce:7e:1e:0c: cd:1d:64:05:10:03:5f:a0:c6:25:7f:67:b5:fa:51:53:a5:6a: 94:e7:ec:2e:bc:37:f4:2c:5d:eb:a3:44:03:46:c9:d5:a2:ed: 00:81:b0:71:b4:4b:b8:c7:ea:e2:97:31:0b:56:fe:0a:d0:0e: f2:ef:fb:fd:ff:ee:00:71:f9:d9:bd:d2:35:ac:fc:e6:59:fd: 67:7e:5c:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuwLP3SamcNgj36M3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OWZlYmUtNzg4NS00YTNhLTgyOTAtMzcxMGIzZjM0 OTA1MB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NDZhYTkyZjYtOGIxYi00ZThlLTlmMjUtOGNmYjc2ZDFhNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTAg5MDS6U6hajsKpphnqth70lx+HR5PTbkQ hD4ZWFV8zgE1gFSJfHI9RcgCvRuTh1zPxVaJFR3OClXmrkkoVa8Nvv7BZtvGQ1wB gBxSjLNpvySNnKJ/0zJ8scWP8dlME1aZX+qONIB4nC0pd5BtIMvJwPsvvqLFMSbm Gn7z7/D1wFh56MpF5m3CyHBclgD7Mex7gDbC+IRHbFD08QXfYlnRlegJyHf5yPv9 fOSdL4MuaQDaycjP0zv4qFJS3uUA93mzmZOr/sEFRtQQAqhP/ZWnY/ms4sJLn5Fb VP5LW56QrX4bQ2nT3wmMWVDtwImGs1L9+AK7G8ykog3R/6bw5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAXeo0lbsD0pF7BVCeQdf+3V+SBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5 ZmViZS03ODg1LTRhM2EtODI5MC0zNzEwYjNmMzQ5MDUvMTRiNmIwZTQtOGM1MC0z YThkLWI3MjEtMGY0MDIzYTBjNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2I0OWZlYmUtNzg4NS00YTNhLTgy OTAtMzcxMGIzZjM0OTA1L2NiNDlmZWJlLTc4ODUtNGEzYS04MjkwLTM3MTBiM2Yz NDkwNS5jcmwwHwYDVR0jBBgwFoAUvOGzZkw5m0aMDRmG67KX3JfQGd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5ZmViZS03ODg1LTRhM2EtODI5MC0zNzEw YjNmMzQ5MDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFEAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJISvxhFnIaUA9eD4ZbNWtsmxFG6+WbNRbdQ1ZQE9NYnF9z9Gly W9dya3eo7TaB3Y0bjX35zdnw8ovZhxsQEuGrvQwQIkCdPfF+/WNkxX5sHgOIPuIj OemYfMJNdYYF2A6ILlT+tK0T7CqM44AZTLbeD+mChuMz6iU9xQA2w1TBwt+vuM6Z ESaX0VvD+obtTKFTZKDSQn2v5PSA5PoMxeMFYbYZOLZF3OnX9ykj1m6Vzn4eDM0d ZAUQA1+gxiV/Z7X6UVOlapTn7C68N/QsXeujRANGydWi7QCBsHG0S7jH6uKXMQtW /grQDvLv+/3/7gBx+dm90jWs/OZZ/Wd+XEg= -----END CERTIFICATE-----Generated at Mon Nov 3 14:29:40 2025 by rpki-client