$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/018ed7bc-9068-32f2-8dad-68121983806b.roa File: 018ed7bc-9068-32f2-8dad-68121983806b.roa (raw, json) Hash identifier: E9WUlBQhDqJETDFsIQztzzwIghm4oQF+I2tZ+0CnOrk= Subject key identifier: 7D:E2:D9:7C:67:C6:97:7F:64:A6:28:35:77:03:98:14:99:B9:98:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D00F883D9B93C99D73E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/018ed7bc-9068-32f2-8dad-68121983806b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:00:f8:83:d9:b9:3c:99:d7:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=25621d90-a020-4639-914f-4989a18de345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e1:a9:43:f2:0f:e9:9e:46:c2:1a:6f:f2:40: 64:e1:b2:ec:27:f1:dd:72:06:e8:0c:99:26:a7:8d: 9f:9e:4c:bb:78:f6:3f:27:13:c4:b4:f8:3b:ff:ef: af:c6:25:dc:da:ab:0d:3a:d5:47:09:49:45:1a:ef: 3f:de:c3:c4:29:79:1a:0c:92:72:4c:55:2e:19:df: 1b:7b:07:26:57:c1:96:7a:dd:88:ec:36:5a:bd:5f: 99:8d:96:e6:b1:c8:f3:78:c4:11:81:eb:e7:60:50: 50:26:a0:25:01:c5:38:89:bd:3b:9e:25:95:1c:0b: c7:18:05:9a:6a:5e:51:fe:dc:49:ce:36:1f:0b:0b: 53:95:f8:e2:f0:50:d7:7e:2e:78:8a:92:a6:0d:5d: 00:e1:93:74:f6:93:37:98:ad:b4:62:98:3a:e6:68: 40:a5:ed:04:84:d9:c2:54:96:11:02:ee:25:ee:0e: 16:09:a0:0e:75:9b:f2:80:37:f0:07:96:73:2d:3b: de:a2:67:32:a3:f8:cd:ca:36:5f:dc:c6:21:d8:d4: 9c:22:0a:d8:92:92:57:69:eb:46:d6:40:a8:7e:ae: a0:d9:8b:76:aa:8a:1e:c9:64:78:65:c4:3d:fb:3b: 3f:8d:85:70:94:d0:fc:4c:d6:63:91:f0:7f:30:62: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E2:D9:7C:67:C6:97:7F:64:A6:28:35:77:03:98:14:99:B9:98:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/018ed7bc-9068-32f2-8dad-68121983806b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3f:8c:ba:c9:1f:e0:18:91:01:bb:16:d8:72:ca:e2:8a:53: 2c:5f:78:2c:20:9c:53:1c:59:e2:0b:8c:fe:ff:e5:97:71:11: eb:69:be:67:6d:86:bf:ed:f0:47:74:4c:40:20:cc:f4:1e:04: 63:32:bb:bb:55:66:95:d5:41:cb:c1:38:13:72:a7:64:ca:1e: 0b:c6:80:6a:ea:dd:94:3e:52:49:cc:c5:f7:3d:40:e5:5a:fa: 3e:b9:d6:2b:ca:54:00:e2:1b:33:7a:02:fb:20:6f:f9:e8:9f: 17:21:63:ed:fd:37:30:d9:52:87:4a:f3:b4:88:60:ad:b0:42: b2:50:39:ba:c6:f2:19:f7:54:cb:e5:48:1b:6a:9d:76:db:de: f9:14:20:08:f8:89:8d:3a:a5:ae:12:6f:15:7c:c6:0c:47:21: 90:34:67:13:04:35:f2:4c:e6:35:47:e5:af:e3:4f:a2:70:c4: 10:93:97:f6:72:c0:74:6d:88:af:ee:f5:e1:f9:d8:40:f3:f1: ea:3d:87:b0:24:57:97:51:00:2c:0b:22:0a:ca:66:ee:1e:3d: fe:b6:f8:b4:b2:97:bb:06:3f:e5:e8:bf:66:bd:da:12:39:1f: b6:7e:59:13:3e:37:45:c2:d1:84:92:b9:b1:99:4d:c2:49:95: a8:da:7a:d1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXQD4g9m5PJnXPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MjU2MjFkOTAtYTAyMC00NjM5LTkxNGYtNDk4OWExOGRlMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+GpQ/IP6Z5Gwhpv8kBk4bLsJ/HdcgboDJkm p42fnky7ePY/JxPEtPg7/++vxiXc2qsNOtVHCUlFGu8/3sPEKXkaDJJyTFUuGd8b ewcmV8GWet2I7DZavV+ZjZbmscjzeMQRgevnYFBQJqAlAcU4ib07niWVHAvHGAWa al5R/txJzjYfCwtTlfji8FDXfi54ipKmDV0A4ZN09pM3mK20Ypg65mhApe0EhNnC VJYRAu4l7g4WCaAOdZvygDfwB5ZzLTveomcyo/jNyjZf3MYh2NScIgrYkpJXaetG 1kCofq6g2Yt2qooeyWR4ZcQ9+zs/jYVwlND8TNZjkfB/MGJlVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH3i2Xxnxpd/ZKYoNXcDmBSZuZjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDE4ZWQ3YmMtOTA2OC0z MmYyLThkYWQtNjgxMjE5ODM4MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFT+Muskf4BiRAbsW2HLK4opTLF94LCCcUxxZ4guM/v/ll3ER62m+ Z22Gv+3wR3RMQCDM9B4EYzK7u1VmldVBy8E4E3KnZMoeC8aAaurdlD5SSczF9z1A 5Vr6PrnWK8pUAOIbM3oC+yBv+eifFyFj7f03MNlSh0rztIhgrbBCslA5usbyGfdU y+VIG2qddtve+RQgCPiJjTqlrhJvFXzGDEchkDRnEwQ18kzmNUflr+NPonDEEJOX 9nLAdG2Ir+714fnYQPPx6j2HsCRXl1EALAsiCspm7h49/rb4tLKXuwY/5ei/Zr3a Ejkftn5ZEz43RcLRhJK5sZlNwkmVqNp60Q== -----END CERTIFICATE-----Generated at Tue Nov 4 17:02:11 2025 by rpki-client