$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa File: 1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa (raw, json) Hash identifier: AEgT/QFUl4FTRygZniVpEJwH9S1tAE0wnK7zWq5vD7c= Subject key identifier: A0:40:C0:2B:44:6A:50:4E:D8:E0:11:7D:32:8A:A6:06:B8:AF:1D:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFEADEEC13612E6BCA99A Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fe:ad:ee:c1:36:12:e6:bc:a9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b0cf663c-25ed-4eac-8d74-52a27f5cfd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4b:fe:c9:ea:18:50:40:52:cf:b1:84:00:7b: 3a:e0:da:bb:2d:c7:70:33:47:45:39:a7:76:75:09: be:d1:7f:5d:c5:17:2b:54:b8:5b:fd:6e:c0:73:91: 3e:80:e5:56:98:c5:ab:34:a8:5f:1c:25:88:12:8f: 51:c2:26:79:dc:0d:7a:a4:29:05:1a:2f:84:a6:cb: 0f:81:c8:71:24:a8:df:93:60:6a:b5:8d:6a:e6:ff: 34:ed:ca:58:42:6f:8a:1b:48:ef:4e:a5:82:d0:b1: 9c:f5:50:b0:5e:9c:46:7c:24:bf:7c:8d:7e:f3:bc: aa:11:a3:a0:ea:11:64:f3:da:44:0e:f9:f3:19:a1: b5:73:da:5d:23:86:e6:ce:74:9f:26:75:cf:35:d3: 70:65:b4:35:3e:6b:7f:15:de:75:bc:3a:c5:47:42: 58:a9:01:28:04:4f:49:1a:37:c3:cb:30:6c:46:2a: c7:23:bf:52:36:3b:08:41:8e:7d:e3:59:02:bb:c1: 03:45:6d:09:31:6f:3d:53:58:32:14:ed:42:0d:ba: 40:f1:9b:9c:19:44:ec:cd:05:7f:d9:43:10:f8:ce: 03:e8:ec:ca:43:92:05:c1:a5:17:d9:61:af:a1:7d: fe:0a:ab:2a:f6:c8:34:ae:7f:42:1b:19:7a:9e:40: 32:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:40:C0:2B:44:6A:50:4E:D8:E0:11:7D:32:8A:A6:06:B8:AF:1D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e7:11:80:1d:6b:1e:ae:e8:00:9b:08:2e:f8:bf:fb:32:77: f3:bd:11:fa:13:ef:6d:0a:6f:52:6f:6e:4f:d4:8d:23:f8:65: 80:b1:28:76:e9:5f:ff:5b:58:b7:69:57:9e:fc:0e:90:2a:23: 61:43:bf:1c:40:14:1a:80:80:ca:b5:cd:c7:63:ff:98:0b:ce: 24:92:6d:4c:72:d0:26:00:cb:33:ea:f6:54:3e:ac:35:5c:48: bc:4e:4c:29:fe:ce:08:3e:f3:9b:1a:b9:12:38:33:01:d0:35: aa:98:a3:13:06:e7:05:a2:df:3c:47:68:d8:1a:9d:ce:a4:87: 9a:42:41:43:e2:30:53:cf:dc:27:8c:9c:91:0c:93:4c:7d:25: 62:a5:0a:f1:e9:95:5b:43:90:15:e5:1f:24:e2:24:7c:5d:75: b2:8f:d6:aa:e6:c0:f0:e1:6f:04:b4:c8:da:4f:7b:0b:eb:8c: 1a:64:52:17:c4:9d:ea:73:a4:ac:3b:0c:3a:a1:78:1c:20:79: 02:68:8f:66:f7:a8:e3:e3:4c:a8:63:3f:02:dc:8a:20:8b:4b: 9b:e5:8a:24:bc:14:44:4e:08:f1:07:83:64:31:48:84:d7:bf: b6:f7:70:ef:b0:67:29:c7:64:a2:b1:b1:7c:ce:68:c5:eb:4d: 4a:56:70:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXP6t7sE2Eua8qZowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjBjZjY2M2MtMjVlZC00ZWFjLThkNzQtNTJhMjdmNWNmZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUv+yeoYUEBSz7GEAHs64Nq7LcdwM0dFOad2 dQm+0X9dxRcrVLhb/W7Ac5E+gOVWmMWrNKhfHCWIEo9RwiZ53A16pCkFGi+EpssP gchxJKjfk2BqtY1q5v807cpYQm+KG0jvTqWC0LGc9VCwXpxGfCS/fI1+87yqEaOg 6hFk89pEDvnzGaG1c9pdI4bmznSfJnXPNdNwZbQ1Pmt/Fd51vDrFR0JYqQEoBE9J GjfDyzBsRirHI79SNjsIQY5941kCu8EDRW0JMW89U1gyFO1CDbpA8ZucGUTszQV/ 2UMQ+M4D6OzKQ5IFwaUX2WGvoX3+Cqsq9sg0rn9CGxl6nkAyrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKBAwCtEalBO2OARfTKKpga4rx0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRmOTFlY2EtNGI4YS0z YWIzLTg5OWItZGI0Yzk4YmM1ODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETnEYAdax6u6ACbCC74v/syd/O9EfoT720Kb1Jvbk/UjSP4ZYCx KHbpX/9bWLdpV578DpAqI2FDvxxAFBqAgMq1zcdj/5gLziSSbUxy0CYAyzPq9lQ+ rDVcSLxOTCn+zgg+85sauRI4MwHQNaqYoxMG5wWi3zxHaNganc6kh5pCQUPiMFPP 3CeMnJEMk0x9JWKlCvHplVtDkBXlHyTiJHxddbKP1qrmwPDhbwS0yNpPewvrjBpk UhfEnepzpKw7DDqheBwgeQJoj2b3qOPjTKhjPwLciiCLS5vliiS8FEROCPEHg2Qx SITXv7b3cO+wZynHZKKxsXzOaMXrTUpWcIw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:27 2025 by rpki-client