$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa File: 219bc4aa-8142-3f5e-a469-4a615b68d218.roa (raw, json) Hash identifier: IMM18H6DfzhKMnBB374zUK37VyoDzpO3fSCtxQun8Bc= Subject key identifier: 5C:9F:49:4A:25:8C:38:B1:AF:14:E5:41:2D:F0:5B:19:49:E5:F9:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCEC8270479955FE5DBB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:2300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ce:c8:27:04:79:95:5f:e5:db:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=cf430e19-dc8c-443b-a4e1-5284f350b872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:46:bc:b1:bf:0b:fc:8c:08:c2:08:a3:c0: 2f:02:6f:cc:4d:0c:6f:74:cc:73:6c:4f:e0:a3:5f: ec:03:ae:82:f6:f5:be:dd:09:28:e8:d9:95:88:9f: 3f:6c:68:d2:f7:06:e9:5a:2a:64:ce:67:29:49:84: 19:90:ed:da:87:b7:77:d0:a5:86:06:fa:03:fe:b6: d7:e3:82:1e:35:a8:72:b4:b5:df:d5:ff:e7:94:ab: 8a:5e:0f:e3:7f:09:62:89:97:de:be:9e:51:4b:87: a4:92:8d:92:17:7a:d5:d8:e5:43:97:1c:ad:41:51: df:a6:8c:9f:6f:0e:e0:10:9e:11:b7:00:20:aa:07: 99:73:3d:f2:7f:b8:fe:c2:9f:06:b2:7a:f5:bd:44: 8b:d1:c4:e9:48:ec:af:69:18:4f:56:6f:cd:56:47: 4e:d8:f3:e8:db:b0:75:2e:4f:ed:3b:b1:da:73:a2: 6d:5c:ef:e2:c6:93:3e:91:d7:07:47:7f:30:d5:78: df:40:dd:9f:f4:27:88:d8:c3:25:5a:87:a5:3d:88: 22:ff:25:14:79:4d:88:6e:5f:25:c3:f8:08:cd:dc: dc:7c:bd:e2:ff:69:69:26:dd:a1:1b:8e:5c:96:85: a6:ec:f1:5e:58:fc:6e:f1:05:59:ff:c8:0f:a8:c8: f6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9F:49:4A:25:8C:38:B1:AF:14:E5:41:2D:F0:5B:19:49:E5:F9:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:52:e9:b3:77:0b:76:38:ed:62:6c:4b:82:22:2c:dd:9c:99: 66:ac:7f:fd:d0:bd:e5:ac:d4:a7:dd:66:d0:f4:7f:cd:52:9b: d3:68:21:13:87:36:cd:c3:2f:1f:16:d4:d2:1f:89:62:5c:45: 4f:dc:ba:f1:3d:73:76:f7:fc:58:2f:f8:61:65:43:73:92:31: 12:78:7b:58:df:39:fc:23:96:91:cb:4e:e7:a2:fa:80:a9:38: c1:41:23:8f:cb:0d:0b:1c:0d:ec:de:58:b6:87:d6:de:64:ec: 57:0a:81:2f:73:e7:d9:0a:54:a8:6f:be:30:a8:06:94:8b:46: da:d0:7e:9b:e3:b1:c0:e1:78:ab:c5:ca:47:b9:e4:5a:44:11: 10:17:af:bc:04:b2:ac:80:5c:7e:3a:fe:97:a4:52:47:50:ee: 0c:1c:74:15:b6:0f:3c:2c:c0:ae:e0:ee:57:74:13:d9:e3:11: 75:e2:14:85:9a:58:14:e8:38:33:45:84:fa:a9:2b:55:45:f9: 39:e5:97:fc:1c:a1:c4:e5:43:d8:26:eb:86:ce:8e:76:50:ec: 61:2f:74:bb:02:ab:e7:75:de:04:ac:6b:4f:12:58:4e:ca:25: 82:fd:01:54:a2:a7:e2:1f:03:57:b7:d1:e6:b7:80:c3:a7:e1: f9:5f:f8:63 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM7IJwR5lV/l27AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Y2Y0MzBlMTktZGM4Yy00NDNiLWE0ZTEtNTI4NGYzNTBiODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrhGvLG/C/yMCMIIo8AvAm/MTQxvdMxzbE/g o1/sA66C9vW+3Qko6NmViJ8/bGjS9wbpWipkzmcpSYQZkO3ah7d30KWGBvoD/rbX 44IeNahytLXf1f/nlKuKXg/jfwliiZfevp5RS4ekko2SF3rV2OVDlxytQVHfpoyf bw7gEJ4RtwAgqgeZcz3yf7j+wp8Gsnr1vUSL0cTpSOyvaRhPVm/NVkdO2PPo27B1 Lk/tO7Hac6JtXO/ixpM+kdcHR38w1XjfQN2f9CeI2MMlWoelPYgi/yUUeU2Ibl8l w/gIzdzcfL3i/2lpJt2hG45cloWm7PFeWPxu8QVZ/8gPqMj2tQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFyfSUoljDixrxTlQS3wWxlJ5fkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE5YmM0YWEtODE0Mi0z ZjVlLWE0NjktNGE2MTViNjhkMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd1Lps3cLdjjtYmxLgiIs3ZyZZqx//dC95azUp91m0PR/zVKb02gh E4c2zcMvHxbU0h+JYlxFT9y68T1zdvf8WC/4YWVDc5IxEnh7WN85/COWkctO56L6 gKk4wUEjj8sNCxwN7N5YtofW3mTsVwqBL3Pn2QpUqG++MKgGlItG2tB+m+OxwOF4 q8XKR7nkWkQREBevvASyrIBcfjr+l6RSR1DuDBx0FbYPPCzAruDuV3QT2eMRdeIU hZpYFOg4M0WE+qkrVUX5OeWX/ByhxOVD2Cbrhs6OdlDsYS90uwKr53XeBKxrTxJY Tsolgv0BVKKn4h8DV7fR5reAw6fh+V/4Yw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:33 2025 by rpki-client