$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa File: 2d21dbca-2657-35c0-8519-24ed1492a5e2.roa (raw, json) Hash identifier: TH/bVnPJrszgQvz4h9ni4bE1F3EkF5X2y0p76j5r2IQ= Subject key identifier: 4A:53:F1:8C:4E:F5:BE:3D:8F:2A:F5:3B:76:AD:9D:34:9D:67:29:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCEFC3753AEFD25C32F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:2a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ce:fc:37:53:ae:fd:25:c3:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c35690bf-2087-4e50-9dde-7fe84f978553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:7d:97:2c:f3:e4:19:49:4d:ad:fb:fd:5a: 5e:9d:46:03:b7:f1:e0:a9:da:21:b7:d1:cb:24:aa: 36:82:50:1f:86:53:21:a6:31:7b:04:2a:4f:93:31: 64:b9:13:03:c3:2b:0c:9a:0c:72:c0:85:26:c1:33: 56:be:69:7d:0f:16:b4:9e:e1:7b:b5:5b:02:a0:81: 8c:75:37:86:67:97:1e:8b:cd:b1:25:bd:10:9f:b1: f6:59:e8:c5:6d:61:2d:84:0d:e2:8d:95:02:c9:f5: 43:fa:1b:4a:8c:4a:62:f2:27:d9:b5:80:cb:ed:4f: b1:f8:ae:c0:26:a5:ea:55:89:a5:4c:78:82:f1:2a: cc:01:c8:14:25:69:11:be:37:e3:d1:43:55:a5:bd: a5:52:de:d5:ee:75:79:00:76:6d:6f:f6:7d:d3:a7: ba:f9:00:f8:30:f9:23:9b:3a:85:c6:7c:95:7a:4f: 7e:c1:a4:91:71:20:65:0b:95:97:71:82:c4:6f:42: 50:10:56:a3:1a:7b:68:e3:b4:1f:bb:3c:8e:3b:bd: 13:94:b5:71:b3:6a:f5:e4:b2:3c:3a:e7:42:72:96: ff:2e:3e:ba:0a:c9:d3:4a:53:12:ac:1a:ae:b6:0f: 78:2a:85:c3:cc:e0:e1:d7:dc:f7:2b:da:4f:3a:68: 90:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:53:F1:8C:4E:F5:BE:3D:8F:2A:F5:3B:76:AD:9D:34:9D:67:29:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:53:23:8b:dd:06:f8:c6:b3:b1:e9:e2:3e:95:f9:92:28:37: 2e:31:52:42:b4:60:a1:da:2c:1e:c9:d1:4c:3a:f2:18:29:11: 69:5c:cc:37:d0:ac:bb:a5:e3:0d:12:81:e8:84:07:b9:52:e4: 7f:b7:ad:44:b5:83:fb:d0:89:c1:9f:04:cf:4a:57:4b:ad:7f: 9e:8e:6c:02:99:38:ad:db:fd:13:06:d1:c8:8c:ee:83:38:92: 20:3f:a6:41:f7:f3:19:fb:80:8a:f0:c0:58:fd:13:8a:c7:d6: 59:0d:23:d6:50:96:db:4c:24:c2:9e:8d:d9:4c:cc:64:4d:83: ff:4a:f2:8d:ef:fa:9d:b6:a2:c5:f2:2f:84:54:46:1b:be:67: 84:6d:98:cf:06:a1:e6:7f:ba:26:d8:3e:41:99:0a:64:23:03: 8d:d5:01:2c:53:9d:89:46:e4:6c:d9:87:fd:b9:db:cd:eb:d5: cd:3f:1d:ed:c1:a4:7f:2a:73:cf:38:c7:46:91:d5:8f:63:c0: 8e:35:86:b0:b3:88:56:3d:14:48:fc:1b:12:83:f1:9b:81:b2: c8:1f:19:6e:5a:2e:20:71:97:79:38:e7:4c:13:da:eb:4b:d5: db:31:24:b8:ea:2f:6a:27:56:01:40:2b:12:fa:fb:b1:a4:37: 01:49:bf:48 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM78N1Ou/SXDL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzM1NjkwYmYtMjA4Ny00ZTUwLTlkZGUtN2ZlODRmOTc4NTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8h9lyzz5BlJTa37/VpenUYDt/Hgqdoht9HL JKo2glAfhlMhpjF7BCpPkzFkuRMDwysMmgxywIUmwTNWvml9Dxa0nuF7tVsCoIGM dTeGZ5cei82xJb0Qn7H2WejFbWEthA3ijZUCyfVD+htKjEpi8ifZtYDL7U+x+K7A JqXqVYmlTHiC8SrMAcgUJWkRvjfj0UNVpb2lUt7V7nV5AHZtb/Z906e6+QD4MPkj mzqFxnyVek9+waSRcSBlC5WXcYLEb0JQEFajGnto47QfuzyOO70TlLVxs2r15LI8 OudCcpb/Lj66CsnTSlMSrBqutg94KoXDzODh19z3K9pPOmiQzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEpT8YxO9b49jyr1O3atnTSdZymuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQyMWRiY2EtMjY1Ny0z NWMwLTg1MTktMjRlZDE0OTJhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPVMji90G+MazseniPpX5kig3LjFSQrRgodosHsnRTDryGCkRaVzM N9Csu6XjDRKB6IQHuVLkf7etRLWD+9CJwZ8Ez0pXS61/no5sApk4rdv9EwbRyIzu gziSID+mQffzGfuAivDAWP0TisfWWQ0j1lCW20wkwp6N2UzMZE2D/0ryje/6nbai xfIvhFRGG75nhG2Yzwah5n+6Jtg+QZkKZCMDjdUBLFOdiUbkbNmH/bnbzevVzT8d 7cGkfypzzzjHRpHVj2PAjjWGsLOIVj0USPwbEoPxm4GyyB8ZblouIHGXeTjnTBPa 60vV2zEkuOovaidWAUArEvr7saQ3AUm/SA== -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:43 2025 by rpki-client