$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa File: 2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa (raw, json) Hash identifier: oFIN5btJUEXlorOAjHAoDAwzKRroKqBa2vLODBLB8Hc= Subject key identifier: DD:BB:BA:E1:DE:97:F1:BF:8C:F1:97:0E:C5:7C:85:2D:2A:84:6E:4D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFFB4DAEBA196AF18CA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ff:b4:da:eb:a1:96:af:18:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=a6597201-8791-4ae1-8b79-48148d15d09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:23:66:da:9c:2e:f2:81:2e:de:70:a4:ef: 4e:3e:39:61:5e:7e:01:b1:d8:0a:cc:f9:16:70:de: d5:09:48:af:2a:33:9f:99:e7:28:3e:4f:cf:56:20: 00:30:81:b6:51:d7:5b:0e:f5:e6:c6:81:b3:81:e4: 4d:0d:1e:23:90:7b:41:c9:78:07:99:8d:04:3b:58: 13:0c:06:f7:60:36:e7:30:21:a4:f6:e4:6d:af:0b: 72:eb:dd:e1:4d:79:f1:c5:4f:e1:be:fe:58:f0:91: a9:81:69:0c:eb:45:de:ff:9d:76:16:f9:ff:09:0f: af:cf:b2:53:60:45:55:a1:78:6f:f0:6d:ad:04:92: a1:a8:16:fe:1a:43:0c:f4:ac:c0:cd:20:21:9e:a6: 59:12:35:7b:08:fd:6d:9c:65:d2:b1:c5:74:93:34: 72:ed:9b:69:2e:14:80:4d:16:f2:1c:df:2f:bc:f8: 7b:20:f2:a0:af:a1:39:20:0a:22:8f:a6:cd:97:c3: 49:dc:c0:4c:47:d3:41:0d:73:ef:c4:a8:e7:2e:fa: ef:83:de:cb:28:b1:ea:15:ed:8e:48:14:c9:24:b9: a8:26:19:04:79:6e:23:41:e1:59:28:06:ff:83:42: db:2f:80:86:28:ef:62:4b:79:98:c8:e9:29:33:da: 68:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BB:BA:E1:DE:97:F1:BF:8C:F1:97:0E:C5:7C:85:2D:2A:84:6E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:98:82:15:cf:e4:5e:22:b1:a7:44:82:0a:7d:8e:60:d7:90: c3:33:95:15:7b:99:34:9d:32:8f:c1:78:e2:b4:e8:ae:20:6f: 79:0d:ba:12:eb:81:16:b0:5c:50:2d:ae:dd:f1:a0:32:15:a3: f5:9f:e6:70:2a:00:32:0a:c8:2e:9b:35:5f:08:2a:08:cf:70: 1e:f0:b2:7b:06:c2:23:03:e1:5d:80:62:0d:d2:c1:0c:5d:e3: 78:2e:3f:17:f3:80:43:8b:bb:cd:cb:13:6c:d3:8b:c4:96:b1: c8:1a:db:ea:c9:46:08:f9:43:60:7b:41:1f:76:63:3c:fd:e1: 05:4d:b2:ad:f2:7f:d0:2e:13:70:d0:12:c9:f4:67:bc:4a:53: 19:e5:47:8b:de:41:8d:b4:75:31:6a:42:0b:12:a7:53:ce:2b: 9d:89:07:59:1a:13:e1:83:bc:75:2c:43:2c:1c:e8:bb:a5:7d: 94:99:48:87:f4:28:24:3d:e2:57:cf:89:b1:f2:f1:26:5b:dd: 22:44:8b:7e:33:b0:27:4b:8e:91:f1:21:71:b5:2e:ae:3e:a6: 3e:32:33:a4:e0:24:0f:15:33:c2:f0:f9:e0:f9:60:f6:6c:fb: 20:8f:ca:b5:34:4d:5d:58:cb:4e:ef:a0:f6:19:a4:b5:80:a8: f5:8c:ed:65 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXP+02uuhlq8YykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YTY1OTcyMDEtODc5MS00YWUxLThiNzktNDgxNDhkMTVkMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOsjZtqcLvKBLt5wpO9OPjlhXn4BsdgKzPkW cN7VCUivKjOfmecoPk/PViAAMIG2UddbDvXmxoGzgeRNDR4jkHtByXgHmY0EO1gT DAb3YDbnMCGk9uRtrwty693hTXnxxU/hvv5Y8JGpgWkM60Xe/512Fvn/CQ+vz7JT YEVVoXhv8G2tBJKhqBb+GkMM9KzAzSAhnqZZEjV7CP1tnGXSscV0kzRy7ZtpLhSA TRbyHN8vvPh7IPKgr6E5IAoij6bNl8NJ3MBMR9NBDXPvxKjnLvrvg97LKLHqFe2O SBTJJLmoJhkEeW4jQeFZKAb/g0LbL4CGKO9iS3mYyOkpM9poEwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN27uuHel/G/jPGXDsV8hS0qhG5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmU5MGUwOWYtZjQ4Ny0z Y2UzLWI5YmQtNTI2M2M5MzhlMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAepiCFc/kXiKxp0SCCn2OYNeQwzOVFXuZNJ0yj8F44rToriBveQ26 EuuBFrBcUC2u3fGgMhWj9Z/mcCoAMgrILps1XwgqCM9wHvCyewbCIwPhXYBiDdLB DF3jeC4/F/OAQ4u7zcsTbNOLxJaxyBrb6slGCPlDYHtBH3ZjPP3hBU2yrfJ/0C4T cNASyfRnvEpTGeVHi95BjbR1MWpCCxKnU84rnYkHWRoT4YO8dSxDLBzou6V9lJlI h/QoJD3iV8+JsfLxJlvdIkSLfjOwJ0uOkfEhcbUurj6mPjIzpOAkDxUzwvD54Plg 9mz7II/KtTRNXVjLTu+g9hmktYCo9YztZQ== -----END CERTIFICATE-----Generated at Tue Nov 4 19:08:18 2025 by rpki-client