$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa File: 35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa (raw, json) Hash identifier: UEziVFTrkmyFZJVUsMJ+rOz1Uf1HMECiP4vc2Wcwzwk= Subject key identifier: 2F:A8:64:26:98:8A:23:33:D9:F3:A8:E7:4D:EC:96:77:13:4A:B0:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFA78CC1999C77BF61F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2001:4988::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fa:78:cc:19:99:c7:7b:f6:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=036de563-6608-4baf-8222-d7b98ca0841b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:62:cf:5d:a4:c4:cc:5f:e8:59:38:6b:a2:66: 62:e6:3d:78:07:ce:14:eb:ac:d6:00:eb:cd:7c:3e: db:9d:15:63:65:fc:9c:4c:7b:84:59:15:6c:c1:71: 7f:27:32:c9:c5:70:c9:52:ae:d4:6e:f0:e2:f0:58: 7f:d2:b0:2c:fa:41:10:e8:09:a0:bd:5e:56:08:e6: 67:a8:d2:ce:90:76:53:45:d3:56:bb:84:07:82:26: 07:de:7b:9c:fa:35:fd:dc:6c:44:cd:39:2c:54:8c: 53:bc:78:bb:78:5f:6c:f4:34:55:60:09:fc:f9:89: f7:ae:a1:9e:3b:3e:1a:23:1c:aa:8c:35:13:50:44: 55:b7:b9:06:e0:0d:1e:2a:5c:23:a0:4e:c0:2f:8b: 4a:dc:9f:fb:75:6c:29:6d:17:33:f4:75:2a:8d:a2: f9:21:d4:92:91:0a:b4:ff:ac:72:d9:76:b6:f4:f5: f9:17:ca:13:d7:83:96:8c:ed:e1:6d:79:ba:fa:27: c5:fc:c8:0f:24:22:23:34:9c:76:11:65:66:02:4a: 4d:5f:ae:7e:c7:f5:73:31:09:c3:61:d5:01:91:4e: e4:ca:6f:09:a2:df:d2:8c:16:ed:3d:bf:72:6f:77: e6:b7:07:19:71:a4:eb:46:88:9e:7c:76:29:f0:b6: bc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A8:64:26:98:8A:23:33:D9:F3:A8:E7:4D:EC:96:77:13:4A:B0:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4988::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d6:e8:11:bf:c2:cf:fe:42:fa:40:b9:0c:62:70:5e:1c:e7: 8b:26:71:e1:26:8f:ad:5d:0d:e4:06:60:ac:36:34:32:b6:98: 2e:ea:13:22:dd:b3:e3:ad:e2:20:2f:c7:de:34:b8:35:b4:fd: 23:30:f0:fa:b6:72:1c:1e:74:b8:17:6b:1d:7f:df:6c:6d:3d: d5:ee:f8:55:2c:23:c8:17:d6:c2:0d:08:b3:1c:59:de:c3:32: 6c:c1:7e:3d:7d:22:b8:73:6c:e9:4b:7a:85:50:b0:6d:02:48: 94:40:ce:32:d1:01:ca:c5:19:98:e2:e1:6c:fd:4a:96:c4:d5: f8:35:d9:22:c3:bd:b9:72:9b:79:dc:9d:f2:c5:e9:f6:22:32: 6c:16:a4:47:8b:a6:8d:83:15:0b:53:8f:18:63:9a:74:17:6d: 85:87:3f:d5:5a:68:77:14:01:c0:84:0a:22:aa:16:a0:ad:9d: d8:0b:51:95:a2:2d:66:3d:81:ab:13:04:41:23:d2:cd:fa:2d: d6:08:e6:c8:b6:05:4c:46:5e:a0:55:aa:5e:32:e3:12:18:6d: 03:97:87:59:3b:7c:bd:a9:e0:bc:21:09:cf:d5:87:b1:71:76: 01:23:ad:ab:74:ca:6a:b1:7c:95:3e:c3:02:17:f2:84:25:d9: fd:1c:a5:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxXPp4zBmZx3v2HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDM2ZGU1NjMtNjYwOC00YmFmLTgyMjItZDdiOThjYTA4NDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2LPXaTEzF/oWThromZi5j14B84U66zWAOvN fD7bnRVjZfycTHuEWRVswXF/JzLJxXDJUq7UbvDi8Fh/0rAs+kEQ6AmgvV5WCOZn qNLOkHZTRdNWu4QHgiYH3nuc+jX93GxEzTksVIxTvHi7eF9s9DRVYAn8+Yn3rqGe Oz4aIxyqjDUTUERVt7kG4A0eKlwjoE7AL4tK3J/7dWwpbRcz9HUqjaL5IdSSkQq0 /6xy2Xa29PX5F8oT14OWjO3hbXm6+ifF/MgPJCIjNJx2EWVmAkpNX65+x/VzMQnD YdUBkU7kym8Jot/SjBbtPb9yb3fmtwcZcaTrRoiefHYp8La8MwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC+oZCaYiiMz2fOo503slncTSrDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzVlNWM1M2UtYzUzNi0z ZjcwLThmNGQtMTlhZThhMjg4NmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAg1ugRv8LP/kL6QLkMYnBeHOeLJnHhJo+tXQ3kBmCsNjQytpgu6hMi 3bPjreIgL8feNLg1tP0jMPD6tnIcHnS4F2sdf99sbT3V7vhVLCPIF9bCDQizHFne wzJswX49fSK4c2zpS3qFULBtAkiUQM4y0QHKxRmY4uFs/UqWxNX4Ndkiw725cpt5 3J3yxen2IjJsFqRHi6aNgxULU48YY5p0F22Fhz/VWmh3FAHAhAoiqhagrZ3YC1GV oi1mPYGrEwRBI9LN+i3WCObItgVMRl6gVapeMuMSGG0Dl4dZO3y9qeC8IQnP1Yex cXYBI62rdMpqsXyVPsMCF/KEJdn9HKVi -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:11 2025 by rpki-client