$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa File: 6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa (raw, json) Hash identifier: ZweALhZ093FVPmVfalv3o3/y9/dP2zimYYTfy/OPOv4= Subject key identifier: 3D:EB:B6:29:88:1F:C6:9D:7C:2E:82:F9:06:F8:86:4D:2D:E3:1E:EC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCD85114832443D00AAC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cd:85:11:48:32:44:3d:00:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=51d109b5-bc87-401c-a83e-4e6a5e2ee0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b4:10:a6:67:9e:41:1a:72:17:36:ab:49:cc: 5c:22:e2:9f:c3:e2:aa:39:cf:a5:09:56:8e:ba:08: ee:34:78:8f:be:25:b6:cf:3d:df:1a:9c:54:d5:d6: b9:f0:b0:f8:c1:25:71:f9:af:65:2a:13:9a:e2:c5: 8c:93:26:27:65:ba:aa:b0:47:8d:54:09:9a:f2:74: 10:72:1b:09:4c:16:bc:5c:44:06:27:5e:cb:3f:d6: 9a:f1:f6:a8:7c:b6:53:c9:57:16:b1:db:62:d0:e3: e3:50:80:ff:b9:4d:55:95:9d:8a:a0:a0:cd:c4:55: 24:43:dd:d2:14:b0:68:b1:f9:e8:6d:45:cc:e7:ab: 56:22:3f:c5:a1:5c:44:3c:79:7b:dd:1e:4d:a9:a3: aa:d6:49:c7:60:ad:a1:7f:b0:f1:9f:fb:41:1e:a3: 80:2e:b3:af:aa:b9:7e:ca:ca:7c:e3:f3:8b:6d:08: 4b:dd:8b:05:dd:89:c4:6a:ce:34:58:e5:4c:36:15: 38:54:99:67:1b:01:ef:ea:11:b8:35:fd:24:ce:50: 26:18:89:36:ef:54:55:44:78:dc:6f:69:b4:5f:e6: f5:4a:6b:ef:6b:a9:18:00:a5:d0:63:d6:89:3e:81: 01:6c:20:52:c3:52:20:1d:41:37:10:63:a5:3d:c7: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EB:B6:29:88:1F:C6:9D:7C:2E:82:F9:06:F8:86:4D:2D:E3:1E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:0f:44:7c:61:ca:e9:27:7d:4c:fe:01:e5:de:18:d6:65:af: 02:a8:ab:96:4a:e8:7f:1c:2b:1f:3d:de:9d:03:58:6a:6f:fb: 63:f4:69:d3:51:d0:b3:5e:b8:21:5d:93:12:ea:41:32:c1:e2: 6e:8c:e4:85:c9:76:d0:0d:1e:8e:41:80:4f:91:4d:a1:22:c5: ca:c4:a6:5f:07:89:5d:3e:c8:71:51:fc:e6:9b:ec:5f:b4:6d: fb:13:04:de:ae:0d:9c:81:14:8e:ab:20:ae:37:d8:31:1d:e1: ec:6d:46:e2:d1:93:3e:49:a8:c3:2d:5d:8d:b4:4f:27:1d:dc: a2:95:b0:e4:cf:63:4b:0d:05:e2:8b:e1:f1:e3:21:97:86:ed: 95:9e:ef:5e:0c:ac:5b:6b:72:53:4d:0f:e0:4f:04:90:d6:01: 55:78:e6:8d:ec:a0:90:e6:4b:29:b1:b1:e2:9b:71:72:8f:75: 2e:3c:12:1f:3e:91:5f:24:2b:93:11:b4:bd:4f:54:b1:37:f0: 2c:23:b4:21:b8:e7:fb:94:ea:50:e1:03:f4:3e:49:ec:07:5e: 53:d2:31:4c:21:96:fe:8b:90:ef:6d:a8:7e:0b:f2:70:57:fd: 8a:21:94:51:b8:b1:d3:e1:52:bc:cb:46:0a:5d:d1:79:c8:fa: 01:b4:4c:10 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM2FEUgyRD0AqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTFkMTA5YjUtYmM4Ny00MDFjLWE4M2UtNGU2YTVlMmVlMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7QQpmeeQRpyFzarScxcIuKfw+KqOc+lCVaO ugjuNHiPviW2zz3fGpxU1da58LD4wSVx+a9lKhOa4sWMkyYnZbqqsEeNVAma8nQQ chsJTBa8XEQGJ17LP9aa8faofLZTyVcWsdti0OPjUID/uU1VlZ2KoKDNxFUkQ93S FLBosfnobUXM56tWIj/FoVxEPHl73R5NqaOq1knHYK2hf7Dxn/tBHqOALrOvqrl+ ysp84/OLbQhL3YsF3YnEas40WOVMNhU4VJlnGwHv6hG4Nf0kzlAmGIk271RVRHjc b2m0X+b1Smvva6kYAKXQY9aJPoEBbCBSw1IgHUE3EGOlPcct7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD3rtimIH8adfC6C+Qb4hk0t4x7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQ0YTk5ZDgtMzk0ZC0z MTExLTk4NWUtYWQyMGI5YzY4ZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJQ9EfGHK6Sd9TP4B5d4Y1mWvAqirlkrofxwrHz3enQNYam/7Y/Rp 01HQs164IV2TEupBMsHibozkhcl20A0ejkGAT5FNoSLFysSmXweJXT7IcVH85pvs X7Rt+xME3q4NnIEUjqsgrjfYMR3h7G1G4tGTPkmowy1djbRPJx3copWw5M9jSw0F 4ovh8eMhl4btlZ7vXgysW2tyU00P4E8EkNYBVXjmjeygkOZLKbGx4ptxco91LjwS Hz6RXyQrkxG0vU9UsTfwLCO0Ibjn+5TqUOED9D5J7AdeU9IxTCGW/ouQ722ofgvy cFf9iiGUUbix0+FSvMtGCl3Recj6AbRMEA== -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:06 2025 by rpki-client