$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa File: 7812d5a6-8aa4-3831-abe7-befad072a1d3.roa (raw, json) Hash identifier: UM0FivyYrr1n9lUwREt8WRQqtVLTT5ySC7IRafmRfl8= Subject key identifier: 1D:F3:AC:EC:1F:05:D5:69:2E:26:DB:EC:B0:F0:F4:F0:5B:E6:E9:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCD9780083944C1EC3720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cd:97:80:08:39:44:c1:ec:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0e6d9351-e8a5-4ec9-85f3-bcd9ae02bd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6d:78:c8:6f:38:61:66:85:08:5b:26:0f:5d: 56:6d:3e:7a:4b:94:6a:92:cd:be:57:ff:33:4e:2a: fc:53:25:5b:29:54:f6:3e:f5:52:99:d4:4e:ca:85: 4f:f2:0b:5d:cd:50:d7:9a:30:c1:41:ce:fc:ea:c1: f4:fb:83:ad:cd:3a:35:ce:4f:28:25:14:38:93:b4: 03:92:8a:76:72:1c:77:98:ba:5f:51:9e:9f:11:cc: 82:23:d6:91:0e:3b:6b:6e:29:32:c8:16:b3:4a:0e: a8:e1:03:43:92:b7:43:1b:de:a7:d6:7d:d9:00:4e: 50:1b:18:d7:5b:be:31:b2:74:2d:e9:e9:20:d9:99: 29:03:15:58:5b:a5:b3:79:33:9e:36:65:6d:16:23: a0:b9:4a:87:87:1d:21:3e:8c:e1:5d:d4:61:45:01: 98:06:86:f6:ec:bb:b4:3a:bd:74:df:7a:ba:e4:a9: 88:00:62:88:57:5c:f6:6b:b9:9e:de:20:61:27:0d: 7d:34:b5:5f:94:95:ab:48:46:6c:e3:2d:10:d4:1e: fc:4f:52:e0:b8:f0:04:f6:06:4f:bb:0f:d6:50:ef: e0:93:19:72:69:32:85:f3:d1:9f:f1:92:e9:69:68: ab:d3:26:55:18:b4:5a:d2:a5:90:87:83:d2:98:59: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F3:AC:EC:1F:05:D5:69:2E:26:DB:EC:B0:F0:F4:F0:5B:E6:E9:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:43:bc:77:e8:c7:d0:2a:0b:ff:d5:cf:a0:fc:90:24:b5:1f: 35:d5:2d:08:10:a0:a2:c7:7e:6a:be:89:c0:46:65:26:7c:3a: 0a:f0:32:9a:1f:52:a8:4e:c0:99:0a:ca:34:65:9f:3f:5b:4a: 01:03:9e:fc:b7:ca:bb:ab:fd:72:da:96:1a:d5:ec:16:1f:29: 61:f2:e7:d3:17:68:9e:d7:ae:e9:a2:5a:dd:d8:d1:d2:1e:ef: c6:e9:98:c5:f9:4b:10:13:f6:cc:5e:53:12:85:ef:f9:c9:63: be:30:e4:eb:15:51:48:18:0c:f6:0a:eb:5d:6f:ac:66:ff:94: 16:43:ea:79:fe:be:31:9e:3a:17:db:27:41:56:de:56:66:24: 89:a3:2b:34:68:a8:4c:36:46:c6:a3:d3:90:74:5b:2f:0c:ac: cc:42:7a:82:6c:2e:2d:26:8b:da:4e:4d:cf:33:8d:90:74:26: ce:66:e8:4b:43:99:2a:47:45:7d:1d:cf:30:be:64:4d:60:5d: 52:7c:77:50:d5:c8:bb:6d:42:de:1d:b9:ed:6e:4a:2a:56:c2: 7a:c4:18:52:86:08:6d:17:cc:9d:f2:dd:25:1e:0f:1f:f2:47: 45:68:a6:2d:e5:2e:83:e6:8e:8a:52:6d:e4:c8:7a:76:18:a5: 99:d6:0c:58 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM2XgAg5RMHsNyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGU2ZDkzNTEtZThhNS00ZWM5LTg1ZjMtYmNkOWFlMDJiZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm14yG84YWaFCFsmD11WbT56S5Rqks2+V/8z Tir8UyVbKVT2PvVSmdROyoVP8gtdzVDXmjDBQc786sH0+4OtzTo1zk8oJRQ4k7QD kop2chx3mLpfUZ6fEcyCI9aRDjtrbikyyBazSg6o4QNDkrdDG96n1n3ZAE5QGxjX W74xsnQt6ekg2ZkpAxVYW6WzeTOeNmVtFiOguUqHhx0hPozhXdRhRQGYBob27Lu0 Or1033q65KmIAGKIV1z2a7me3iBhJw19NLVflJWrSEZs4y0Q1B78T1LguPAE9gZP uw/WUO/gkxlyaTKF89Gf8ZLpaWir0yZVGLRa0qWQh4PSmFn7hQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB3zrOwfBdVpLibb7LDw9PBb5ukBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzgxMmQ1YTYtOGFhNC0z ODMxLWFiZTctYmVmYWQwNzJhMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVUO8d+jH0CoL/9XPoPyQJLUfNdUtCBCgosd+ar6JwEZlJnw6CvAy mh9SqE7AmQrKNGWfP1tKAQOe/LfKu6v9ctqWGtXsFh8pYfLn0xdonteu6aJa3djR 0h7vxumYxflLEBP2zF5TEoXv+cljvjDk6xVRSBgM9grrXW+sZv+UFkPqef6+MZ46 F9snQVbeVmYkiaMrNGioTDZGxqPTkHRbLwyszEJ6gmwuLSaL2k5NzzONkHQmzmbo S0OZKkdFfR3PML5kTWBdUnx3UNXIu21C3h257W5KKlbCesQYUoYIbRfMnfLdJR4P H/JHRWimLeUug+aOilJt5Mh6dhilmdYMWA== -----END CERTIFICATE-----Generated at Wed Nov 5 06:27:49 2025 by rpki-client