$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8614a06c-6ba8-3abc-ac45-cef9596174d1.roa File: 8614a06c-6ba8-3abc-ac45-cef9596174d1.roa (raw, json) Hash identifier: +zXWLxeS+KyMc9QdT6yioshp3vFpBN8CKirUKlWXmJM= Subject key identifier: D0:18:F3:BB:C6:9F:30:6E:0C:65:09:52:CA:D6:74:AE:5D:04:08:9A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCB9D3079313820E33040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8614a06c-6ba8-3abc-ac45-cef9596174d1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cb:9d:30:79:31:38:20:e3:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=036e6407-811a-4b38-9c24-8ccfebd1e224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:00:7e:02:21:f3:d1:1e:9c:19:89:b0:51:d6: cf:56:09:35:e1:ed:73:4a:36:4e:ee:73:96:6a:05: 4f:9f:73:e0:ac:bc:29:c9:ec:c5:05:31:68:63:ec: de:98:e0:e0:0e:ff:5f:72:e1:4d:5a:bc:ff:28:f0: 74:6b:c2:66:05:87:85:a6:4e:88:99:79:61:c9:05: 20:98:c8:91:8a:58:b1:de:61:00:df:73:cc:55:57: 4a:29:e3:71:15:5f:73:6f:c2:fd:88:48:56:39:b8: c9:4b:6d:65:65:f0:5b:b0:4a:18:d3:a7:2f:13:c1: 1f:0d:0d:0c:6c:03:85:8a:b5:db:90:05:88:d4:ce: f0:f3:8e:98:0f:fa:eb:60:5b:35:b7:4b:cf:2b:35: d5:aa:a0:53:ba:34:f3:94:8d:59:81:d0:39:78:53: 84:85:b6:a0:57:1a:56:67:e7:98:21:04:3c:b3:61: 24:12:de:0e:c6:53:0d:7c:57:45:a4:13:8f:a9:71: f2:4b:a3:7c:27:0e:01:a3:92:12:c9:61:5f:59:f1: a2:c9:d5:fd:88:e6:bc:eb:62:97:25:fa:47:e8:96: a4:de:d5:36:1b:fb:b0:ec:3e:9c:ad:ba:ac:15:47: 83:db:8b:de:5a:9a:37:72:0e:eb:66:b8:0d:d3:06: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:18:F3:BB:C6:9F:30:6E:0C:65:09:52:CA:D6:74:AE:5D:04:08:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8614a06c-6ba8-3abc-ac45-cef9596174d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fc:61:c3:cd:13:d9:da:1a:43:e7:3f:23:18:28:f8:ae:ce: 50:6a:25:b5:0f:f2:ad:71:39:da:99:f1:c6:1c:6c:04:13:ab: 75:ab:0f:b6:9b:e4:fa:8b:e2:26:47:93:9b:e3:87:5b:c6:e0: 64:e7:4b:3f:8e:02:5a:50:74:ed:1d:7b:24:88:f2:8a:80:1b: d7:13:10:89:94:fc:90:3d:cb:ba:b1:c3:5f:fc:de:af:9e:74: 30:11:b2:33:ea:5a:dd:37:b3:f9:dc:62:a0:e6:8d:9f:59:8a: 41:61:1a:74:ec:8c:c8:67:e1:4c:1a:16:89:37:e9:05:40:fe: 7a:63:b3:88:1c:a3:12:f7:9e:b0:68:99:f3:a7:23:7e:da:a3: 39:4c:6c:e9:fc:e9:98:b1:39:44:18:8d:e0:20:c0:d2:c2:13: 6e:bf:39:cd:ed:de:79:3c:0b:df:d8:7d:05:2b:8e:6a:a6:24: d1:87:21:3e:3a:44:e1:24:82:84:82:41:e5:61:d7:4c:bf:b8: db:06:76:ac:e4:59:d3:d8:40:b0:57:2f:85:ba:bf:14:75:92: 15:e0:ef:22:ec:4d:37:bd:7b:6a:23:c5:72:04:24:11:b6:45: 51:96:5e:e8:01:10:8e:3a:b7:b3:63:6e:b9:2b:3c:5d:64:2a: 10:33:ad:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXMudMHkxOCDjMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDM2ZTY0MDctODExYS00YjM4LTljMjQtOGNjZmViZDFlMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgB+AiHz0R6cGYmwUdbPVgk14e1zSjZO7nOW agVPn3PgrLwpyezFBTFoY+zemODgDv9fcuFNWrz/KPB0a8JmBYeFpk6ImXlhyQUg mMiRilix3mEA33PMVVdKKeNxFV9zb8L9iEhWObjJS21lZfBbsEoY06cvE8EfDQ0M bAOFirXbkAWI1M7w846YD/rrYFs1t0vPKzXVqqBTujTzlI1ZgdA5eFOEhbagVxpW Z+eYIQQ8s2EkEt4OxlMNfFdFpBOPqXHyS6N8Jw4Bo5ISyWFfWfGiydX9iOa862KX JfpH6Jak3tU2G/uw7D6crbqsFUeD24veWpo3cg7rZrgN0wZZkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNAY87vGnzBuDGUJUsrWdK5dBAiaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODYxNGEwNmMtNmJhOC0z YWJjLWFjNDUtY2VmOTU5NjE3NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIn8YcPNE9naGkPnPyMYKPiuzlBqJbUP8q1xOdqZ8cYcbAQTq3Wr D7ab5PqL4iZHk5vjh1vG4GTnSz+OAlpQdO0deySI8oqAG9cTEImU/JA9y7qxw1/8 3q+edDARsjPqWt03s/ncYqDmjZ9ZikFhGnTsjMhn4UwaFok36QVA/npjs4gcoxL3 nrBomfOnI37aozlMbOn86ZixOUQYjeAgwNLCE26/Oc3t3nk8C9/YfQUrjmqmJNGH IT46ROEkgoSCQeVh10y/uNsGdqzkWdPYQLBXL4W6vxR1khXg7yLsTTe9e2ojxXIE JBG2RVGWXugBEI46t7NjbrkrPF1kKhAzrfg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:25 2025 by rpki-client