$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa File: 8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa (raw, json) Hash identifier: Ourey5tOrHDV3qD5xpNFWxygQnNuH4D0QXCUi62OGiM= Subject key identifier: 0A:1D:3F:B2:10:0F:D9:34:A9:3A:1B:94:2B:91:D6:B5:5A:0D:CA:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFFE2EE36D95FB1CE8A90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ff:e2:ee:36:d9:5f:b1:ce:8a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f003fb76-3de7-4953-96ac-213b2650e672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c2:11:0e:ba:d3:b1:bc:00:52:58:60:2f:b8: dd:ff:ce:37:05:a6:31:de:9b:a6:af:e5:eb:21:a3: d8:c0:4c:f0:33:5f:5e:7a:2b:f9:bd:50:fc:e7:e7: 21:53:6c:71:32:2c:2e:20:0e:9b:cb:d4:36:da:32: 4e:b8:3d:57:10:13:fa:19:5e:94:a7:14:7e:d2:15: e0:7f:50:d6:77:21:ea:ce:57:00:da:86:fc:22:7e: a7:81:45:cd:d1:a8:e7:50:50:c6:05:ce:bf:05:2d: 92:dc:29:28:63:19:60:1a:a5:b2:cc:d4:7e:c5:14: c0:16:b4:18:bb:1b:bd:d5:b4:52:77:b8:2a:e8:9d: 5e:c5:6c:71:4f:45:2e:52:64:5a:2c:e7:df:e1:99: 7f:7f:98:06:9f:62:1a:c0:c5:a3:1f:e2:e1:fe:f5: 5f:32:4b:39:9e:df:ea:45:8c:d4:eb:13:bc:78:5f: 3b:89:4d:8a:a5:b4:a7:34:7e:70:be:94:7d:2e:6b: 76:aa:62:7b:49:28:4b:ab:88:41:b4:1f:50:74:b5: 03:aa:84:3c:13:b3:c9:11:c9:cf:78:5b:8a:17:41: 49:18:1c:87:7d:a2:8f:15:07:f0:49:fc:26:24:b3: a6:76:64:6a:bd:e9:c2:72:02:d0:cf:3b:da:9d:60: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1D:3F:B2:10:0F:D9:34:A9:3A:1B:94:2B:91:D6:B5:5A:0D:CA:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:f00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:07:b1:56:f3:b7:83:66:84:9a:48:51:65:ba:91:d3:a7:ea: c3:da:1a:e1:97:65:0a:f7:fe:39:37:59:78:19:40:2b:a8:ac: c5:20:92:ce:3b:97:fc:71:bf:56:36:3a:b1:74:c7:c8:e6:6b: 59:8f:af:9a:d1:26:19:38:b9:1a:b3:35:8b:6a:ea:06:d2:a3: 56:bd:4c:8a:54:11:06:93:2b:c4:99:44:02:e2:fa:4f:48:b1: e0:0d:ea:74:e9:a9:fd:c9:42:70:be:c0:37:6a:cd:9b:09:00: e0:cf:9c:cf:9b:c2:15:b3:91:a9:4b:b7:27:d5:39:b7:5e:85: 97:ae:69:e6:45:d7:ee:c0:41:29:88:b6:65:69:09:ee:ab:ab: eb:f4:52:5d:c6:bd:39:ca:5d:d4:b8:90:78:4c:74:be:d4:13: 34:16:f8:36:0b:8c:17:26:eb:7f:4c:5b:93:ed:43:6c:37:ac: 4f:02:3d:06:17:6d:42:ee:37:da:9f:e2:4a:19:67:c5:26:42: e5:10:cd:42:3e:39:ed:c1:2f:6e:d4:db:fe:35:b2:39:b8:8d: 14:f7:94:0c:d8:88:e5:d2:ea:3e:2b:53:0e:bf:89:9d:3d:47: f2:b7:9a:65:56:7f:01:c1:5c:db:ff:ac:f1:75:0d:be:f9:1d: b1:27:a1:b6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXP/i7jbZX7HOipAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjAwM2ZiNzYtM2RlNy00OTUzLTk2YWMtMjEzYjI2NTBlNjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMIRDrrTsbwAUlhgL7jd/843BaYx3pumr+Xr IaPYwEzwM19eeiv5vVD85+chU2xxMiwuIA6by9Q22jJOuD1XEBP6GV6UpxR+0hXg f1DWdyHqzlcA2ob8In6ngUXN0ajnUFDGBc6/BS2S3CkoYxlgGqWyzNR+xRTAFrQY uxu91bRSd7gq6J1exWxxT0UuUmRaLOff4Zl/f5gGn2IawMWjH+Lh/vVfMks5nt/q RYzU6xO8eF87iU2KpbSnNH5wvpR9Lmt2qmJ7SShLq4hBtB9QdLUDqoQ8E7PJEcnP eFuKF0FJGByHfaKPFQfwSfwmJLOmdmRqvenCcgLQzzvanWBB+wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAodP7IQD9k0qToblCuR1rVaDcpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJhYzA3NTItYjQ5NS0z YmQxLWJhYTAtNmM2NWI2Y2Q4NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAA8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjgexVvO3g2aEmkhRZbqR06fqw9oa4ZdlCvf+OTdZeBlAK6isxSCS zjuX/HG/VjY6sXTHyOZrWY+vmtEmGTi5GrM1i2rqBtKjVr1MilQRBpMrxJlEAuL6 T0ix4A3qdOmp/clCcL7AN2rNmwkA4M+cz5vCFbORqUu3J9U5t16Fl65p5kXX7sBB KYi2ZWkJ7qur6/RSXca9Ocpd1LiQeEx0vtQTNBb4NguMFybrf0xbk+1DbDesTwI9 BhdtQu432p/iShlnxSZC5RDNQj457cEvbtTb/jWyObiNFPeUDNiI5dLqPitTDr+J nT1H8reaZVZ/AcFc2/+s8XUNvvkdsSehtg== -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:39 2025 by rpki-client