$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99c64ca3-e624-3e4d-8d76-36fdc5b12898.roa File: 99c64ca3-e624-3e4d-8d76-36fdc5b12898.roa (raw, json) Hash identifier: ph3AzPrVkpbLcv3z4H0JMw1aF9xJ7IeTqqKT4cKyhl0= Subject key identifier: 72:5A:1B:D4:62:E1:A6:09:1C:5A:4D:83:54:DD:4B:2E:53:4E:14:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCC28878B3B68E4269200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99c64ca3-e624-3e4d-8d76-36fdc5b12898.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cc:28:87:8b:3b:68:e4:26:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=710a1b92-f258-450c-9350-67cd6a95b725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:61:4c:20:7a:77:66:6e:9f:a2:c9:59:71:00: 10:a1:74:4c:37:04:53:29:d3:6f:0f:20:f4:e8:a7: 6a:0d:1e:56:25:8b:65:7d:be:09:20:17:6d:84:2d: 7d:1b:a0:a3:ad:93:b4:be:9a:13:14:0d:c5:b5:07: e3:e5:5d:99:a4:25:ff:29:c3:b7:6d:ab:af:4a:de: ce:75:94:06:50:dc:af:1d:3c:45:97:cc:8d:47:e1: af:62:0b:40:27:fc:c7:84:c7:c2:4b:ce:24:df:97: 8b:36:5d:f4:0e:d3:69:06:4a:4b:15:49:5f:95:54: d3:ac:80:3c:c7:86:fa:11:c2:d3:95:3a:6d:1d:10: 79:03:40:d3:ff:7b:c3:eb:c9:2c:7d:d6:d9:7a:d2: 85:c1:c4:59:67:a9:15:34:8f:86:1d:d4:93:4c:4d: 5f:bd:0b:af:0a:c6:6c:d6:59:f3:ef:7f:ce:5b:cf: bf:5d:5b:d7:b7:f0:e0:56:21:37:04:77:b3:3b:95: 03:b1:9d:c9:eb:33:7f:52:9e:69:5c:47:8b:94:16: 04:d7:eb:45:36:2f:7f:ac:7c:21:c6:29:3f:13:f5: fb:77:ef:b0:f7:d5:3c:f4:ab:92:67:a3:75:46:a9: 75:9b:3a:3a:5f:54:ec:ce:51:a5:33:e8:96:c4:a5: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5A:1B:D4:62:E1:A6:09:1C:5A:4D:83:54:DD:4B:2E:53:4E:14:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99c64ca3-e624-3e4d-8d76-36fdc5b12898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4b:53:08:48:e4:85:3d:2d:27:7e:5f:e5:0b:96:04:93:c0: 84:79:95:fc:9f:2a:d7:31:ec:b4:b8:4f:6f:8c:d2:df:a9:df: 60:f0:f2:b8:4f:85:1c:86:d8:2f:68:31:ba:4d:bd:cb:e8:b5: 29:47:35:b3:09:db:df:e6:6e:1b:20:21:c0:4c:73:f3:f5:f3: bd:15:c5:33:e8:96:8b:44:09:24:85:4e:61:09:1a:1b:f0:a4: 3f:02:7f:5f:56:be:6e:61:dc:28:60:7c:ad:2b:a8:61:ab:28: bd:98:53:3b:fd:e3:b9:44:07:55:61:f5:f7:89:cb:e4:fc:22: 2b:63:08:a5:b7:0b:1a:ad:af:4a:bc:ff:c0:d5:d1:6d:1f:9d: c0:a4:54:1b:01:eb:8a:45:e0:30:44:f2:76:d0:64:ec:58:4d: f7:db:03:7a:0a:2d:7a:c5:c4:3f:ae:a6:b2:2f:3e:ca:19:1f: 98:51:7a:35:8d:88:19:41:52:97:84:8b:f4:34:62:c8:ad:a7: e2:90:86:9b:18:83:b7:4c:28:0e:3d:75:07:34:ee:a8:a0:46: 4c:2a:d5:df:3e:bc:ab:f3:14:c3:49:c5:fb:fc:91:9f:e3:8d: a4:8b:ce:ca:06:a3:cd:2b:14:dd:0d:53:b0:59:39:9f:a9:b6: 09:35:0e:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXMwoh4s7aOQmkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzEwYTFiOTItZjI1OC00NTBjLTkzNTAtNjdjZDZhOTViNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWFMIHp3Zm6foslZcQAQoXRMNwRTKdNvDyD0 6KdqDR5WJYtlfb4JIBdthC19G6CjrZO0vpoTFA3FtQfj5V2ZpCX/KcO3bauvSt7O dZQGUNyvHTxFl8yNR+GvYgtAJ/zHhMfCS84k35eLNl30DtNpBkpLFUlflVTTrIA8 x4b6EcLTlTptHRB5A0DT/3vD68ksfdbZetKFwcRZZ6kVNI+GHdSTTE1fvQuvCsZs 1lnz73/OW8+/XVvXt/DgViE3BHezO5UDsZ3J6zN/Up5pXEeLlBYE1+tFNi9/rHwh xik/E/X7d++w99U89KuSZ6N1Rql1mzo6X1TszlGlM+iWxKXitQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHJaG9Ri4aYJHFpNg1TdSy5TThRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTljNjRjYTMtZTYyNC0z ZTRkLThkNzYtMzZmZGM1YjEyODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHtLUwhI5IU9LSd+X+ULlgSTwIR5lfyfKtcx7LS4T2+M0t+p32Dw 8rhPhRyG2C9oMbpNvcvotSlHNbMJ29/mbhsgIcBMc/P1870VxTPolotECSSFTmEJ GhvwpD8Cf19Wvm5h3ChgfK0rqGGrKL2YUzv947lEB1Vh9feJy+T8IitjCKW3Cxqt r0q8/8DV0W0fncCkVBsB64pF4DBE8nbQZOxYTffbA3oKLXrFxD+uprIvPsoZH5hR ejWNiBlBUpeEi/Q0Ysitp+KQhpsYg7dMKA49dQc07qigRkwq1d8+vKvzFMNJxfv8 kZ/jjaSLzsoGo80rFN0NU7BZOZ+ptgk1Dn0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:04 2025 by rpki-client