$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4090cc7-d59b-33be-9408-78258d3ef95f.roa File: a4090cc7-d59b-33be-9408-78258d3ef95f.roa (raw, json) Hash identifier: MfLKq6RjdtrcZ3Om5DYq0oMDUGxpJxar2yM7xRPwxew= Subject key identifier: 9E:21:29:64:24:2E:1E:EB:E0:E8:20:54:5D:29:26:A4:D9:4D:82:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCC982D6081A8CA2BA440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4090cc7-d59b-33be-9408-78258d3ef95f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cc:98:2d:60:81:a8:ca:2b:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=2831d0c6-fccd-4da3-ba93-8007a4a60979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e6:3e:e3:54:26:3d:97:c0:c4:1d:83:3b:91: 86:31:e8:e4:58:f1:b3:f0:14:57:9c:55:68:1f:05: c2:e8:78:ce:d8:20:d0:1d:21:68:da:cb:f7:c1:66: bf:4c:17:ad:70:b8:87:4b:bd:5c:44:ec:a4:55:92: 1e:ca:d7:21:bf:17:0d:1f:f8:c9:00:dd:d2:1b:99: 0d:77:f5:d1:9a:f2:31:13:38:34:fe:81:c3:11:c2: 32:c1:96:f9:ec:f0:ee:87:e2:81:34:86:b5:b0:bd: a7:60:fe:c9:f6:9c:1f:0d:97:d3:a0:9a:ce:dc:18: 32:af:a2:3d:c9:85:8a:66:61:00:4e:de:ec:06:e6: c5:cd:30:5f:4c:7f:92:19:05:ab:71:fd:a9:b0:d9: 0b:4f:3a:aa:f1:6d:2a:bf:0f:e9:c6:41:ed:ab:e8: ec:16:63:55:2e:10:0c:75:48:05:c5:1f:eb:74:b0: 2a:c3:aa:55:73:ae:aa:ee:24:e1:b5:d1:1e:fc:81: 4c:00:c0:54:ed:c5:50:c3:65:77:56:77:cc:f2:3c: 37:64:6d:e6:42:03:34:6f:e0:41:af:d4:56:c8:1f: ba:c2:05:03:69:c7:74:13:9b:0c:a4:93:d6:41:49: b1:a8:83:f1:ca:0f:3a:11:f1:32:0c:78:19:84:ff: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:29:64:24:2E:1E:EB:E0:E8:20:54:5D:29:26:A4:D9:4D:82:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4090cc7-d59b-33be-9408-78258d3ef95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:77:c0:9b:ee:4f:e1:8b:41:92:eb:07:72:d2:db:3f:76:4d: 07:1b:d3:b3:be:0f:c8:fe:d1:ec:0a:44:36:2e:32:29:95:b0: 17:bf:d2:1a:7e:95:3e:0d:ce:51:75:a9:a9:42:da:a5:95:bf: 81:96:e6:c1:b4:7e:ef:dc:40:db:5e:69:9c:17:2f:e0:ca:4b: 5e:5a:16:36:88:77:8f:b7:c3:6a:f4:f6:8e:59:ed:39:a3:64: 3c:50:ca:49:14:27:bb:ea:12:14:3a:a1:35:6a:4a:8a:f6:e8: b5:43:4f:88:b8:e2:cb:ea:6b:9e:44:9c:77:44:53:21:0d:e6: a9:00:2f:c5:15:67:d6:e8:d0:f1:a1:50:eb:b7:58:c4:14:4d: 05:cb:30:72:fd:4d:76:91:fc:d8:f9:c8:85:e7:eb:8d:8b:e2: 97:f3:74:5a:9e:6c:83:49:fb:83:69:5e:ef:d1:32:d6:d7:19: df:8e:c3:02:42:d4:83:10:b3:9b:a9:ef:d5:ac:73:49:27:50: c9:80:4a:96:76:33:64:b4:d4:da:4e:1f:7a:c6:ed:1b:f2:c8: 71:0e:62:77:08:bb:8c:84:4a:c4:ee:b8:10:eb:7e:6c:95:75: 2e:6b:6b:cf:b7:52:28:4a:ff:57:20:d8:38:67:ae:f3:91:09: 95:16:b9:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXMyYLWCBqMorpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MjgzMWQwYzYtZmNjZC00ZGEzLWJhOTMtODAwN2E0YTYwOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOY+41QmPZfAxB2DO5GGMejkWPGz8BRXnFVo HwXC6HjO2CDQHSFo2sv3wWa/TBetcLiHS71cROykVZIeytchvxcNH/jJAN3SG5kN d/XRmvIxEzg0/oHDEcIywZb57PDuh+KBNIa1sL2nYP7J9pwfDZfToJrO3Bgyr6I9 yYWKZmEATt7sBubFzTBfTH+SGQWrcf2psNkLTzqq8W0qvw/pxkHtq+jsFmNVLhAM dUgFxR/rdLAqw6pVc66q7iThtdEe/IFMAMBU7cVQw2V3VnfM8jw3ZG3mQgM0b+BB r9RWyB+6wgUDacd0E5sMpJPWQUmxqIPxyg86EfEyDHgZhP9ugwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ4hKWQkLh7r4OggVF0pJqTZTYIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQwOTBjYzctZDU5Yi0z M2JlLTk0MDgtNzgyNThkM2VmOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHx3wJvuT+GLQZLrB3LS2z92TQcb07O+D8j+0ewKRDYuMimVsBe/ 0hp+lT4NzlF1qalC2qWVv4GW5sG0fu/cQNteaZwXL+DKS15aFjaId4+3w2r09o5Z 7TmjZDxQykkUJ7vqEhQ6oTVqSor26LVDT4i44svqa55EnHdEUyEN5qkAL8UVZ9bo 0PGhUOu3WMQUTQXLMHL9TXaR/Nj5yIXn642L4pfzdFqebINJ+4NpXu/RMtbXGd+O wwJC1IMQs5up79Wsc0knUMmASpZ2M2S01NpOH3rG7RvyyHEOYncIu4yESsTuuBDr fmyVdS5ra8+3UihK/1cg2DhnrvORCZUWuSU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:31 2025 by rpki-client