$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4222608-8b35-3c41-97a0-25f33987aef4.roa File: b4222608-8b35-3c41-97a0-25f33987aef4.roa (raw, json) Hash identifier: H1poFwRaYTsTn8mx5F9yOBexWC0zf+Ox4imh4fnu3ds= Subject key identifier: 52:10:AD:EF:00:7D:FE:FC:5C:21:49:BB:80:15:6C:71:71:48:E8:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCCAA14B032EBECC02900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4222608-8b35-3c41-97a0-25f33987aef4.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cc:aa:14:b0:32:eb:ec:c0:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=4539b11d-581e-43e9-bff8-e74e088e063b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:15:fe:4a:4f:39:b0:c1:ad:d4:64:22:a3: f3:d1:38:4b:85:14:a6:2f:b3:40:ad:c0:2f:38:e5: c8:a4:cc:d9:14:88:27:27:7b:f2:6a:1b:3a:29:3c: b8:9d:2f:54:d4:eb:bb:f5:7b:0f:61:15:24:e9:d8: 3c:be:1c:50:b1:7a:47:58:3b:2b:e6:37:48:95:8c: e2:50:2b:c4:e3:80:7d:b3:85:25:dc:59:42:05:7e: 6f:a9:98:61:9e:02:69:b2:46:50:87:14:38:13:ab: 3c:e1:0e:6d:72:0e:d2:f3:50:41:c9:56:e5:50:25: 84:fb:4f:07:c8:bd:ac:83:29:a0:41:78:ad:15:f5: 04:f6:ea:49:83:19:6f:db:de:4e:df:b6:09:f8:bc: 37:bc:f5:55:6b:32:4b:7d:b1:dc:0a:8b:1c:6a:b6: 65:51:01:a1:6b:59:71:ce:0c:a1:00:78:36:14:6a: 49:f6:f8:ca:ac:96:aa:88:61:76:a1:e0:8c:86:17: d7:f2:47:92:1f:9e:48:2c:55:47:9d:ea:cf:77:d9: 43:77:53:8f:dd:be:9a:4e:19:45:f2:c2:02:7f:d0: e4:a3:31:b7:e2:9e:1a:00:5b:71:3c:c1:9b:c9:4f: 51:6e:63:07:a9:ee:8b:9b:59:02:f4:ea:71:7d:3a: 0c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:10:AD:EF:00:7D:FE:FC:5C:21:49:BB:80:15:6C:71:71:48:E8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4222608-8b35-3c41-97a0-25f33987aef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:93:35:ad:75:4d:cd:cd:14:10:7d:1d:f2:f0:6e:c6:e5:b5: 0e:56:22:59:c0:a5:56:78:0d:fb:b3:5a:69:1f:b1:a4:a6:01: 16:2e:5e:e1:98:cc:d1:f2:ea:20:25:47:42:ae:4d:7c:aa:02: 88:97:94:10:6f:57:61:d1:f2:37:13:ab:2a:46:19:f1:73:e7: 11:96:0b:5e:e4:51:c7:cc:dd:3e:ea:82:23:ed:9b:6e:e3:68: da:74:32:47:b0:f1:db:57:43:8b:4f:71:d0:2e:e4:a1:d0:86: 39:8f:69:5a:e3:57:0f:20:4f:4b:6e:dd:fa:66:47:4c:3c:3a: 3d:40:af:b5:35:ad:bf:e1:b5:6c:ef:c4:d0:0c:fd:03:9d:63: b9:8a:a8:44:c0:7b:c0:70:46:eb:97:3f:30:c8:d6:a9:01:be: 21:d8:5a:e2:da:07:b5:02:f4:9b:84:a5:ab:94:98:1e:a1:9f: 48:34:95:1a:bf:17:78:af:6e:cb:7b:49:bf:db:82:bb:2f:ad: e3:f5:df:a6:19:e5:82:14:40:6b:95:15:36:cc:51:00:00:57: 26:1e:d4:48:c9:a4:f6:e3:2d:c0:8d:75:62:0b:c7:23:5e:ee: ca:76:a9:64:40:13:53:a2:33:7e:a4:58:07:19:e2:a5:1e:b3: 74:a2:c5:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXMyqFLAy6+zAKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NDUzOWIxMWQtNTgxZS00M2U5LWJmZjgtZTc0ZTA4OGUwNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdkV/kpPObDBrdRkIqPz0ThLhRSmL7NArcAv OOXIpMzZFIgnJ3vyahs6KTy4nS9U1Ou79XsPYRUk6dg8vhxQsXpHWDsr5jdIlYzi UCvE44B9s4Ul3FlCBX5vqZhhngJpskZQhxQ4E6s84Q5tcg7S81BByVblUCWE+08H yL2sgymgQXitFfUE9upJgxlv295O37YJ+Lw3vPVVazJLfbHcCoscarZlUQGha1lx zgyhAHg2FGpJ9vjKrJaqiGF2oeCMhhfX8keSH55ILFVHnerPd9lDd1OP3b6aThlF 8sICf9DkozG34p4aAFtxPMGbyU9RbmMHqe6Lm1kC9OpxfToM3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFIQre8Aff78XCFJu4AVbHFxSOhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQyMjI2MDgtOGIzNS0z YzQxLTk3YTAtMjVmMzM5ODdhZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHOTNa11Tc3NFBB9HfLwbsbltQ5WIlnApVZ4DfuzWmkfsaSmARYu XuGYzNHy6iAlR0KuTXyqAoiXlBBvV2HR8jcTqypGGfFz5xGWC17kUcfM3T7qgiPt m27jaNp0Mkew8dtXQ4tPcdAu5KHQhjmPaVrjVw8gT0tu3fpmR0w8Oj1Ar7U1rb/h tWzvxNAM/QOdY7mKqETAe8BwRuuXPzDI1qkBviHYWuLaB7UC9JuEpauUmB6hn0g0 lRq/F3ivbst7Sb/bgrsvreP136YZ5YIUQGuVFTbMUQAAVyYe1EjJpPbjLcCNdWIL xyNe7sp2qWRAE1OiM36kWAcZ4qUes3Sixew= -----END CERTIFICATE-----Generated at Wed Nov 5 06:27:30 2025 by rpki-client