$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df01aade-e946-3063-937a-7e128c9c6dc1.roa File: df01aade-e946-3063-937a-7e128c9c6dc1.roa (raw, json) Hash identifier: cxgpRJCJTIyV4wGwNnoADn0PWqsr83kdZfPxmFWX6+A= Subject key identifier: 46:7E:56:56:36:DE:C1:BE:64:FE:BA:22:0C:1B:3B:48:19:D4:89:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCEA715D3ADE902DE4EA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df01aade-e946-3063-937a-7e128c9c6dc1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:1d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ce:a7:15:d3:ad:e9:02:de:4e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5eddce60-b68f-4e84-9f49-88d8395d4dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:fa:db:5e:af:21:8b:b0:3e:88:bd:7e:2b: 0d:bc:f9:9e:53:86:ac:56:b6:29:f7:04:5e:a8:57: 86:a4:d4:aa:6a:9e:c2:6e:7e:5b:c6:43:91:c1:c0: 30:15:f2:7a:76:14:69:41:26:38:f0:0c:4a:af:de: f4:09:f8:09:ef:f6:8d:0b:56:71:37:3e:75:79:c5: 58:f7:91:c3:e4:8f:ca:6f:09:c8:54:4d:2d:43:ee: 99:ec:48:a4:7f:07:db:4b:fc:b6:48:c1:47:14:8d: fd:37:c6:38:5b:88:4a:51:aa:75:8d:18:22:04:b7: e2:b6:5b:76:f9:58:c4:65:b2:91:fc:42:6d:5d:c7: 08:73:ed:fc:ec:b7:13:40:65:4e:75:b4:2d:84:a9: f1:2e:77:25:ec:e4:18:b6:7f:fd:19:56:14:0e:4e: 07:d3:58:4a:c2:79:26:9a:43:66:97:6a:ed:7b:13: 45:46:3b:cb:f2:ee:e4:d3:af:42:bf:4b:76:ae:57: c9:b1:20:57:a6:a3:b0:29:dc:a0:3a:1c:c4:62:7a: 89:28:68:24:c2:18:a2:14:2f:f5:61:7e:52:72:f1: 1c:45:75:9d:a3:e6:15:e0:1e:d0:00:14:6a:98:b8: 25:92:5d:13:e3:db:e7:40:d9:88:b5:32:7d:d4:36: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7E:56:56:36:DE:C1:BE:64:FE:BA:22:0C:1B:3B:48:19:D4:89:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df01aade-e946-3063-937a-7e128c9c6dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:86:42:ef:c3:c6:e7:dd:7b:17:de:0b:cf:ec:15:f3:6b:8d: da:d3:9f:81:dc:f1:c7:9c:10:8c:70:4f:cc:76:c8:f9:b9:68: 18:a0:18:06:2f:86:c5:84:c4:72:c2:6b:8a:b4:e1:bd:72:5f: ea:69:70:0f:26:b8:30:2b:b5:a7:4a:3c:eb:c4:50:a2:e2:43: 01:df:89:59:fa:91:28:3b:d1:a8:35:40:6f:9c:8c:06:7a:02: 66:40:70:4d:a2:93:2a:6a:78:12:56:3d:32:76:d6:e4:41:42: 99:20:51:52:62:76:a1:21:79:02:cd:33:6c:a2:c9:36:8c:64: 8b:09:58:50:d3:8d:12:79:af:1e:79:57:8f:62:4c:3d:14:28: 57:e6:1a:2f:99:e6:98:5e:b2:63:c0:6c:bc:7a:83:22:06:41: 48:a0:7f:31:fd:22:71:61:b6:bb:7e:ef:f1:a6:30:6e:03:be: 18:32:d0:23:e2:61:80:30:46:91:0b:32:3f:04:fa:92:c1:e2: 1f:17:74:b0:fc:bc:34:fb:c2:12:47:1c:c4:45:ba:e6:94:9d: ef:4e:1a:db:7a:bd:fb:6c:0e:dd:2a:04:69:52:42:58:00:c8: cc:d6:b6:9d:03:35:60:e4:d1:e4:f6:80:d6:71:19:c6:cf:cf: 1f:b9:79:81 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM6nFdOt6QLeTqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NWVkZGNlNjAtYjY4Zi00ZTg0LTlmNDktODhkODM5NWQ0ZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2H6216vIYuwPoi9fisNvPmeU4asVrYp9wRe qFeGpNSqap7Cbn5bxkORwcAwFfJ6dhRpQSY48AxKr970CfgJ7/aNC1ZxNz51ecVY 95HD5I/KbwnIVE0tQ+6Z7EikfwfbS/y2SMFHFI39N8Y4W4hKUap1jRgiBLfitlt2 +VjEZbKR/EJtXccIc+387LcTQGVOdbQthKnxLncl7OQYtn/9GVYUDk4H01hKwnkm mkNml2rtexNFRjvL8u7k069Cv0t2rlfJsSBXpqOwKdygOhzEYnqJKGgkwhiiFC/1 YX5ScvEcRXWdo+YV4B7QABRqmLglkl0T49vnQNmItTJ91DbgxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEZ+VlY23sG+ZP66IgwbO0gZ1IkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGYwMWFhZGUtZTk0Ni0z MDYzLTkzN2EtN2UxMjhjOWM2ZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAB0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAk4ZC78PG5917F94Lz+wV82uN2tOfgdzxx5wQjHBPzHbI+bloGKAY Bi+GxYTEcsJrirThvXJf6mlwDya4MCu1p0o868RQouJDAd+JWfqRKDvRqDVAb5yM BnoCZkBwTaKTKmp4ElY9MnbW5EFCmSBRUmJ2oSF5As0zbKLJNoxkiwlYUNONEnmv HnlXj2JMPRQoV+YaL5nmmF6yY8BsvHqDIgZBSKB/Mf0icWG2u37v8aYwbgO+GDLQ I+JhgDBGkQsyPwT6ksHiHxd0sPy8NPvCEkccxEW65pSd704a23q9+2wO3SoEaVJC WADIzNa2nQM1YOTR5PaA1nEZxs/PH7l5gQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:25 2025 by rpki-client