$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa File: fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa (raw, json) Hash identifier: T3E8POxAKG1DRAq+A/H5ZPnfmmsnL6OW4+W897ndcaM= Subject key identifier: 36:9D:16:A6:6C:9E:D3:EF:63:6E:C8:4C:2E:E4:6A:02:B6:76:50:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCEE93FA70851C9AC0D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:2700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ce:e9:3f:a7:08:51:c9:ac:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=48d1f774-a756-4c7a-85a6-5f18bc2d41b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:d6:2a:e8:77:d5:86:70:d8:a2:12:47:dc: 27:30:db:ed:4e:55:89:45:b6:db:1e:b0:bd:84:41: 4a:b9:27:90:ff:84:a8:a0:db:df:cf:1a:9a:fd:fd: c2:3b:b9:5f:bc:60:c5:e9:f0:19:4a:7f:d0:99:b4: db:3e:96:a9:71:b9:02:26:9d:26:be:c5:9f:28:81: ad:9f:0f:21:f7:45:e8:6a:8c:35:d4:46:b3:94:de: b9:16:ee:5b:d1:5d:52:e2:2f:37:03:bf:94:83:3d: ce:80:e9:4c:5b:3d:bc:15:43:b1:4c:31:d5:f7:20: 7e:1d:1c:8d:57:b3:df:bd:52:95:47:2f:f4:f3:b8: 0c:c4:2f:78:a3:dc:91:a7:ce:61:19:a7:a8:5e:8a: f4:8d:50:7c:84:cd:99:06:9a:49:72:37:a9:63:57: 74:86:8a:14:c2:18:bb:33:8f:b8:3a:73:1b:00:23: c3:bb:e7:f6:4e:a5:23:5f:e0:fc:45:09:48:aa:e3: e0:a2:1e:50:91:c4:5c:c8:64:c1:d5:eb:08:97:78: f8:cb:73:ab:e4:f2:4a:b1:3a:71:89:3a:1b:16:1e: a8:8c:a6:e2:d1:bd:23:f1:bf:e4:d5:53:ef:35:de: 5e:b5:a9:e6:0d:70:b9:66:35:ee:08:3b:93:29:4a: 2b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9D:16:A6:6C:9E:D3:EF:63:6E:C8:4C:2E:E4:6A:02:B6:76:50:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d1:19:3d:0c:3c:c9:29:e6:09:dd:34:00:79:7c:35:4d:e2: 65:bf:6c:ff:58:0d:27:66:68:96:b5:ed:2e:d8:4b:c1:c5:fe: 19:b2:87:3b:66:2f:18:ea:57:ea:0d:08:c4:df:0a:5a:0c:08: 1c:f1:77:8a:4c:28:72:10:2b:e5:dc:77:ab:4e:ce:b6:ce:4a: d0:bf:20:90:b1:f3:07:7e:df:11:98:3e:6f:dc:6b:ae:09:1b: a6:ac:e3:fa:4e:82:31:7b:01:ad:fd:fd:ed:13:a1:ca:2e:af: 53:3e:bc:b1:73:a1:d9:59:9d:13:59:38:cb:f6:fa:e6:b2:43: b5:3c:7d:62:f7:ef:df:1a:ae:30:62:bf:50:81:10:5a:d8:e7: aa:20:0c:c4:b0:e2:fd:72:9f:16:0a:e9:d4:7b:db:67:a8:cc: 41:3a:d9:b8:6d:d3:8e:60:55:43:90:81:61:77:57:0b:9c:3f: 36:2b:87:62:89:d9:63:4e:ba:a1:73:be:8e:c2:e7:4d:60:3f: 84:4f:d7:f4:5a:0c:ca:4b:98:5e:f8:60:ee:b0:11:07:72:e4: f7:4f:4f:c5:14:b7:b7:78:21:3b:ef:fb:26:f1:5b:d0:cd:bc: cf:a0:2c:65:f1:66:05:ec:8d:12:c1:83:25:ad:d8:ba:7d:e1: ad:6d:f1:d2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXM7pP6cIUcmsDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NDhkMWY3NzQtYTc1Ni00YzdhLTg1YTYtNWYxOGJjMmQ0MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbzWKuh31YZw2KISR9wnMNvtTlWJRbbbHrC9 hEFKuSeQ/4SooNvfzxqa/f3CO7lfvGDF6fAZSn/QmbTbPpapcbkCJp0mvsWfKIGt nw8h90Xoaow11EazlN65Fu5b0V1S4i83A7+Ugz3OgOlMWz28FUOxTDHV9yB+HRyN V7PfvVKVRy/087gMxC94o9yRp85hGaeoXor0jVB8hM2ZBppJcjepY1d0hooUwhi7 M4+4OnMbACPDu+f2TqUjX+D8RQlIquPgoh5QkcRcyGTB1esIl3j4y3Or5PJKsTpx iTobFh6ojKbi0b0j8b/k1VPvNd5etanmDXC5ZjXuCDuTKUorYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDadFqZsntPvY27ITC7kagK2dlArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmU5NzJlNDgtNzRhMC0z NWI5LWIwZTMtYjEzNjAzM2Q0ZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOtEZPQw8ySnmCd00AHl8NU3iZb9s/1gNJ2ZolrXtLthLwcX+GbKH O2YvGOpX6g0IxN8KWgwIHPF3ikwochAr5dx3q07Ots5K0L8gkLHzB37fEZg+b9xr rgkbpqzj+k6CMXsBrf397ROhyi6vUz68sXOh2VmdE1k4y/b65rJDtTx9Yvfv3xqu MGK/UIEQWtjnqiAMxLDi/XKfFgrp1HvbZ6jMQTrZuG3TjmBVQ5CBYXdXC5w/NiuH YonZY066oXO+jsLnTWA/hE/X9FoMykuYXvhg7rARB3Lk909PxRS3t3ghO+/7JvFb 0M28z6AsZfFmBeyNEsGDJa3Yun3hrW3x0g== -----END CERTIFICATE-----Generated at Tue Nov 4 19:16:05 2025 by rpki-client