$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb51557-45e4-39cc-bb83-55f34037e45c.roa File: feb51557-45e4-39cc-bb83-55f34037e45c.roa (raw, json) Hash identifier: l0YuebSmggV12F+nYjP00qJyZQt/WXNVuX97nqnv0jQ= Subject key identifier: 9F:A6:96:AF:5B:79:DD:B0:72:79:A4:10:3E:16:CD:F3:03:A4:EE:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC7FC8FD5AF37FE990280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb51557-45e4-39cc-bb83-55f34037e45c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2001:4840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c7:fc:8f:d5:af:37:fe:99:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=01f4dc4f-44f4-4353-9825-4e7cd896d0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:97:42:d4:87:0d:df:68:aa:d3:98:9c:d7:b3: b8:1f:1c:70:e0:6f:05:ef:0d:f6:5a:b5:0f:2b:bd: 45:29:14:35:34:09:1b:a8:06:1a:cb:f8:b7:bf:b9: 3b:5c:43:b7:39:db:0c:32:0d:f5:69:b8:b6:d0:06: 6a:3f:fe:3a:5e:f9:63:53:0c:5c:53:81:e3:89:2e: 4f:b3:a5:a7:ba:42:58:ca:f1:32:d4:9c:0a:c9:53: 0a:dd:2a:29:71:1c:b3:7c:ba:a8:9a:8e:7e:ee:69: ee:33:ae:ea:78:35:cd:99:5c:4f:e0:e3:d4:6b:19: ec:61:55:c0:a0:3a:6b:fa:12:31:eb:67:ed:d7:dc: 49:60:81:5c:43:09:9a:ab:f5:a7:5e:45:aa:d2:5d: 98:95:39:f2:9c:ce:fc:08:ce:f3:07:9f:c6:9f:60: fe:51:20:74:b6:bb:c9:6a:a2:3a:60:f9:2f:ef:22: af:8d:62:62:52:38:fa:86:48:e5:ba:22:7a:d6:57: 44:70:e1:79:02:0c:fb:30:e2:a1:35:5a:12:53:5c: dd:ab:d2:e0:f6:8d:ed:7d:f3:91:28:a5:02:40:e4: b8:a4:17:39:be:8a:b6:f7:25:75:9c:e7:db:60:67: 2c:0d:42:83:4d:e9:d2:a8:0f:5e:e8:f4:ef:47:9e: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A6:96:AF:5B:79:DD:B0:72:79:A4:10:3E:16:CD:F3:03:A4:EE:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb51557-45e4-39cc-bb83-55f34037e45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ea:28:43:d6:d1:f1:05:61:cc:c7:77:55:21:39:17:ff:35: 5a:be:f7:db:ae:aa:14:6f:5d:b8:e1:b1:01:4f:de:db:c7:75: 3e:7b:07:5f:a8:18:6f:a9:96:c7:75:15:c3:0b:14:9f:15:31: 34:a1:4b:a2:9a:cd:6c:52:24:e1:7b:93:36:5f:5c:1d:a4:56: 04:7a:20:ee:27:13:35:8c:89:3a:a0:d2:7f:4f:bc:b5:f1:74: bc:c2:d7:fa:5d:15:3b:3c:2b:41:a0:fc:15:61:bc:a6:62:09: 7a:a9:0b:66:a9:3a:3d:50:77:62:19:27:cc:22:4b:45:3c:2e: 22:98:72:48:b4:b7:67:c5:fc:9a:2d:02:36:78:1a:71:1a:e6: 01:7b:54:22:09:ff:db:32:99:54:67:6e:c9:59:60:ce:26:5d: a8:ee:96:a6:d4:01:9d:7b:28:ac:65:6a:e6:89:e6:1c:f3:34: 7c:74:2b:2e:8c:cd:53:86:b1:37:f6:13:cf:fe:7f:9d:df:e9: 05:81:7f:2a:98:09:19:13:6a:c9:c1:f9:24:ed:8b:fe:61:a8: 05:58:99:02:a8:5c:89:4e:e4:98:cb:34:60:9a:a5:6c:59:7b: b6:17:4a:a8:ec:d3:78:a0:78:25:ef:62:0c:d0:bc:6c:59:91: 1f:e7:c4:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxXMf8j9WvN/6ZAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDFmNGRjNGYtNDRmNC00MzUzLTk4MjUtNGU3Y2Q4OTZkMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpdC1IcN32iq05ic17O4Hxxw4G8F7w32WrUP K71FKRQ1NAkbqAYay/i3v7k7XEO3OdsMMg31abi20AZqP/46XvljUwxcU4HjiS5P s6WnukJYyvEy1JwKyVMK3SopcRyzfLqomo5+7mnuM67qeDXNmVxP4OPUaxnsYVXA oDpr+hIx62ft19xJYIFcQwmaq/WnXkWq0l2YlTnynM78CM7zB5/Gn2D+USB0trvJ aqI6YPkv7yKvjWJiUjj6hkjluiJ61ldEcOF5Agz7MOKhNVoSU1zdq9Lg9o3tffOR KKUCQOS4pBc5voq29yV1nOfbYGcsDUKDTenSqA9e6PTvR55bRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ+mlq9bed2wcnmkED4WzfMDpO4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmViNTE1NTctNDVlNC0z OWNjLWJiODMtNTVmMzQwMzdlNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCA6ihD1tHxBWHMx3dVITkX/zVavvfbrqoUb1244bEBT97bx3U+ewdf qBhvqZbHdRXDCxSfFTE0oUuims1sUiThe5M2X1wdpFYEeiDuJxM1jIk6oNJ/T7y1 8XS8wtf6XRU7PCtBoPwVYbymYgl6qQtmqTo9UHdiGSfMIktFPC4imHJItLdnxfya LQI2eBpxGuYBe1QiCf/bMplUZ27JWWDOJl2o7pam1AGdeyisZWrmieYc8zR8dCsu jM1ThrE39hPP/n+d3+kFgX8qmAkZE2rJwfkk7Yv+YagFWJkCqFyJTuSYyzRgmqVs WXu2F0qo7NN4oHgl72IM0LxsWZEf58T+ -----END CERTIFICATE-----Generated at Tue Nov 4 16:58:54 2025 by rpki-client