$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa File: fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa (raw, json) Hash identifier: Gk/znW5dziR3Ekh/BZyx/0c4snbudtSdewr5z7gfkMc= Subject key identifier: 1F:BF:4F:42:03:85:67:36:EF:C3:E9:C6:A9:0A:80:13:84:01:E2:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D00A8CDE89E73B1E07980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2604:cb00:2900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:00:a8:cd:e8:9e:73:b1:e0:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=57963aa7-4e1d-4d2e-a67c-d94beb75ca14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:92:f4:1a:70:09:d3:ce:2a:55:ac:a6:03: f7:09:3c:17:0a:d5:34:42:b2:92:f4:84:a4:7a:72: 81:8b:b4:0b:14:13:73:f7:07:ce:0b:9c:7b:1b:10: 86:47:1d:16:ed:37:04:e6:91:f5:d0:30:bc:a2:22: c0:8d:37:b4:82:ad:00:72:ee:7d:07:f7:05:16:9e: 07:9e:21:cb:07:fd:2c:ee:db:84:0f:31:6f:d8:d7: 45:36:ca:aa:d7:d2:5f:52:23:9b:7c:aa:e4:6f:35: 0d:7d:24:c3:d0:6a:98:61:66:50:17:ee:83:c9:3e: fe:46:78:bb:17:86:14:b3:cd:99:ba:5c:2b:20:a0: 7f:06:6f:09:c1:9a:0e:22:91:64:ed:95:ba:d6:d9: ae:ed:12:25:00:89:d1:ed:c8:73:30:64:41:ab:da: f5:a9:f1:96:c5:61:53:75:f5:e6:fd:80:ed:3f:df: 17:7e:80:97:bc:c3:c6:a9:66:f4:99:ea:44:ee:65: cd:32:a5:19:ee:fd:3c:d2:52:95:b7:52:9b:66:9c: 3c:2c:95:fe:e1:e6:5b:74:55:d4:ed:41:66:7b:eb: d7:ca:e2:87:a0:fc:7f:b0:cd:9e:01:36:4c:bb:92: ec:2c:e0:b2:05:27:c8:2d:7c:39:fe:4b:54:25:2b: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BF:4F:42:03:85:67:36:EF:C3:E9:C6:A9:0A:80:13:84:01:E2:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:62:d4:48:75:c4:f6:9b:12:05:65:da:f7:bb:d8:ff:25:28: 2a:60:60:e8:76:5c:10:74:6b:f6:62:52:be:a8:05:3f:7f:8f: e2:36:a4:31:ba:91:18:17:c4:5a:13:16:3d:d1:e9:4a:2d:c3: 88:c6:92:ee:02:eb:56:c9:b7:82:46:36:56:b1:45:c5:e9:2c: 3c:68:ae:92:8d:2a:04:7b:26:1a:76:6f:3d:25:6c:bc:48:7d: a7:f0:1e:0a:13:03:ef:d7:b4:ab:46:7b:ea:76:c7:d8:46:72: eb:23:5b:72:0c:b7:51:45:7a:33:3f:cf:b6:0a:b2:df:eb:d8: 3d:d7:23:8e:d5:51:54:db:51:6d:b1:eb:32:34:cc:c3:c0:39: 04:66:a1:9e:97:17:f0:51:a5:2b:58:71:3e:90:f5:95:4e:20: c9:35:8a:c9:80:6a:3c:b5:20:80:15:d9:7a:13:8c:94:d5:f0: 7f:68:81:ff:41:e2:d0:0a:da:45:af:39:01:2d:2b:94:5a:05: ea:26:33:08:af:95:91:f0:48:86:1b:b9:d9:bc:e3:de:93:00: 9a:52:01:ee:0e:8b:9d:a5:ca:97:8b:2f:ff:92:5e:e6:9a:92: 25:92:54:45:7e:06:05:02:db:b0:94:b2:51:81:18:45:a1:6e: 23:47:6d:69 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXQCozeiec7HgeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTc5NjNhYTctNGUxZC00ZDJlLWE2N2MtZDk0YmViNzVjYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs6S9BpwCdPOKlWspgP3CTwXCtU0QrKS9ISk enKBi7QLFBNz9wfOC5x7GxCGRx0W7TcE5pH10DC8oiLAjTe0gq0Acu59B/cFFp4H niHLB/0s7tuEDzFv2NdFNsqq19JfUiObfKrkbzUNfSTD0GqYYWZQF+6DyT7+Rni7 F4YUs82ZulwrIKB/Bm8JwZoOIpFk7ZW61tmu7RIlAInR7chzMGRBq9r1qfGWxWFT dfXm/YDtP98XfoCXvMPGqWb0mepE7mXNMqUZ7v080lKVt1KbZpw8LJX+4eZbdFXU 7UFme+vXyuKHoPx/sM2eATZMu5LsLOCyBSfILXw5/ktUJSsuJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB+/T0IDhWc278PpxqkKgBOEAeLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmVkMWM2N2MtZGIyMi0z NDgzLWIyZTMtZjU5NmUwN2RiY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYGLUSHXE9psSBWXa97vY/yUoKmBg6HZcEHRr9mJSvqgFP3+P4jak MbqRGBfEWhMWPdHpSi3DiMaS7gLrVsm3gkY2VrFFxeksPGiuko0qBHsmGnZvPSVs vEh9p/AeChMD79e0q0Z76nbH2EZy6yNbcgy3UUV6Mz/Ptgqy3+vYPdcjjtVRVNtR bbHrMjTMw8A5BGahnpcX8FGlK1hxPpD1lU4gyTWKyYBqPLUggBXZehOMlNXwf2iB /0Hi0AraRa85AS0rlFoF6iYzCK+VkfBIhhu52bzj3pMAmlIB7g6LnaXKl4sv/5Je 5pqSJZJURX4GBQLbsJSyUYEYRaFuI0dtaQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:59:06 2025 by rpki-client