$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa File: 7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa (raw, json) Hash identifier: uGrRUkOMmEzmsx3JrpAN6gDUehixvjLZpcyqVyWL2Yw= Subject key identifier: CD:A2:85:77:9B:AA:CA:9A:25:CC:2C:39:C6:7F:25:FC:42:BE:2A:E1 Certificate issuer: /CN=cb49febe-7885-4a3a-8290-3710b3f34905 Certificate serial: 010D0C9F4328584BB02CFE293299182445C05300 Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 376 IP address blocks: 2001:510:20c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:fe:29:32:99:18:24:45:c0:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=17956489-2a2d-4a2e-afe1-8554a26557b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:51:25:bb:b3:d9:01:e0:c6:5b:5b:a5:b5: e1:25:f5:85:72:13:86:37:a2:0f:34:7a:fb:1a:4b: 2d:07:bb:c3:86:e7:ef:c8:2a:c2:af:1c:ea:43:f2: ff:3a:88:e9:9d:69:cf:cf:77:ec:0c:cc:bb:b4:46: 27:ce:02:38:01:dc:3e:10:e2:73:37:5f:f1:46:65: 4a:a6:53:47:96:20:95:4c:78:2c:45:42:1f:5a:3f: 3e:c6:59:91:86:80:76:4b:76:74:72:1b:3f:74:c6: da:c6:c4:57:ed:ce:c7:69:02:bd:f9:19:20:01:8e: fd:37:9e:7f:39:6a:aa:fb:1e:fb:45:e2:48:7e:3c: 70:4b:a8:42:e7:95:b2:65:8d:22:53:15:1b:33:87: 0b:5b:e3:df:8c:91:ee:d1:c6:7b:e8:c6:c8:aa:a6: 14:d7:24:01:d2:cf:4b:ac:2e:d7:f9:71:49:20:52: 40:24:37:c3:eb:c6:1f:23:19:ec:92:86:f9:86:9e: 32:f1:c6:f8:be:61:8d:2d:48:e1:13:0f:a2:76:54: be:76:86:59:a2:7a:16:12:a2:54:5e:a8:fa:a5:19: 66:41:7d:9b:ae:0a:3a:97:f5:f3:ed:b7:29:6a:26: 64:99:ac:13:04:5d:7e:63:c7:ee:40:43:e5:c7:b5: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A2:85:77:9B:AA:CA:9A:25:CC:2C:39:C6:7F:25:FC:42:BE:2A:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7f486d09-d7a5-31a6-9b92-0af6db9ac147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl X509v3 Authority Key Identifier: keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer sbgp-ipAddrBlock: critical IPv6: 2001:510:20c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:63:27:00:de:00:24:16:94:f2:bd:c5:5e:82:25:13:60:71: 00:f5:08:af:05:4e:b3:c4:a3:db:d7:67:ec:71:0f:d5:05:ab: 32:a1:07:a4:a8:ef:a1:e1:8d:95:e7:06:b3:56:69:2f:98:e1: dc:b0:0b:45:4f:60:3c:ce:78:76:97:3b:99:d1:8f:27:b6:3d: 72:a8:2f:b2:12:61:c4:0f:87:2e:d5:a4:1c:ca:c2:69:16:36: 95:92:26:e1:52:13:c0:7c:06:94:ec:b4:a5:98:73:64:02:e8: 9c:53:f2:4f:c5:d2:b7:c1:18:0f:87:eb:98:be:f3:d4:60:74: 91:86:d2:f1:88:99:52:87:07:71:fc:6e:a1:6f:98:e8:86:79: 37:0c:ab:f5:84:32:eb:ad:e6:3b:31:3a:44:ab:12:dc:a3:cb: 6e:e1:f8:0d:aa:38:46:93:1d:89:d4:74:29:e5:53:91:35:f8: ed:e0:1d:f6:b4:eb:1f:c0:7d:27:ca:f1:fc:0b:62:d7:c2:f6: 6d:09:ab:c8:75:af:7a:59:50:4a:43:65:af:8e:1a:db:ea:5b: ba:cf:51:5d:d2:90:bc:6d:f6:5b:47:07:8f:c8:ce:a6:37:09: b6:9d:08:d7:f7:34:ed:e6:a4:75:c0:3c:e2:cd:c2:c0:37:8e: 84:c7:51:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuwLP4pMpkYJEXAUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OWZlYmUtNzg4NS00YTNhLTgyOTAtMzcxMGIzZjM0 OTA1MB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MTc5NTY0ODktMmEyZC00YTJlLWFmZTEtODU1NGEyNjU1N2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBBRJbuz2QHgxltbpbXhJfWFchOGN6IPNHr7 GkstB7vDhufvyCrCrxzqQ/L/OojpnWnPz3fsDMy7tEYnzgI4Adw+EOJzN1/xRmVK plNHliCVTHgsRUIfWj8+xlmRhoB2S3Z0chs/dMbaxsRX7c7HaQK9+RkgAY79N55/ OWqq+x77ReJIfjxwS6hC55WyZY0iUxUbM4cLW+PfjJHu0cZ76MbIqqYU1yQB0s9L rC7X+XFJIFJAJDfD68YfIxnskob5hp4y8cb4vmGNLUjhEw+idlS+doZZonoWEqJU Xqj6pRlmQX2brgo6l/Xz7bcpaiZkmawTBF1+Y8fuQEPlx7WhwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM2ihXebqsqaJcwsOcZ/JfxCvirhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5 ZmViZS03ODg1LTRhM2EtODI5MC0zNzEwYjNmMzQ5MDUvN2Y0ODZkMDktZDdhNS0z MWE2LTliOTItMGFmNmRiOWFjMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2I0OWZlYmUtNzg4NS00YTNhLTgy OTAtMzcxMGIzZjM0OTA1L2NiNDlmZWJlLTc4ODUtNGEzYS04MjkwLTM3MTBiM2Yz NDkwNS5jcmwwHwYDVR0jBBgwFoAUvOGzZkw5m0aMDRmG67KX3JfQGd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5ZmViZS03ODg1LTRhM2EtODI5MC0zNzEw YjNmMzQ5MDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFEAIM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZjJwDeACQWlPK9xV6CJRNgcQD1CK8FTrPEo9vXZ+xxD9UFqzKh B6So76HhjZXnBrNWaS+Y4dywC0VPYDzOeHaXO5nRjye2PXKoL7ISYcQPhy7VpBzK wmkWNpWSJuFSE8B8BpTstKWYc2QC6JxT8k/F0rfBGA+H65i+89RgdJGG0vGImVKH B3H8bqFvmOiGeTcMq/WEMuut5jsxOkSrEtyjy27h+A2qOEaTHYnUdCnlU5E1+O3g Hfa06x/AfSfK8fwLYtfC9m0Jq8h1r3pZUEpDZa+OGtvqW7rPUV3SkLxt9ltHB4/I zqY3CbadCNf3NO3mpHXAPOLNwsA3joTHUb8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:57:28 2025 by rpki-client