$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa File: 3984502e-c09e-303c-bae0-fddf3483cb3a.roa (raw, json) Hash identifier: OEWxG+j2302Kw4s56yn+MWPIW563oAIygWk91Sl0jOE= Subject key identifier: D5:DF:74:15:59:9A:40:8D:EA:82:9F:25:86:D8:43:36:48:87:A9:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC80DEE16B0203B36EE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2001:4908::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c8:0d:ee:16:b0:20:3b:36:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=acec417a-3bf1-4bb6-9e6c-4c6d16597870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:1d:62:15:b3:35:4e:ed:94:fb:38:c9:b5: 17:65:e3:0e:a0:3c:20:9f:e8:fc:57:24:02:49:ad: c2:7b:28:bc:38:b6:93:28:14:d9:20:0c:3e:2e:c0: f3:55:5e:12:46:bc:3d:7e:3c:8e:00:eb:c6:f1:80: 7a:f0:d7:76:ee:b0:af:da:97:fd:de:00:32:09:e6: b7:0e:f4:04:59:18:30:f6:e5:97:6e:fe:41:ce:d0: 70:9b:36:e8:a2:4b:b8:62:c9:30:08:0a:b4:8c:54: 6b:e7:40:7e:81:1a:a0:5f:68:e9:3a:e0:08:59:1a: 97:17:2d:e7:1f:42:37:1d:d2:8d:3c:8a:9c:8a:91: c8:68:4b:40:1d:d7:33:b2:9c:6c:09:2a:16:22:ef: 4d:95:fc:e3:dc:34:e5:59:d4:b2:4b:f0:c9:58:5b: 3f:61:67:ee:72:68:c4:65:ec:a3:ae:03:7b:a2:a5: 44:ca:57:42:6c:85:53:a5:8c:29:87:7a:ee:72:5e: 83:ea:00:bc:35:a3:63:7c:33:2f:5e:8f:cc:d5:40: 4b:55:0c:c8:46:ae:62:77:6b:da:35:41:a9:c5:73: 41:ee:89:3d:ec:06:8d:48:7c:45:a5:1e:3b:8a:b6: 4f:fe:30:9a:b8:5a:77:a6:b2:5e:f3:2b:fe:75:1a: fb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DF:74:15:59:9A:40:8D:EA:82:9F:25:86:D8:43:36:48:87:A9:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4908::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:33:67:53:d2:ea:d1:4a:0e:c1:a1:35:03:43:fb:b5:36:29: 51:e5:ab:a1:83:79:76:03:ef:b8:95:93:e7:cb:86:8c:a3:0c: 46:44:02:97:75:4d:11:cc:d8:5b:f2:16:82:29:e3:7f:6c:58: c5:c9:90:72:bd:6f:c4:34:f8:96:e3:2b:ae:de:a7:fe:63:e6: 21:55:e3:0f:15:87:bc:c9:5f:34:7f:19:b2:09:06:46:c2:6e: f9:84:32:cf:9e:dd:5b:50:3a:51:bf:f6:89:9c:66:ea:03:03: 8e:bf:8b:93:d0:76:ec:e6:05:d1:ab:01:f7:ec:62:22:e4:a4: 7a:d3:24:b5:fc:1a:56:45:ec:50:18:4d:2b:63:71:c8:3a:52: 70:b4:66:cc:9d:cc:e8:41:82:4f:88:ad:80:b8:5d:a7:da:46: 24:eb:d8:f6:81:1c:4e:62:be:76:29:db:98:80:64:18:13:72: 4e:00:b7:22:ff:c7:73:9f:96:7f:e6:61:1f:94:00:7d:66:50: 75:31:ba:22:1a:de:2d:3b:61:a0:86:42:c3:e6:2d:3b:70:8d: 22:33:a4:fe:2b:0d:26:4a:89:1b:5a:98:aa:13:bb:88:dc:77: 76:8d:d7:ef:5b:fb:0f:5c:11:fd:0e:1a:42:64:f5:bb:b3:09: b1:64:f3:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxXMgN7hawIDs27gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YWNlYzQxN2EtM2JmMS00YmI2LTllNmMtNGM2ZDE2NTk3ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnMdYhWzNU7tlPs4ybUXZeMOoDwgn+j8VyQC Sa3Ceyi8OLaTKBTZIAw+LsDzVV4SRrw9fjyOAOvG8YB68Nd27rCv2pf93gAyCea3 DvQEWRgw9uWXbv5BztBwmzbooku4YskwCAq0jFRr50B+gRqgX2jpOuAIWRqXFy3n H0I3HdKNPIqcipHIaEtAHdczspxsCSoWIu9Nlfzj3DTlWdSyS/DJWFs/YWfucmjE ZeyjrgN7oqVEyldCbIVTpYwph3rucl6D6gC8NaNjfDMvXo/M1UBLVQzIRq5id2va NUGpxXNB7ok97AaNSHxFpR47irZP/jCauFp3prJe8yv+dRr7mwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNXfdBVZmkCN6oKfJYbYQzZIh6mUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzk4NDUwMmUtYzA5ZS0z MDNjLWJhZTAtZmRkZjM0ODNjYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMM2dT0urRSg7BoTUDQ/u1NilR5auhg3l2A++4lZPny4aMowxGRAKX dU0RzNhb8haCKeN/bFjFyZByvW/ENPiW4yuu3qf+Y+YhVeMPFYe8yV80fxmyCQZG wm75hDLPnt1bUDpRv/aJnGbqAwOOv4uT0Hbs5gXRqwH37GIi5KR60yS1/BpWRexQ GE0rY3HIOlJwtGbMnczoQYJPiK2AuF2n2kYk69j2gRxOYr52KduYgGQYE3JOALci /8dzn5Z/5mEflAB9ZlB1MboiGt4tO2GghkLD5i07cI0iM6T+Kw0mSokbWpiqE7uI 3Hd2jdfvW/sPXBH9DhpCZPW7swmxZPM6 -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:06 2025 by rpki-client