$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/072e83dc-62cc-3cb2-a440-6d0cbee5a7a8.roa File: 072e83dc-62cc-3cb2-a440-6d0cbee5a7a8.roa (raw, json) Hash identifier: txo5dLhTLhJAWSTtXAt/NWnSQeE88zIi3nYUaZwHhEM= Subject key identifier: 12:7C:F7:B8:A7:12:DB:84:C2:84:F3:4F:85:D5:2F:D0:F0:5E:A9:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9C094DECD731A0105D07E880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/072e83dc-62cc-3cb2-a440-6d0cbee5a7a8.roa Signing time: Wed 22 Oct 2025 19:52:33 +0000 ROA not before: Wed 22 Oct 2025 19:52:33 +0000 ROA not after: Tue 20 Jan 2026 20:52:33 +0000 asID: 7029 IP address blocks: 2001:19b0:40::/50 maxlen: 50 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:09:4d:ec:d7:31:a0:10:5d:07:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 22 19:52:33 2025 GMT Not After : Jan 20 20:52:33 2026 GMT Subject: CN=2c4216c4-80d0-4ce4-9bcd-03dfed1259c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:76:72:40:02:1a:56:ed:2e:f4:2c:00:41:6e: 84:1b:3e:6b:71:cc:d9:1f:2c:9b:5b:33:5e:c3:e7: 85:08:cf:a3:47:ed:58:34:26:45:13:52:3e:ed:55: 30:98:71:76:ae:44:40:5f:43:72:a6:9b:81:6d:ef: 15:d8:fe:4a:bc:cd:87:03:7e:85:6a:14:4b:e9:13: c5:92:30:8a:b7:ec:04:9c:0e:7a:56:53:77:dd:3f: 23:77:6b:3f:a5:7e:b6:69:30:0f:e5:a7:68:92:09: 07:96:71:6f:39:96:e7:57:6f:25:eb:30:f0:0e:93: 9b:29:fe:d3:7a:59:a0:74:f6:be:77:cd:77:b4:ae: f7:bf:04:2f:77:84:d1:2d:47:78:56:12:e2:a7:5c: 33:49:08:3e:58:4b:8c:f1:29:a7:ea:04:59:e0:00: 4e:85:e6:43:e5:8b:f6:22:88:c1:fe:29:cf:2b:e4: 39:44:d1:d2:12:30:78:4f:62:cf:5e:73:d1:d7:18: ff:bd:8e:a9:0c:64:23:bc:49:8a:55:f8:43:8c:20: b9:e0:f7:9c:85:83:34:35:6b:1f:9d:81:7c:b0:8b: e2:10:a7:3d:eb:5e:e2:d0:f4:df:ce:9c:81:88:34: ee:19:51:44:55:32:ed:f8:7c:d9:f5:d6:b1:2d:75: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7C:F7:B8:A7:12:DB:84:C2:84:F3:4F:85:D5:2F:D0:F0:5E:A9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/072e83dc-62cc-3cb2-a440-6d0cbee5a7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:40::/50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:79:9b:17:8a:81:d9:6d:12:41:48:0b:bb:3d:22:73:70:66: 49:15:4d:f4:6f:30:de:f5:f9:61:47:a8:e3:73:e3:ab:6f:17: 66:95:5a:19:66:a0:6f:3d:7f:f7:d9:f6:e2:33:87:9c:1c:6e: 00:ac:d3:a1:12:dc:bb:d8:e4:fc:da:e3:66:c9:8f:b7:64:37: a0:4b:b9:70:51:85:03:34:35:ec:87:2f:d5:db:45:84:3e:30: 49:88:1c:56:01:72:62:06:06:e4:59:34:ba:4c:92:1c:9d:eb: df:c7:5a:c3:f9:96:05:62:62:ab:96:a6:85:62:ae:83:9f:e2: 3a:b4:e8:68:5c:cc:65:cb:2e:c0:f5:43:2f:63:83:47:d9:bf: 8f:88:d4:fb:f0:1c:f2:24:94:66:50:fb:e2:31:1c:dd:6c:32: f9:f8:b9:41:16:f9:59:2b:b0:54:d4:65:60:6e:85:f3:de:83: 9e:85:d0:d9:62:ed:ac:f9:a8:db:e4:8b:5f:21:d0:3a:ee:09: f6:63:fd:3b:d8:16:44:ca:ca:d1:30:75:de:2d:46:16:db:ea: e1:31:19:b8:88:36:43:c3:aa:0d:26:1e:d2:ff:75:01:72:ed: 71:fc:25:4a:1f:e8:ff:69:27:9d:15:fb:9e:ea:3b:ac:81:60: 65:e1:f7:c6 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEucCU3s1zGgEF0H6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMjE5NTIzM1oXDTI2MDEyMDIwNTIzM1owLzEtMCsGA1UEAxMk MmM0MjE2YzQtODBkMC00Y2U0LTliY2QtMDNkZmVkMTI1OWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnZyQAIaVu0u9CwAQW6EGz5rcczZHyybWzNe w+eFCM+jR+1YNCZFE1I+7VUwmHF2rkRAX0NyppuBbe8V2P5KvM2HA36FahRL6RPF kjCKt+wEnA56VlN33T8jd2s/pX62aTAP5adokgkHlnFvOZbnV28l6zDwDpObKf7T elmgdPa+d813tK73vwQvd4TRLUd4VhLip1wzSQg+WEuM8Smn6gRZ4ABOheZD5Yv2 IojB/inPK+Q5RNHSEjB4T2LPXnPR1xj/vY6pDGQjvEmKVfhDjCC54PechYM0NWsf nYF8sIviEKc9617i0PTfzpyBiDTuGVFEVTLt+HzZ9daxLXXDTQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFBJ897inEtuEwoTzT4XVL9DwXqn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDcyZTgzZGMtNjJjYy0z Y2IyLWE0NDAtNmQwY2JlZTVhN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgGIAEZsABA ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCLeZsXioHZbRJBSAu7PSJzcGZJFU30bzDe9flhR6jjc+Orbxdm lVoZZqBvPX/32fbiM4ecHG4ArNOhEty72OT82uNmyY+3ZDegS7lwUYUDNDXshy/V 20WEPjBJiBxWAXJiBgbkWTS6TJIcnevfx1rD+ZYFYmKrlqaFYq6Dn+I6tOhoXMxl yy7A9UMvY4NH2b+PiNT78BzyJJRmUPviMRzdbDL5+LlBFvlZK7BU1GVgboXz3oOe hdDZYu2s+ajb5ItfIdA67gn2Y/072BZEysrRMHXeLUYW2+rhMRm4iDZDw6oNJh7S /3UBcu1x/CVKH+j/aSedFfue6jusgWBl4ffG -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:23 2025 by rpki-client