$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15e07226-ed19-3f28-a615-29fe2ec3f589.roa File: 15e07226-ed19-3f28-a615-29fe2ec3f589.roa (raw, json) Hash identifier: 8ssFP7taxxHfq9J0gKBd187yXIbObipw99h9tQB2xyc= Subject key identifier: C2:17:AF:5F:A0:1F:92:54:48:58:75:39:46:DD:52:8E:86:48:56:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BA19D1A40FE5E2B741AFE0400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15e07226-ed19-3f28-a615-29fe2ec3f589.roa Signing time: Fri 24 Oct 2025 19:49:23 +0000 ROA not before: Fri 24 Oct 2025 19:49:23 +0000 ROA not after: Thu 22 Jan 2026 20:49:23 +0000 asID: 7029 IP address blocks: 2001:19b0:300::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:9d:1a:40:fe:5e:2b:74:1a:fe:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 24 19:49:23 2025 GMT Not After : Jan 22 20:49:23 2026 GMT Subject: CN=2f420913-9466-4dae-80d4-cdc0e1d3b2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:2b:81:95:90:1e:69:c7:41:1e:f8:7e:1e: 19:f0:fc:c0:1d:2f:b8:42:e3:61:a6:38:fd:2c:35: 23:f2:47:ab:24:68:28:42:c8:44:5d:aa:98:bb:3e: 65:a8:7b:41:f5:bd:2f:f4:0b:c0:8a:6e:06:2f:60: 46:10:d5:10:5c:77:67:15:fa:d4:60:bf:43:29:9e: 29:d5:8e:1f:ef:23:04:4b:06:5a:79:bf:fc:1d:af: b9:64:1e:b7:07:59:7f:4a:b3:13:b1:9e:d1:c6:29: 15:0a:9f:0c:3c:d2:a6:07:63:31:8d:5b:bf:84:69: 3c:f0:0d:ee:ab:24:68:d2:e9:49:18:e0:a1:59:f2: 25:7c:84:fa:ef:39:32:b7:2b:cb:d6:d9:e5:6f:97: ce:34:ba:2d:6b:34:94:90:b8:23:cc:5a:ab:40:38: 01:09:13:2f:95:78:35:4e:0d:90:a0:f7:2b:e1:4d: ae:38:da:41:99:8e:79:3c:f2:33:70:c1:4b:45:38: 18:97:09:f8:3e:2f:99:d7:22:a9:d9:fc:f3:e5:90: 98:ee:d1:6b:21:e9:ba:96:f7:75:ac:80:cb:df:f4: 2c:c3:f0:bd:18:7c:0b:1d:60:2a:66:75:4a:27:ae: d9:90:bf:f1:98:49:7c:92:71:20:d7:84:aa:60:dd: 6b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:17:AF:5F:A0:1F:92:54:48:58:75:39:46:DD:52:8E:86:48:56:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15e07226-ed19-3f28-a615-29fe2ec3f589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:300::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:04:b3:b4:53:ed:a8:ee:b7:90:c4:65:c8:3e:f4:5f:97:3c: a9:17:08:a1:91:8b:5f:99:d2:fd:e3:5a:23:d6:b3:dc:6e:b4: 9f:80:a2:e0:5a:00:d3:df:d8:9c:6f:68:62:3f:b2:16:9a:9a: aa:97:6f:59:b8:5f:da:2b:b1:80:3b:82:b9:23:af:1e:f7:a2: 3a:5e:95:c6:0c:6f:bb:e3:5d:38:0b:78:cb:2d:78:27:2e:34: 49:f1:c2:ac:ed:2a:1a:17:78:ec:01:a1:8a:75:66:06:b7:61: aa:4c:f3:3c:52:2b:77:a4:ad:da:5b:4d:3c:05:5c:c5:cf:8c: f0:e3:55:95:5f:68:f1:6b:2d:be:1e:64:2b:a8:ef:45:ab:8a: d5:af:28:f2:7d:39:51:f1:2d:b4:c8:b9:da:04:a4:c2:d2:fc: bf:a7:08:aa:48:d5:e4:c4:0d:c9:b4:5d:33:3e:2c:8b:20:b5: fd:65:c7:c8:14:33:bd:f3:86:b0:8f:9d:84:89:4f:d4:aa:ce: 90:34:96:1f:1d:05:13:6f:e1:9c:1f:4f:e5:c7:5e:8d:50:78: 62:14:db:96:cd:f4:ee:7b:b0:53:5f:62:3f:21:83:79:8e:e5: cd:d4:9b:23:3e:1e:ee:aa:2f:af:c0:f3:04:e1:30:a5:74:6d: 2a:12:71:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuhnRpA/l4rdBr+BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyNDE5NDkyM1oXDTI2MDEyMjIwNDkyM1owLzEtMCsGA1UEAxMk MmY0MjA5MTMtOTQ2Ni00ZGFlLTgwZDQtY2RjMGUxZDNiMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVYrgZWQHmnHQR74fh4Z8PzAHS+4QuNhpjj9 LDUj8kerJGgoQshEXaqYuz5lqHtB9b0v9AvAim4GL2BGENUQXHdnFfrUYL9DKZ4p 1Y4f7yMESwZaeb/8Ha+5ZB63B1l/SrMTsZ7RxikVCp8MPNKmB2MxjVu/hGk88A3u qyRo0ulJGOChWfIlfIT67zkytyvL1tnlb5fONLotazSUkLgjzFqrQDgBCRMvlXg1 Tg2QoPcr4U2uONpBmY55PPIzcMFLRTgYlwn4Pi+Z1yKp2fzz5ZCY7tFrIem6lvd1 rIDL3/Qsw/C9GHwLHWAqZnVKJ67ZkL/xmEl8knEg14SqYN1r3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMIXr1+gH5JUSFh1OUbdUo6GSFbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTVlMDcyMjYtZWQxOS0z ZjI4LWE2MTUtMjlmZTJlYzNmNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIoEs7RT7ajut5DEZcg+9F+XPKkXCKGRi1+Z0v3jWiPWs9xutJ+A ouBaANPf2JxvaGI/shaamqqXb1m4X9orsYA7grkjrx73ojpelcYMb7vjXTgLeMst eCcuNEnxwqztKhoXeOwBoYp1Zga3YapM8zxSK3ekrdpbTTwFXMXPjPDjVZVfaPFr Lb4eZCuo70WritWvKPJ9OVHxLbTIudoEpMLS/L+nCKpI1eTEDcm0XTM+LIsgtf1l x8gUM73zhrCPnYSJT9SqzpA0lh8dBRNv4ZwfT+XHXo1QeGIU25bN9O57sFNfYj8h g3mO5c3UmyM+Hu6qL6/A8wThMKV0bSoScR0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:20 2025 by rpki-client