$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c790427-8245-3b89-8f6a-26331ef67d65.roa File: 1c790427-8245-3b89-8f6a-26331ef67d65.roa (raw, json) Hash identifier: fhN3NgYWtLOr1solGnvvW4C122AefgT7lsURyM+SIuk= Subject key identifier: C7:EF:9C:B9:95:DB:2A:06:00:8F:9B:D0:45:44:A9:DC:71:71:09:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BA19D20A8D40EB92914E940E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c790427-8245-3b89-8f6a-26331ef67d65.roa Signing time: Fri 24 Oct 2025 19:49:26 +0000 ROA not before: Fri 24 Oct 2025 19:49:26 +0000 ROA not after: Thu 22 Jan 2026 20:49:26 +0000 asID: 7029 IP address blocks: 2001:19b0:4b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:9d:20:a8:d4:0e:b9:29:14:e9:40:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 24 19:49:26 2025 GMT Not After : Jan 22 20:49:26 2026 GMT Subject: CN=89fc60ec-aa6b-4a9e-9d47-bcfffb77b4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:41:6f:c1:9f:4e:1a:c2:e8:71:4f:0d:01: 1e:fb:64:9a:a5:b1:5c:78:80:71:61:6b:75:9e:19: 9b:a3:53:46:ad:c2:f0:3b:e2:2f:f9:3d:b2:71:c5: e0:43:8b:a9:61:b2:26:b0:3b:7f:2e:54:c5:93:7b: ff:88:a5:df:8c:a9:6e:39:67:b8:e0:ab:a6:59:93: 56:79:8d:86:7a:b1:d6:50:8c:52:52:b0:94:27:2d: 9a:42:d5:31:f5:f8:ad:f7:13:f0:8f:26:32:5e:2c: 5c:42:d6:8d:db:3d:6c:0c:1a:6b:52:db:4f:a1:3f: b6:61:d8:e7:a8:44:fd:3f:69:cc:ec:e8:6b:3c:df: 7a:8e:2e:9a:33:ce:3b:a8:40:56:79:61:cb:88:4e: 20:ff:1e:bc:e2:11:46:7f:ef:91:18:a2:fe:96:8e: b0:dd:e6:be:3c:ab:b2:78:9c:38:4b:db:a9:18:2f: 6d:32:54:ba:29:d1:b4:ae:f6:20:57:75:89:76:af: 7f:72:28:c0:86:3c:0c:3d:bd:a4:e9:b6:bc:68:44: 6c:e2:94:b0:d1:44:a2:fc:59:9b:fe:80:e2:dd:a3: 1d:8b:5e:4d:b8:d5:13:83:47:e9:f1:1a:4b:17:53: b6:5a:31:7e:f4:b7:87:de:bc:bf:14:7e:3d:c7:1b: bb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EF:9C:B9:95:DB:2A:06:00:8F:9B:D0:45:44:A9:DC:71:71:09:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c790427-8245-3b89-8f6a-26331ef67d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:4b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:41:42:2d:86:18:e7:ee:e2:e6:39:a3:ec:98:1c:f6:a3:4d: 33:77:b5:88:a2:3a:38:10:2d:09:70:ca:6e:31:dd:79:eb:8b: b7:54:85:37:45:51:d7:eb:b6:a8:bf:f1:8a:f9:76:7c:50:dd: a1:ea:49:31:37:80:84:af:7a:ae:ad:04:20:a0:f8:18:66:32: 01:83:91:12:0c:e1:8b:7b:8f:7a:86:b3:f0:08:2c:08:14:9a: 6b:8b:1c:e8:d5:0c:4e:7d:a0:f2:88:1b:df:2e:d8:1b:fc:73: 7c:9f:5b:f7:b0:b6:f1:64:25:fd:a8:48:3c:43:ee:0c:8c:b3: 28:a0:1b:1c:d2:7d:be:5a:d7:d4:c5:fc:b1:59:20:5d:ad:99: b5:01:54:40:20:5a:71:b0:05:9d:36:be:bf:99:e7:23:56:5f: 72:ac:79:86:63:d6:0c:23:3f:fe:b0:9c:b0:d9:a4:7a:71:61: f5:c9:fc:8e:25:fe:eb:9e:9c:7f:5d:53:d8:f6:21:f9:74:26: 29:03:71:9c:98:3e:00:71:c4:36:07:6d:17:91:57:7e:d4:c0: 61:3a:9e:6d:f6:26:c0:84:ea:a5:c1:2d:4d:a0:d2:18:4e:45: 76:cd:73:25:d0:4e:44:99:90:d0:bf:02:1b:f7:ef:b7:53:67: 65:1f:47:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuhnSCo1A65KRTpQOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyNDE5NDkyNloXDTI2MDEyMjIwNDkyNlowLzEtMCsGA1UEAxMk ODlmYzYwZWMtYWE2Yi00YTllLTlkNDctYmNmZmZiNzdiNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt91Bb8GfThrC6HFPDQEe+2SapbFceIBxYWt1 nhmbo1NGrcLwO+Iv+T2yccXgQ4upYbImsDt/LlTFk3v/iKXfjKluOWe44KumWZNW eY2GerHWUIxSUrCUJy2aQtUx9fit9xPwjyYyXixcQtaN2z1sDBprUttPoT+2Ydjn qET9P2nM7OhrPN96ji6aM847qEBWeWHLiE4g/x684hFGf++RGKL+lo6w3ea+PKuy eJw4S9upGC9tMlS6KdG0rvYgV3WJdq9/cijAhjwMPb2k6ba8aERs4pSw0USi/Fmb /oDi3aMdi15NuNUTg0fp8RpLF1O2WjF+9LeH3ry/FH49xxu7HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMfvnLmV2yoGAI+b0EVEqdxxcQkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWM3OTA0MjctODI0NS0z Yjg5LThmNmEtMjYzMzFlZjY3ZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH5BQi2GGOfu4uY5o+yYHPajTTN3tYiiOjgQLQlwym4x3Xnri7dU hTdFUdfrtqi/8Yr5dnxQ3aHqSTE3gISveq6tBCCg+BhmMgGDkRIM4Yt7j3qGs/AI LAgUmmuLHOjVDE59oPKIG98u2Bv8c3yfW/ewtvFkJf2oSDxD7gyMsyigGxzSfb5a 19TF/LFZIF2tmbUBVEAgWnGwBZ02vr+Z5yNWX3KseYZj1gwjP/6wnLDZpHpxYfXJ /I4l/uuenH9dU9j2Ifl0JikDcZyYPgBxxDYHbReRV37UwGE6nm32JsCE6qXBLU2g 0hhORXbNcyXQTkSZkNC/Ahv377dTZ2UfRys= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:06 2025 by rpki-client