$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d91f219-1d28-3d65-8234-5ac1cb6b559b.roa File: 1d91f219-1d28-3d65-8234-5ac1cb6b559b.roa (raw, json) Hash identifier: e4TlfStwq3+zRHMR0nmMliQfI+uN1CEUFym7GCHAKpg= Subject key identifier: 71:07:A1:81:11:A6:93:AB:4D:EC:6A:99:A2:AD:98:7A:A2:C9:4B:64 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9E2F6712C28406F5C9997DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d91f219-1d28-3d65-8234-5ac1cb6b559b.roa Signing time: Thu 23 Oct 2025 14:20:56 +0000 ROA not before: Thu 23 Oct 2025 14:20:56 +0000 ROA not after: Wed 21 Jan 2026 15:20:56 +0000 asID: 7029 IP address blocks: 2001:19b0:49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:2f:67:12:c2:84:06:f5:c9:99:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 23 14:20:56 2025 GMT Not After : Jan 21 15:20:56 2026 GMT Subject: CN=2844ab8e-4f37-42ee-a37c-bee879c3ec65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6d:55:9d:b4:bb:4d:70:d1:7b:8b:3f:ac:9e: 6b:51:5c:90:77:86:ed:f5:fc:c0:7e:73:ef:56:ff: 8a:80:dd:92:65:3c:bb:4f:58:fb:61:aa:4e:7d:d5: b7:f1:ee:03:cc:3a:ae:ad:5a:f5:ef:3e:70:9d:f2: dc:d5:ae:d0:53:ca:49:c9:70:51:58:e2:09:f7:b2: 07:96:e5:57:86:30:f1:b8:e2:b8:46:91:a5:a4:a5: 8e:d8:84:5d:f7:a7:d3:33:3f:94:cd:0a:a4:c2:26: 20:d1:ab:9a:9b:6d:05:a3:ff:35:e4:61:0c:09:ed: 29:7a:86:85:26:38:1a:55:2a:00:53:c0:16:09:4e: 94:16:2f:1d:4a:e7:c1:f9:6c:91:34:cd:1d:70:35: 59:c4:6f:03:79:20:f8:c5:68:d4:79:2f:cc:04:7d: 47:a2:e2:ad:ad:d0:31:b1:8a:2a:15:d7:1f:32:82: 56:c6:4c:f8:06:ab:e7:87:70:db:a2:91:73:bd:8b: cd:87:98:72:f4:63:b1:32:c4:f9:4b:c5:02:eb:7a: 6e:5c:6a:53:db:12:05:dc:6b:02:28:6d:36:b4:12: 01:76:48:3c:8d:e1:40:64:d2:55:f8:68:c9:bc:ec: 68:89:3b:91:f1:c0:1c:18:94:0b:45:53:16:90:a7: 4c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:07:A1:81:11:A6:93:AB:4D:EC:6A:99:A2:AD:98:7A:A2:C9:4B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d91f219-1d28-3d65-8234-5ac1cb6b559b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:49::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:53:48:2b:ea:36:9e:58:0d:2d:e1:58:9f:cb:78:02:82:08: 5d:67:d3:f7:53:75:72:90:31:73:25:35:fd:9b:20:60:b0:7a: 72:e4:20:07:7f:41:ed:4e:dc:76:03:20:ff:cf:99:70:71:47: bc:20:28:7c:c0:e9:d7:99:59:e9:69:e1:66:aa:c1:e3:d6:04: 6e:dc:7f:7d:47:0f:37:80:99:8f:a9:e4:bf:9c:90:8c:3e:af: 4a:51:b4:e7:48:ac:1c:95:a9:eb:fb:21:da:52:8d:cf:96:43: bb:7c:1a:05:f5:7f:e5:6a:17:be:65:e0:c2:3a:17:4f:c0:89: 30:0e:7f:cb:eb:d5:e3:04:a3:97:77:1d:37:58:43:e6:9a:66: d7:84:5f:f4:16:db:5d:26:b2:dd:07:0d:37:9d:68:f6:72:f8: ae:b5:53:bd:93:67:12:6f:a0:6a:45:56:03:1f:d3:c5:4f:03: 57:a8:0a:ce:15:75:b3:44:86:22:e9:85:5a:4c:5d:e5:79:79: 34:a4:dc:f9:06:57:e9:5c:f4:16:53:f9:48:b3:cc:f4:ea:8f: 36:43:c3:a3:a7:8b:cf:d1:8e:7f:f6:51:78:28:f7:f2:3d:2a: db:e4:a1:24:3c:2b:fa:7a:57:e4:11:ea:78:b0:f7:0e:d8:c7: 3e:89:dd:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueL2cSwoQG9cmZfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMzE0MjA1NloXDTI2MDEyMTE1MjA1NlowLzEtMCsGA1UEAxMk Mjg0NGFiOGUtNGYzNy00MmVlLWEzN2MtYmVlODc5YzNlYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW1VnbS7TXDRe4s/rJ5rUVyQd4bt9fzAfnPv Vv+KgN2SZTy7T1j7YapOfdW38e4DzDqurVr17z5wnfLc1a7QU8pJyXBRWOIJ97IH luVXhjDxuOK4RpGlpKWO2IRd96fTMz+UzQqkwiYg0auam20Fo/815GEMCe0peoaF JjgaVSoAU8AWCU6UFi8dSufB+WyRNM0dcDVZxG8DeSD4xWjUeS/MBH1HouKtrdAx sYoqFdcfMoJWxkz4Bqvnh3DbopFzvYvNh5hy9GOxMsT5S8UC63puXGpT2xIF3GsC KG02tBIBdkg8jeFAZNJV+GjJvOxoiTuR8cAcGJQLRVMWkKdMOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHEHoYERppOrTexqmaKtmHqiyUtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWQ5MWYyMTktMWQyOC0z ZDY1LTgyMzQtNWFjMWNiNmI1NTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACpTSCvqNp5YDS3hWJ/LeAKCCF1n0/dTdXKQMXMlNf2bIGCwenLk IAd/Qe1O3HYDIP/PmXBxR7wgKHzA6deZWelp4WaqwePWBG7cf31HDzeAmY+p5L+c kIw+r0pRtOdIrByVqev7IdpSjc+WQ7t8GgX1f+VqF75l4MI6F0/AiTAOf8vr1eME o5d3HTdYQ+aaZteEX/QW210mst0HDTedaPZy+K61U72TZxJvoGpFVgMf08VPA1eo Cs4VdbNEhiLphVpMXeV5eTSk3PkGV+lc9BZT+UizzPTqjzZDw6Oni8/Rjn/2UXgo 9/I9KtvkoSQ8K/p6V+QR6niw9w7Yxz6J3SA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:15 2025 by rpki-client