$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/416d42ec-6f42-3120-87a4-8057c1176d6e.roa File: 416d42ec-6f42-3120-87a4-8057c1176d6e.roa (raw, json) Hash identifier: IyXtdwHPnlI2Gt5v2qVeRAZo9ZpoWhbNlu5Jq6uajFk= Subject key identifier: 87:4C:C0:59:1F:42:2B:A6:DB:AF:17:79:40:96:88:8F:7C:6D:26:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9E2F4B5E74E570222FFCE580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/416d42ec-6f42-3120-87a4-8057c1176d6e.roa Signing time: Thu 23 Oct 2025 14:20:43 +0000 ROA not before: Thu 23 Oct 2025 14:20:43 +0000 ROA not after: Wed 21 Jan 2026 15:20:43 +0000 asID: 7029 IP address blocks: 2001:19b0:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:2f:4b:5e:74:e5:70:22:2f:fc:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 23 14:20:43 2025 GMT Not After : Jan 21 15:20:43 2026 GMT Subject: CN=656457cd-88b0-488c-a48c-50f961f81b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2a:18:35:48:34:94:48:f4:c7:e6:0e:d1:d7: 15:0b:08:d1:96:41:72:c2:90:9b:21:94:5d:49:09: 43:16:c2:50:49:d0:eb:ae:65:9c:1f:fd:2d:54:a7: e6:d5:78:2f:20:28:53:a1:e6:de:51:1c:47:e8:28: 73:cb:ef:1e:35:2c:d9:a9:c3:7c:60:83:51:ed:87: d0:b0:b9:78:b6:63:b6:b6:a1:d3:2a:67:22:18:87: dd:f1:28:f1:70:db:61:89:fb:3e:b7:fb:d2:a5:3a: 10:0f:b9:59:54:fe:24:1e:18:14:46:fb:7e:4d:ce: b8:48:41:81:79:05:05:cd:61:9f:74:ad:66:08:b0: f4:bb:b2:25:27:67:f2:25:5a:01:aa:8a:f9:ae:04: a7:aa:2f:7c:38:34:2f:ff:21:21:73:fc:a3:bc:1b: cd:01:2e:83:18:1b:d3:17:95:a6:01:02:de:27:bd: ed:c5:7b:74:96:4b:47:dc:98:86:1f:4a:41:5c:93: 31:ff:8b:50:e3:c7:b5:d7:c3:c1:a2:ed:31:d6:88: b3:45:51:b2:d8:38:81:1d:13:ab:0a:16:96:88:61: fa:be:77:a3:ad:86:46:ee:4f:70:57:f0:1c:5b:45: fc:3d:30:df:c3:81:ce:d8:9f:9d:0a:1f:1b:e2:53: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4C:C0:59:1F:42:2B:A6:DB:AF:17:79:40:96:88:8F:7C:6D:26:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/416d42ec-6f42-3120-87a4-8057c1176d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ab:d7:6b:12:6c:0e:86:bc:09:ae:c1:f3:d0:9f:02:42:96: f8:e6:b1:fe:39:02:0a:93:e4:df:db:74:0a:b5:4e:3e:3c:36: a8:b1:9b:4b:50:95:2f:d6:2d:4c:09:67:76:bc:75:c7:a7:2e: 6f:3e:89:05:97:c0:72:0c:49:7f:c3:df:6d:e2:85:22:c2:f2: 87:47:fb:6b:02:38:67:55:f9:d0:b3:66:c8:4d:7c:77:ba:ce: ac:1a:f4:a5:94:3f:a5:39:10:8f:29:d5:de:cd:b2:6f:e6:d4: 36:d5:ad:71:5a:84:3a:5a:2b:93:f1:e9:5e:84:59:cf:19:95: e8:7c:d4:86:8a:55:36:2f:77:0c:be:dd:92:10:b2:99:72:d3: 17:36:b2:23:c1:3b:b0:c0:1e:c1:65:57:02:99:5a:ce:be:0a: 78:cd:51:8f:49:4b:5d:3f:f9:4f:68:36:1b:1a:04:f0:2d:3f: 7b:0d:c4:58:45:44:b3:ac:c7:38:ad:0b:e8:88:5a:fe:2d:8c: 89:8c:a3:5e:ff:1b:61:e8:00:a1:8c:fd:e9:fe:79:c4:3c:0b: fb:48:7e:01:7b:f8:ef:dc:a4:c9:df:b1:ee:82:1f:fa:08:4f: a7:b7:75:eb:f2:38:18:0f:11:78:58:d0:15:18:4b:0d:3f:43: 8f:0f:8a:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueL0tedOVwIi/85YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMzE0MjA0M1oXDTI2MDEyMTE1MjA0M1owLzEtMCsGA1UEAxMk NjU2NDU3Y2QtODhiMC00ODhjLWE0OGMtNTBmOTYxZjgxYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmioYNUg0lEj0x+YO0dcVCwjRlkFywpCbIZRd SQlDFsJQSdDrrmWcH/0tVKfm1XgvIChToebeURxH6Chzy+8eNSzZqcN8YINR7YfQ sLl4tmO2tqHTKmciGIfd8SjxcNthifs+t/vSpToQD7lZVP4kHhgURvt+Tc64SEGB eQUFzWGfdK1mCLD0u7IlJ2fyJVoBqor5rgSnqi98ODQv/yEhc/yjvBvNAS6DGBvT F5WmAQLeJ73txXt0lktH3JiGH0pBXJMx/4tQ48e118PBou0x1oizRVGy2DiBHROr ChaWiGH6vnejrYZG7k9wV/AcW0X8PTDfw4HO2J+dCh8b4lOAKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIdMwFkfQium268XeUCWiI98bSaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDE2ZDQyZWMtNmY0Mi0z MTIwLTg3YTQtODA1N2MxMTc2ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACir12sSbA6GvAmuwfPQnwJClvjmsf45AgqT5N/bdAq1Tj48Nqix m0tQlS/WLUwJZ3a8dcenLm8+iQWXwHIMSX/D323ihSLC8odH+2sCOGdV+dCzZshN fHe6zqwa9KWUP6U5EI8p1d7Nsm/m1DbVrXFahDpaK5Px6V6EWc8Zleh81IaKVTYv dwy+3ZIQsply0xc2siPBO7DAHsFlVwKZWs6+CnjNUY9JS10/+U9oNhsaBPAtP3sN xFhFRLOsxzitC+iIWv4tjImMo17/G2HoAKGM/en+ecQ8C/tIfgF7+O/cpMnfse6C H/oIT6e3devyOBgPEXhY0BUYSw0/Q48Pin4= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:04 2025 by rpki-client