$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa File: 8968e430-8f77-32f3-9204-563c171a1df0.roa (raw, json) Hash identifier: nC2fmDVQuDpMOhCSpvhaIQsqWFAFcWuCF2HRoVxR4LU= Subject key identifier: C6:83:18:71:91:B6:40:36:FD:46:7F:45:EA:00:67:CE:3F:9C:46:33 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9C0947787EA3250B7A4A9E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa Signing time: Wed 22 Oct 2025 19:52:30 +0000 ROA not before: Wed 22 Oct 2025 19:52:30 +0000 ROA not after: Tue 20 Jan 2026 20:52:30 +0000 asID: 7029 IP address blocks: 2001:19b0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:09:47:78:7e:a3:25:0b:7a:4a:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 22 19:52:30 2025 GMT Not After : Jan 20 20:52:30 2026 GMT Subject: CN=8d935e1d-adcd-40ed-87f5-620ace5ae58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:11:84:0b:88:08:78:28:30:68:67:24:89:31: a5:47:e5:92:db:fb:b1:ac:9b:25:68:9b:a7:ca:ae: b6:c5:1b:cf:c7:c7:d5:bd:a7:42:1a:52:f2:85:84: 05:46:0c:c2:32:c7:c2:aa:30:32:25:ca:3a:f9:24: 81:e0:55:ac:9c:f0:62:02:e5:b5:ad:02:4c:31:0d: 40:4d:0b:f2:b7:82:08:db:4f:fa:73:b4:9f:8f:22: 29:34:77:22:23:9f:05:de:2f:da:9b:b0:14:48:9e: a8:09:ce:d6:a3:3f:f9:46:11:70:b5:b2:42:0a:d4: cd:a9:45:10:ed:53:1f:69:cc:ef:ed:1b:7a:10:d1: 4a:dc:e7:14:09:d1:7f:b3:8b:8c:e6:9b:9d:0f:59: 93:66:24:33:45:a2:1f:1a:b0:5b:11:9c:f6:a6:8b: a7:d6:6e:d7:5e:e3:10:6b:6f:74:2d:87:2e:49:1b: 18:e4:79:30:1d:79:ea:33:3d:44:92:8f:bd:8b:b4: 01:d7:55:a7:73:5e:19:cc:fd:4c:92:2a:82:12:49: ba:e0:66:da:c1:89:ef:14:bd:d0:e8:15:57:aa:68: ae:15:e0:6a:e3:4a:01:02:6f:80:16:fb:b0:c2:a3: 6a:93:b1:63:1b:86:7a:87:e7:53:90:ed:e0:19:2f: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:83:18:71:91:B6:40:36:FD:46:7F:45:EA:00:67:CE:3F:9C:46:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b4:3f:30:12:04:70:4f:06:b2:28:45:40:81:5f:26:6e:a3: f9:40:fe:f0:b8:0b:90:12:b8:ee:fc:8f:7a:d8:92:79:d7:e3: b5:77:dc:85:a4:f8:87:f0:fb:4d:8e:b8:e8:24:65:d2:6d:dc: 8a:f2:b2:92:70:eb:9e:dd:64:ee:6c:d1:a0:db:57:bc:0f:4d: 0c:23:f5:bf:c2:c7:74:45:b9:34:cb:b9:ae:26:a1:99:00:81: 62:91:1b:bd:c3:47:59:fa:88:39:28:96:0d:e4:f9:b2:04:b7: fb:42:ec:e2:ab:b1:0a:1d:ec:5f:08:7e:64:ef:06:97:3c:ab: c7:a7:c2:85:39:ab:d5:15:8d:ef:52:f3:4e:66:3b:2b:3e:d2: 44:33:dc:84:4a:cb:cf:b8:33:77:f2:41:21:06:17:9a:af:46: 5f:09:50:81:e0:e2:13:2c:7e:8c:e5:79:6d:69:b5:15:fb:02: 26:6f:eb:64:24:5c:e4:56:6b:80:fc:94:61:3e:8a:72:be:18: 1f:3d:37:96:67:33:57:98:87:ec:10:a6:9c:80:51:80:78:61: a1:47:f5:47:bc:80:bd:87:37:90:84:ee:6a:bb:8a:88:84:fb: 67:67:8b:2e:2c:39:d6:ab:16:2c:21:14:d3:8c:23:b2:4a:a1: 8d:35:e5:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucCUd4fqMlC3pKnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMjE5NTIzMFoXDTI2MDEyMDIwNTIzMFowLzEtMCsGA1UEAxMk OGQ5MzVlMWQtYWRjZC00MGVkLTg3ZjUtNjIwYWNlNWFlNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRGEC4gIeCgwaGckiTGlR+WS2/uxrJslaJun yq62xRvPx8fVvadCGlLyhYQFRgzCMsfCqjAyJco6+SSB4FWsnPBiAuW1rQJMMQ1A TQvyt4II20/6c7SfjyIpNHciI58F3i/am7AUSJ6oCc7Woz/5RhFwtbJCCtTNqUUQ 7VMfaczv7Rt6ENFK3OcUCdF/s4uM5pudD1mTZiQzRaIfGrBbEZz2poun1m7XXuMQ a290LYcuSRsY5HkwHXnqMz1Eko+9i7QB11Wnc14ZzP1MkiqCEkm64GbawYnvFL3Q 6BVXqmiuFeBq40oBAm+AFvuwwqNqk7FjG4Z6h+dTkO3gGS/3UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMaDGHGRtkA2/UZ/ReoAZ84/nEYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODk2OGU0MzAtOGY3Ny0z MmYzLTkyMDQtNTYzYzE3MWExZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGa0PzASBHBPBrIoRUCBXyZuo/lA/vC4C5ASuO78j3rYknnX47V3 3IWk+Ifw+02OuOgkZdJt3IryspJw657dZO5s0aDbV7wPTQwj9b/Cx3RFuTTLua4m oZkAgWKRG73DR1n6iDkolg3k+bIEt/tC7OKrsQod7F8IfmTvBpc8q8enwoU5q9UV je9S805mOys+0kQz3IRKy8+4M3fyQSEGF5qvRl8JUIHg4hMsfozleW1ptRX7AiZv 62QkXORWa4D8lGE+inK+GB89N5ZnM1eYh+wQppyAUYB4YaFH9Ue8gL2HN5CE7mq7 ioiE+2dniy4sOdarFiwhFNOMI7JKoY015UM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:06 2025 by rpki-client