$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb783cf-b799-3df5-aeb9-bce1f3a2a47c.roa File: 9fb783cf-b799-3df5-aeb9-bce1f3a2a47c.roa (raw, json) Hash identifier: s6o6KoXDCrKO1f/fgcOz3zpV7VTO52sRlmiP+IcAzfo= Subject key identifier: 9E:F4:B4:B5:13:92:9D:FC:66:1D:2A:09:7E:35:0A:E3:21:F6:78:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9E2F136261F9B50495E8A4C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb783cf-b799-3df5-aeb9-bce1f3a2a47c.roa Signing time: Thu 23 Oct 2025 14:20:16 +0000 ROA not before: Thu 23 Oct 2025 14:20:16 +0000 ROA not after: Wed 21 Jan 2026 15:20:16 +0000 asID: 7029 IP address blocks: 2001:19b0:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:2f:13:62:61:f9:b5:04:95:e8:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 23 14:20:16 2025 GMT Not After : Jan 21 15:20:16 2026 GMT Subject: CN=73ba542c-c2dd-45f7-96ad-a81b6ebd02b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:b4:1a:ff:ac:25:fb:7d:ca:ba:c1:e8:93: 35:0c:ac:49:a9:54:01:f5:b6:ef:f3:f0:35:36:b2: 7f:63:a4:48:14:21:06:34:c9:ca:46:16:a4:0e:97: 14:10:0b:57:c8:77:3e:ec:28:42:cb:b2:84:47:27: a6:ea:f2:cc:05:df:ee:43:8f:1b:dc:ad:4d:2b:b1: 6f:8a:9f:18:08:6f:2a:2a:78:f4:ce:19:1e:2d:72: 33:b2:00:73:c0:c8:30:4a:03:d0:18:b8:41:84:a8: c2:e3:5c:a7:cc:6c:d0:c8:59:56:58:76:09:e3:c5: a9:db:5a:4b:ce:b2:a0:04:62:be:6b:6a:47:20:33: b6:e8:6f:32:dd:f5:96:a8:b6:ba:86:cf:b7:fe:34: 65:a8:e9:62:0d:ef:ec:1c:07:16:e9:10:f7:73:0d: 76:1a:d0:50:96:2e:97:47:26:95:ac:4f:00:8b:f5: 3c:13:9a:2c:fb:b1:9a:28:8f:33:79:0b:d3:f6:13: ee:8d:df:1d:94:bf:84:7a:a7:17:f0:a4:9b:de:1b: af:51:70:53:05:51:42:8a:b3:b1:8b:82:22:56:33: b8:2f:4a:93:a9:8f:97:8c:9e:b6:ca:c2:30:3f:66: 5d:97:eb:11:25:ba:2a:04:0d:09:e5:a8:38:fe:8d: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F4:B4:B5:13:92:9D:FC:66:1D:2A:09:7E:35:0A:E3:21:F6:78:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb783cf-b799-3df5-aeb9-bce1f3a2a47c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:87:10:27:70:e9:75:46:8e:d2:9d:46:a0:a1:97:a7:ab:5d: f5:f2:ec:7b:88:51:d0:6d:01:ee:c3:a2:ff:d4:25:87:06:48: c5:d4:bf:35:fd:c0:b0:c2:4a:d7:d6:59:85:f3:40:34:88:c2: 5e:f7:ce:65:ab:06:eb:e9:2c:c7:de:5d:cf:03:ce:94:9d:a8: f7:db:30:45:73:03:62:56:02:51:af:73:8e:e1:50:1b:63:cf: 81:dd:64:c9:a3:b9:d3:08:2d:a7:87:07:4a:5e:8f:13:71:e2: 3f:54:43:15:7b:62:4e:28:e9:2f:13:d6:05:f8:15:d5:d3:d1: 11:84:e9:d1:f0:96:b6:2f:df:01:5d:41:4f:38:ae:6d:1f:80: 66:f1:e1:9e:6c:96:fc:fb:f5:72:d3:ab:39:bc:6d:3b:6c:ce: 1d:36:1c:0b:b1:95:12:14:c3:b9:af:54:81:a2:26:36:be:bb: 56:fa:bd:c4:88:c6:88:23:4f:38:2e:5d:8c:a7:af:f6:10:97: 5b:c4:44:f1:93:df:69:56:54:2c:b2:d1:12:e7:d2:34:cf:b7: 83:9a:b8:b1:65:68:3c:ce:ba:1c:b3:bd:63:d9:9c:83:c5:32: 1c:52:c3:e7:6f:59:6c:f3:f4:fe:5c:5b:73:34:36:89:a3:37: 98:b1:9b:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueLxNiYfm1BJXopMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMzE0MjAxNloXDTI2MDEyMTE1MjAxNlowLzEtMCsGA1UEAxMk NzNiYTU0MmMtYzJkZC00NWY3LTk2YWQtYTgxYjZlYmQwMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqea0Gv+sJft9yrrB6JM1DKxJqVQB9bbv8/A1 NrJ/Y6RIFCEGNMnKRhakDpcUEAtXyHc+7ChCy7KERyem6vLMBd/uQ48b3K1NK7Fv ip8YCG8qKnj0zhkeLXIzsgBzwMgwSgPQGLhBhKjC41ynzGzQyFlWWHYJ48Wp21pL zrKgBGK+a2pHIDO26G8y3fWWqLa6hs+3/jRlqOliDe/sHAcW6RD3cw12GtBQli6X RyaVrE8Ai/U8E5os+7GaKI8zeQvT9hPujd8dlL+EeqcX8KSb3huvUXBTBVFCirOx i4IiVjO4L0qTqY+XjJ62ysIwP2Zdl+sRJboqBA0J5ag4/o0U4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ70tLUTkp38Zh0qCX41CuMh9nhbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZiNzgzY2YtYjc5OS0z ZGY1LWFlYjktYmNlMWYzYTJhNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKHECdw6XVGjtKdRqChl6erXfXy7HuIUdBtAe7Dov/UJYcGSMXU vzX9wLDCStfWWYXzQDSIwl73zmWrBuvpLMfeXc8DzpSdqPfbMEVzA2JWAlGvc47h UBtjz4HdZMmjudMILaeHB0pejxNx4j9UQxV7Yk4o6S8T1gX4FdXT0RGE6dHwlrYv 3wFdQU84rm0fgGbx4Z5slvz79XLTqzm8bTtszh02HAuxlRIUw7mvVIGiJja+u1b6 vcSIxogjTzguXYynr/YQl1vERPGT32lWVCyy0RLn0jTPt4OauLFlaDzOuhyzvWPZ nIPFMhxSw+dvWWzz9P5cW3M0NomjN5ixm2k= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:59 2025 by rpki-client