$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa File: a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa (raw, json) Hash identifier: AopkwinFl9QL9T+SCvH/23AYQ/g0DQwh5nNAmXI/0lk= Subject key identifier: A2:B3:11:75:3F:97:3E:A2:6A:A1:8B:6A:B2:1D:55:29:4F:39:92:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9E2684C32771171D65B4F1C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa Signing time: Thu 23 Oct 2025 14:03:02 +0000 ROA not before: Thu 23 Oct 2025 14:03:02 +0000 ROA not after: Wed 21 Jan 2026 15:03:02 +0000 asID: 7029 IP address blocks: 2001:19b0:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:26:84:c3:27:71:17:1d:65:b4:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 23 14:03:02 2025 GMT Not After : Jan 21 15:03:02 2026 GMT Subject: CN=4c1f737a-4e65-4538-bbe0-82f5611eeebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:73:20:d6:51:7e:ab:69:20:e2:95:a0:09: 60:62:f1:ff:bc:b0:d5:2a:19:75:f4:60:1d:11:85: 45:69:de:65:e5:49:00:f7:83:a9:a9:23:3c:84:97: 28:6a:e5:0a:bb:3b:e6:f0:58:d6:d0:ee:eb:47:61: 45:28:9b:05:98:98:5e:60:8b:b6:1e:7d:5c:bd:49: 38:4c:f8:11:b3:e1:26:a6:5b:7b:5e:53:c4:71:fd: a3:21:0a:43:30:98:cc:27:af:39:79:e3:8a:e6:66: 7f:7b:15:f2:97:19:e9:2c:2c:e7:8a:f6:d2:05:e3: e6:63:8c:95:08:39:7a:42:da:86:68:48:ff:55:a7: 49:12:d6:df:55:bf:24:20:9f:52:d4:40:09:19:8d: 31:0b:64:50:21:2d:0e:50:02:ca:82:6b:47:50:d7: c4:7f:cc:4e:40:ea:e2:78:35:3b:1d:98:65:3b:dc: 91:47:e1:7b:6a:f8:f0:45:42:56:17:d8:d2:42:f3: a3:f4:80:78:13:51:16:34:d5:a8:93:9f:4f:85:1f: 35:0d:6e:73:15:ae:26:4d:3e:b1:5b:4a:97:40:c0: 3c:01:9f:66:d8:fe:86:cd:be:fe:06:25:06:49:fa: e9:d1:f9:3c:e3:eb:82:27:b9:17:fa:3d:7b:dc:b1: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:11:75:3F:97:3E:A2:6A:A1:8B:6A:B2:1D:55:29:4F:39:92:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f9:ad:40:41:f3:ba:47:d2:ab:cc:66:eb:3d:67:15:c1:73: 8c:82:33:44:67:43:e6:28:cf:9e:23:48:49:82:ac:49:ae:6c: be:e5:e4:5c:75:fe:d5:e3:83:ae:ba:df:f4:69:5a:2e:51:45: 23:b0:ae:a1:88:49:20:8b:52:2e:5a:a3:15:31:81:4d:a1:7c: 7f:45:27:44:a4:0d:8f:8d:2d:ae:32:e3:72:4d:a5:20:db:be: 11:c0:59:e7:dc:09:8e:1a:ac:b9:ce:c7:b1:b1:2c:ea:2d:a7: 3b:30:c2:f3:62:ca:26:f6:f1:4a:66:3e:70:a3:80:56:88:e8: 69:df:6e:8a:44:58:ad:c1:ac:f4:a1:9b:bd:17:31:96:15:f8: 16:c4:18:8d:6e:81:38:a6:80:6f:e4:ea:bd:a2:2e:30:11:1a: 9c:39:4e:14:61:18:98:7f:55:19:7b:fa:75:89:12:41:4e:14: 9f:a7:89:d4:cd:9d:68:69:ac:d8:b0:9c:0f:66:8c:e1:a5:89: dd:20:67:c9:a3:fe:b1:ac:16:9d:3e:15:9d:72:6f:ff:31:c1: 58:9f:26:2b:46:b2:c5:97:39:35:11:e4:95:41:8b:8d:3b:74: 8d:ba:1f:95:8b:dc:0c:9c:cd:f1:5f:62:2e:49:1e:f7:6c:05: bd:9e:fe:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueJoTDJ3EXHWW08cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMzE0MDMwMloXDTI2MDEyMTE1MDMwMlowLzEtMCsGA1UEAxMk NGMxZjczN2EtNGU2NS00NTM4LWJiZTAtODJmNTYxMWVlZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5VzINZRfqtpIOKVoAlgYvH/vLDVKhl19GAd EYVFad5l5UkA94OpqSM8hJcoauUKuzvm8FjW0O7rR2FFKJsFmJheYIu2Hn1cvUk4 TPgRs+Emplt7XlPEcf2jIQpDMJjMJ685eeOK5mZ/exXylxnpLCznivbSBePmY4yV CDl6QtqGaEj/VadJEtbfVb8kIJ9S1EAJGY0xC2RQIS0OUALKgmtHUNfEf8xOQOri eDU7HZhlO9yRR+F7avjwRUJWF9jSQvOj9IB4E1EWNNWok59PhR81DW5zFa4mTT6x W0qXQMA8AZ9m2P6Gzb7+BiUGSfrp0fk84+uCJ7kX+j173LFIQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKKzEXU/lz6iaqGLarIdVSlPOZKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTBiNTRkNDQtZGM2NS0z OTJlLThmZTEtZGQ0NmYwYjQyZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHv5rUBB87pH0qvMZus9ZxXBc4yCM0RnQ+Yoz54jSEmCrEmubL7l 5Fx1/tXjg6663/RpWi5RRSOwrqGISSCLUi5aoxUxgU2hfH9FJ0SkDY+NLa4y43JN pSDbvhHAWefcCY4arLnOx7GxLOotpzswwvNiyib28UpmPnCjgFaI6GnfbopEWK3B rPShm70XMZYV+BbEGI1ugTimgG/k6r2iLjARGpw5ThRhGJh/VRl7+nWJEkFOFJ+n idTNnWhprNiwnA9mjOGlid0gZ8mj/rGsFp0+FZ1yb/8xwVifJitGssWXOTUR5JVB i407dI26H5WL3AyczfFfYi5JHvdsBb2e/jo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:27 2025 by rpki-client