$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d298f668-c2fc-3e79-9148-3cd9f31f704d.roa File: d298f668-c2fc-3e79-9148-3cd9f31f704d.roa (raw, json) Hash identifier: NJBL3wUn4SPs/jlVdkaPjHn24hGp5I7lXThI9p4q4Jk= Subject key identifier: F1:3E:81:26:89:47:A5:ED:03:C3:86:AD:D0:27:9A:86:CD:CC:6A:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9E2F2A36C6E7AC29EEAEF5C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d298f668-c2fc-3e79-9148-3cd9f31f704d.roa Signing time: Thu 23 Oct 2025 14:20:27 +0000 ROA not before: Thu 23 Oct 2025 14:20:27 +0000 ROA not after: Wed 21 Jan 2026 15:20:27 +0000 asID: 7029 IP address blocks: 2001:19b0:180::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:2f:2a:36:c6:e7:ac:29:ee:ae:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 23 14:20:27 2025 GMT Not After : Jan 21 15:20:27 2026 GMT Subject: CN=92359bb1-4bcc-4b93-8a4c-b5bda20183b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:21:92:5d:ce:d8:7f:7c:69:f7:89:2a:5f:0c: a6:33:51:d4:53:fe:6b:5e:8f:a3:ea:56:ff:23:3e: fb:19:2b:fd:0a:a6:14:da:c1:87:2f:5b:61:be:56: 45:44:38:23:03:31:fc:ba:da:1c:09:c1:cf:2a:8d: 79:dc:e2:ba:8d:24:86:8b:d6:b7:4e:1e:92:b6:c1: d2:3b:9b:ed:36:71:0c:e2:e5:6a:d4:3b:ae:12:0a: 6f:07:3f:b8:3c:28:22:fc:10:11:22:8c:75:d8:94: 75:25:d9:92:2e:57:50:28:2d:d0:57:c5:86:12:e5: 95:2f:9a:9e:23:ff:bb:49:dd:6c:fd:e5:fe:24:a4: eb:b5:78:63:9c:cf:7c:a8:ae:df:6a:8f:9a:6f:a4: 9c:77:0b:1d:cd:d4:09:9b:9d:07:e3:2c:2e:f8:65: ac:e2:e7:5c:e1:00:bf:35:0b:65:36:d3:ee:09:d8: da:c0:09:87:53:4f:74:91:ad:05:09:62:6b:69:38: b7:26:09:01:fd:b5:bd:89:a1:0c:1c:24:d3:74:f7: ac:fb:a8:0c:8b:78:c5:f9:0b:63:f3:aa:ed:cc:b4: 3f:fa:58:2d:62:47:2e:41:2b:78:38:f5:bd:53:5b: c9:6c:82:26:9d:dc:69:4a:ba:59:4c:ee:99:0d:1a: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3E:81:26:89:47:A5:ED:03:C3:86:AD:D0:27:9A:86:CD:CC:6A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d298f668-c2fc-3e79-9148-3cd9f31f704d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:180::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:cc:7b:d2:79:41:5d:28:95:eb:69:c4:9d:84:d6:f3:76:02: 82:78:00:e1:7a:be:83:45:2e:bc:cc:85:d6:93:d0:7f:77:8e: 16:de:56:fa:01:21:82:66:50:26:cb:b6:f2:e4:d9:6a:85:1e: be:8c:20:65:c2:31:1c:61:5b:7a:a5:99:83:bc:26:10:01:03: ec:d7:52:30:d7:79:05:0e:f2:a7:d5:b6:19:66:70:b4:6d:74: fd:50:b9:9b:ac:bd:a3:b0:d1:27:7d:c8:63:72:c6:3a:2e:7a: 1b:cf:b0:af:fc:fd:40:30:9e:8f:47:96:dc:54:2a:f0:d4:c3: 91:22:22:23:9f:b2:2d:28:79:f2:b2:8f:95:c1:ff:ce:25:77: 80:8c:f8:6a:2b:d1:ef:ad:6e:5f:3e:a9:84:93:69:09:9c:b5: 4b:97:f5:94:9c:e9:b2:58:c5:c9:9d:69:27:d6:26:99:73:a4: 20:ef:c2:d0:1f:66:13:db:36:46:be:32:27:b9:58:eb:d7:ad: 47:ee:95:8f:d5:a6:72:4e:d0:d5:ab:8e:1e:f4:e6:54:4f:f6: f4:f1:7b:c8:a3:0c:e3:de:0f:5c:5e:eb:45:3a:11:b6:a9:81: d7:4e:4a:14:a6:b0:5e:f0:fe:0a:46:1f:ee:05:d4:bc:e4:80: 08:6a:91:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueLyo2xuesKe6u9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMzE0MjAyN1oXDTI2MDEyMTE1MjAyN1owLzEtMCsGA1UEAxMk OTIzNTliYjEtNGJjYy00YjkzLThhNGMtYjViZGEyMDE4M2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliGSXc7Yf3xp94kqXwymM1HUU/5rXo+j6lb/ Iz77GSv9CqYU2sGHL1thvlZFRDgjAzH8utocCcHPKo153OK6jSSGi9a3Th6StsHS O5vtNnEM4uVq1DuuEgpvBz+4PCgi/BARIox12JR1JdmSLldQKC3QV8WGEuWVL5qe I/+7Sd1s/eX+JKTrtXhjnM98qK7fao+ab6ScdwsdzdQJm50H4ywu+GWs4udc4QC/ NQtlNtPuCdjawAmHU090ka0FCWJraTi3JgkB/bW9iaEMHCTTdPes+6gMi3jF+Qtj 86rtzLQ/+lgtYkcuQSt4OPW9U1vJbIImndxpSrpZTO6ZDRrUlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPE+gSaJR6XtA8OGrdAnmobNzGpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI5OGY2NjgtYzJmYy0z ZTc5LTkxNDgtM2NkOWYzMWY3MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXMe9J5QV0oletpxJ2E1vN2AoJ4AOF6voNFLrzMhdaT0H93jhbe VvoBIYJmUCbLtvLk2WqFHr6MIGXCMRxhW3qlmYO8JhABA+zXUjDXeQUO8qfVthlm cLRtdP1QuZusvaOw0Sd9yGNyxjouehvPsK/8/UAwno9HltxUKvDUw5EiIiOfsi0o efKyj5XB/84ld4CM+Gor0e+tbl8+qYSTaQmctUuX9ZSc6bJYxcmdaSfWJplzpCDv wtAfZhPbNka+Mie5WOvXrUfulY/VpnJO0NWrjh705lRP9vTxe8ijDOPeD1xe60U6 EbapgddOShSmsF7w/gpGH+4F1LzkgAhqkSs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:21 2025 by rpki-client