$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa8df93b-b247-3f44-81dd-884ec660e565.roa File: fa8df93b-b247-3f44-81dd-884ec660e565.roa (raw, json) Hash identifier: 5EIW1sRHGqMVFA5EyOlP3YuquhDadbRRyJaxkdSsqZI= Subject key identifier: 04:CE:58:58:FD:D8:BE:74:E6:1D:75:A6:60:6E:62:CB:47:CC:35:00 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9E2F616A433DB576D845DA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa8df93b-b247-3f44-81dd-884ec660e565.roa Signing time: Thu 23 Oct 2025 14:20:53 +0000 ROA not before: Thu 23 Oct 2025 14:20:53 +0000 ROA not after: Wed 21 Jan 2026 15:20:53 +0000 asID: 7029 IP address blocks: 2001:19b0:280::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:2f:61:6a:43:3d:b5:76:d8:45:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 23 14:20:53 2025 GMT Not After : Jan 21 15:20:53 2026 GMT Subject: CN=d0ab1b4e-db19-4544-af20-b52a969b48ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:ff:be:66:dd:78:dc:4f:86:f1:5d:d5:fd: 49:71:ad:0b:be:ea:95:76:1b:f8:c4:d4:e4:37:e2: f4:7d:53:b6:23:a1:8f:7b:8e:6d:eb:be:8d:6f:d2: 71:53:85:a5:64:7e:17:d8:57:3a:93:d6:e3:7f:fd: 45:20:3e:86:50:4a:87:3c:a6:1a:04:b9:56:66:74: ad:0e:86:38:23:dd:78:c6:2d:b5:ba:28:15:3f:0b: c6:3f:c0:72:95:83:0b:1a:ca:33:97:ee:35:f5:7b: 28:6f:f5:6f:06:0e:c2:d9:7a:c2:54:ba:59:7d:0f: d8:73:88:91:79:5d:e1:d9:69:19:c5:10:f8:d5:02: 11:b1:16:3d:9c:4f:c0:18:1e:63:3e:ab:fa:47:53: b6:85:1e:32:ae:cb:30:fc:59:78:14:2a:cb:4d:38: f7:6a:44:e7:18:8c:0f:1d:59:fe:a2:c8:dc:e5:d2: c7:f7:f7:28:f4:79:05:7d:ab:d2:7c:d3:2c:d6:e2: e4:0f:69:6b:5f:f2:6a:ba:03:1c:99:f5:76:e9:35: a2:1f:f4:fe:f0:34:c9:a8:26:d0:f8:d8:7d:3d:66: f2:c7:0f:08:d4:2e:a7:e0:3b:55:57:64:ad:60:30: 25:11:f4:0e:23:db:7c:c8:a4:a2:e3:04:af:24:4d: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CE:58:58:FD:D8:BE:74:E6:1D:75:A6:60:6E:62:CB:47:CC:35:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa8df93b-b247-3f44-81dd-884ec660e565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:280::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ed:9c:27:39:d5:69:39:56:ce:02:78:a8:ce:51:c7:18:35: 17:b3:7b:9f:9a:20:ba:87:42:1a:3d:dd:67:a0:bb:d1:d9:62: c7:28:dd:79:03:3c:04:1a:28:d4:b2:6a:8a:46:2f:33:22:ef: 64:2b:6d:43:99:ff:a7:a2:12:15:e3:81:34:67:47:b1:b9:f4: 60:ad:77:8e:4a:b5:35:cb:bc:91:83:47:86:cc:bd:61:08:84: b2:b2:54:57:8d:e0:0e:dd:b0:91:ce:a1:62:13:a5:30:6d:06: ea:10:0f:1c:ed:2e:df:8c:bf:9b:c7:72:10:7c:05:a1:03:69: 48:b6:54:b4:da:97:ec:b2:68:c6:56:b0:4d:8e:ee:1c:a5:72: 7f:4d:be:39:06:24:0c:6e:94:6c:d8:14:b0:f2:cf:1c:e6:f3: 67:91:b8:56:0f:d6:03:b4:7d:90:1c:30:6c:cc:50:c4:54:37: b7:d8:a8:f6:6d:30:6c:4a:3e:c4:6f:3b:29:d6:04:a4:51:11: cb:9f:b2:98:ce:0f:f0:16:f5:b5:0a:f4:eb:1b:b3:e6:10:e1: 95:c7:d3:db:0b:7f:d5:93:4f:ec:14:6d:8f:9c:4c:d8:a0:95: 6d:3d:da:fe:90:de:a0:e0:e3:33:06:c5:64:ae:47:73:27:02: 1f:21:1d:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueL2FqQz21dthF2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMzE0MjA1M1oXDTI2MDEyMTE1MjA1M1owLzEtMCsGA1UEAxMk ZDBhYjFiNGUtZGIxOS00NTQ0LWFmMjAtYjUyYTk2OWI0OGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig3/vmbdeNxPhvFd1f1Jca0LvuqVdhv4xNTk N+L0fVO2I6GPe45t676Nb9JxU4WlZH4X2Fc6k9bjf/1FID6GUEqHPKYaBLlWZnSt DoY4I914xi21uigVPwvGP8BylYMLGsozl+419Xsob/VvBg7C2XrCVLpZfQ/Yc4iR eV3h2WkZxRD41QIRsRY9nE/AGB5jPqv6R1O2hR4yrssw/Fl4FCrLTTj3akTnGIwP HVn+osjc5dLH9/co9HkFfavSfNMs1uLkD2lrX/JqugMcmfV26TWiH/T+8DTJqCbQ +Nh9PWbyxw8I1C6n4DtVV2StYDAlEfQOI9t8yKSi4wSvJE2x/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFATOWFj92L505h11pmBuYstHzDUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmE4ZGY5M2ItYjI0Ny0z ZjQ0LTgxZGQtODg0ZWM2NjBlNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbtnCc51Wk5Vs4CeKjOUccYNReze5+aILqHQho93Wegu9HZYsco 3XkDPAQaKNSyaopGLzMi72QrbUOZ/6eiEhXjgTRnR7G59GCtd45KtTXLvJGDR4bM vWEIhLKyVFeN4A7dsJHOoWITpTBtBuoQDxztLt+Mv5vHchB8BaEDaUi2VLTal+yy aMZWsE2O7hylcn9NvjkGJAxulGzYFLDyzxzm82eRuFYP1gO0fZAcMGzMUMRUN7fY qPZtMGxKPsRvOynWBKRREcufspjOD/AW9bUK9Osbs+YQ4ZXH09sLf9WTT+wUbY+c TNiglW092v6Q3qDg4zMGxWSuR3MnAh8hHTY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:11 2025 by rpki-client