$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa File: 107092d7-9026-31fd-802e-0afd0de7f5db.roa (raw, json) Hash identifier: 1KZ00GW+ApdDzs/UPY8Hdj/3ZhMovF0hEFAHVNwv2w8= Subject key identifier: 7D:75:57:CF:F7:E0:E4:6C:66:38:65:1C:34:7F:55:3C:26:89:D4:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFA68045BC6B329DDCC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2001:19b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fa:68:04:5b:c6:b3:29:dd:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=838d56ee-920b-4d6d-a51c-6f6436bd46e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:76:97:6f:13:4e:df:f4:58:a1:ab:51:76: ff:1e:c7:a9:e5:d1:f5:89:c7:3c:7a:3c:38:7e:ae: a2:96:b8:89:b4:9c:57:34:b1:c6:05:c7:74:ce:f3: 44:36:15:34:86:07:2c:af:6d:d8:41:1e:7b:66:05: 4f:79:c1:ee:34:0b:7c:51:44:df:18:34:95:64:98: 5d:34:95:a9:61:e9:07:7b:e4:ee:b6:ca:8b:00:28: 26:b8:d4:31:e9:41:e0:d7:93:0a:5b:1d:c1:d8:94: 87:23:15:a7:f3:53:bd:ea:e2:a3:e7:6d:b4:19:21: 11:56:b1:01:61:ae:f6:23:d5:b2:81:74:d9:66:26: e2:d5:7f:a5:a9:6f:05:14:4a:98:37:0c:09:01:82: e3:8e:c3:30:60:8b:5c:e9:f0:cf:94:b8:e6:3e:f5: 9b:02:d5:2f:0e:94:66:97:e8:89:1d:ea:2c:78:6f: f7:53:f2:88:f7:62:03:d6:d5:2d:e4:90:5d:5b:eb: 6c:65:b1:ec:e3:b0:b8:63:8e:a6:ab:a2:b8:2f:04: 51:41:f8:a0:5d:4f:85:f5:c8:08:fb:a0:6f:2d:bb: ae:ea:c4:12:a5:cf:1f:c3:2d:5f:67:4a:19:d3:f6: 4d:86:ab:75:c4:ba:8f:68:61:44:a3:35:18:66:f7: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:75:57:CF:F7:E0:E4:6C:66:38:65:1C:34:7F:55:3C:26:89:D4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:29:5f:3b:10:05:95:1c:3f:11:c5:d2:5d:e1:c9:e3:90:a7: 02:13:3e:63:a6:ae:e2:52:83:33:21:af:5a:47:b9:cd:cb:77: f7:fc:43:83:b9:1d:70:2c:ca:81:88:ea:87:06:5b:59:c5:af: f5:74:6c:de:76:b5:ac:e3:52:86:0a:17:6f:3b:d3:ae:f3:6e: 81:c2:ae:9c:c8:52:52:2b:a2:6d:48:1a:2b:11:09:e1:e5:94: e9:ff:b4:44:c6:e2:c8:7f:77:a7:30:97:03:f4:96:ef:a2:be: dd:10:61:94:d1:6e:ca:08:f5:f3:5d:5b:3c:ee:19:81:30:79: f9:b0:f0:65:5f:90:e4:99:06:a9:3c:b4:52:2a:e5:b3:86:99: a0:33:95:80:ef:b6:f2:55:c4:94:f5:8f:ba:ae:c6:fe:e6:36: 6b:fb:4d:54:30:1f:cd:8a:a0:75:f0:37:5e:b2:97:38:ac:79: 9f:a7:db:fb:21:a6:51:1e:39:a9:4d:a6:a5:45:3a:80:d1:0e: 8d:15:5c:74:df:0f:7f:3b:b1:e5:5c:a7:b6:1d:3b:12:39:d3: 1f:b5:3e:34:ab:d2:83:48:60:c0:69:e8:ca:2b:9f:5a:3b:7e: ca:87:5e:81:de:71:4e:3d:16:82:2b:3f:b0:29:d0:17:65:35: b0:98:98:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxXPpoBFvGsyndzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODM4ZDU2ZWUtOTIwYi00ZDZkLWE1MWMtNmY2NDM2YmQ0NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2N2l28TTt/0WKGrUXb/Hsep5dH1icc8ejw4 fq6ilriJtJxXNLHGBcd0zvNENhU0hgcsr23YQR57ZgVPecHuNAt8UUTfGDSVZJhd NJWpYekHe+TutsqLACgmuNQx6UHg15MKWx3B2JSHIxWn81O96uKj5220GSERVrEB Ya72I9WygXTZZibi1X+lqW8FFEqYNwwJAYLjjsMwYItc6fDPlLjmPvWbAtUvDpRm l+iJHeoseG/3U/KI92ID1tUt5JBdW+tsZbHs47C4Y46mq6K4LwRRQfigXU+F9cgI +6BvLbuu6sQSpc8fwy1fZ0oZ0/ZNhqt1xLqPaGFEozUYZveIAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH11V8/34ORsZjhlHDR/VTwmidR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA3MDkyZDctOTAyNi0z MWZkLTgwMmUtMGFmZDBkZTdmNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZsDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZKV87EAWVHD8RxdJd4cnjkKcCEz5jpq7iUoMzIa9aR7nNy3f3/EOD uR1wLMqBiOqHBltZxa/1dGzedrWs41KGChdvO9Ou826Bwq6cyFJSK6JtSBorEQnh 5ZTp/7RExuLIf3enMJcD9Jbvor7dEGGU0W7KCPXzXVs87hmBMHn5sPBlX5DkmQap PLRSKuWzhpmgM5WA77byVcSU9Y+6rsb+5jZr+01UMB/NiqB18Ddespc4rHmfp9v7 IaZRHjmpTaalRTqA0Q6NFVx03w9/O7HlXKe2HTsSOdMftT40q9KDSGDAaejKK59a O37Kh16B3nFOPRaCKz+wKdAXZTWwmJhp -----END CERTIFICATE-----Generated at Sat Oct 11 00:00:29 2025 by rpki-client