$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa File: 9ffa16d3-2d08-3707-98b5-07d9e1313429.roa (raw, json) Hash identifier: R35Xg9ESV9PryUyPevbl+N3VBZY5t4dbDOi7sWihW+I= Subject key identifier: 47:41:6E:F2:93:24:B5:6E:35:83:8B:49:6A:D5:8B:44:79:32:9C:6A Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Certificate serial: 010D0C9F4328584B80B762A1114B30F77AA9ED80 Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 15116 IP address blocks: 2001:49d0:180::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:62:a1:11:4b:30:f7:7a:a9:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=955e7812-6339-4775-95e3-7c664d72335f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:5d:a5:9b:d2:ea:6f:5a:c9:69:b8:a6:1c: 14:68:65:62:d8:6f:47:d2:99:6c:86:93:0e:f2:9d: 15:3c:72:15:35:cb:84:64:b7:b1:cc:f6:9e:03:15: e0:ff:0d:44:16:5a:13:56:f9:3a:00:6e:72:4b:02: db:74:89:ab:3a:c8:56:53:92:a7:e0:be:25:4c:4c: f7:78:27:32:b7:ea:e6:3f:ed:df:b1:d2:ff:76:6e: 07:aa:e6:9f:04:9e:31:9a:4f:37:5b:28:63:3d:1a: e7:2d:8d:d1:54:19:46:b3:bb:bd:e3:16:ca:88:0f: f8:cc:8b:15:80:44:29:b0:3a:84:c1:70:a3:d0:12: 43:d1:7c:6d:06:3a:7e:63:75:8c:5e:45:d4:5f:ec: b9:45:7c:b3:6c:e6:ec:47:3c:96:ee:23:af:df:08: c4:97:29:4f:a1:85:7d:4e:29:d2:62:d6:0c:4a:36: d1:71:4a:d7:4c:84:7f:e7:22:b1:cc:87:ab:3f:3e: aa:4b:36:62:7c:46:58:0a:03:e3:8d:e5:9a:0c:fc: c3:61:bd:e5:57:30:b0:eb:ff:29:44:18:cf:a9:00: c5:71:2e:4e:40:9a:df:39:d2:cc:98:00:89:19:a2: 8e:a4:50:cc:87:b5:f8:a3:20:20:4f:46:5d:3f:21: bb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:41:6E:F2:93:24:B5:6E:35:83:8B:49:6A:D5:8B:44:79:32:9C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl X509v3 Authority Key Identifier: keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer sbgp-ipAddrBlock: critical IPv6: 2001:49d0:180::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b6:b8:42:8f:e9:0c:96:99:29:db:86:60:29:7f:a1:18:24: 6c:46:54:41:c2:30:c7:da:cb:b1:e2:b0:61:7e:e3:45:10:82: 02:b1:5b:92:38:bf:7b:aa:17:3c:e5:7d:ef:c1:3d:01:06:15: 09:7d:64:28:ca:c6:dd:11:5b:70:ea:f3:8a:56:12:75:73:99: 2c:61:ac:40:03:3f:fc:33:47:13:80:2b:8c:49:cc:16:37:15: f8:20:25:c3:39:b1:70:de:39:6b:2f:40:03:6b:6d:65:dd:52: f6:af:38:28:57:c9:4d:e8:10:33:b0:36:0a:0c:0c:ba:6d:b9: 3b:f9:e0:57:33:bf:68:75:dd:b8:90:2f:23:c7:56:50:68:b9: d4:9f:cb:23:49:c9:1b:f5:e6:1e:08:de:77:f2:e6:bf:24:09: 7c:91:2b:53:5f:60:68:66:2a:a8:aa:75:aa:7b:a4:1d:9f:0c: 4c:5f:6b:91:2d:65:df:72:bb:4f:62:ed:81:f4:5f:cb:f4:af: e2:1d:f5:97:66:41:86:2d:9e:ac:87:cc:82:93:6d:19:72:70: e2:e2:96:5b:2b:00:2a:0e:c1:c3:13:0a:61:9e:28:1f:f5:a6: 2f:5c:28:0c:26:94:61:99:92:d0:fe:22:78:56:2f:ed:58:b5: 50:04:cf:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuAt2KhEUsw93qp7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4 YWIxMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk OTU1ZTc4MTItNjMzOS00Nzc1LTk1ZTMtN2M2NjRkNzIzMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNddpZvS6m9ayWm4phwUaGVi2G9H0plshpMO 8p0VPHIVNcuEZLexzPaeAxXg/w1EFloTVvk6AG5ySwLbdImrOshWU5Kn4L4lTEz3 eCcyt+rmP+3fsdL/dm4HquafBJ4xmk83WyhjPRrnLY3RVBlGs7u94xbKiA/4zIsV gEQpsDqEwXCj0BJD0XxtBjp+Y3WMXkXUX+y5RXyzbObsRzyW7iOv3wjElylPoYV9 TinSYtYMSjbRcUrXTIR/5yKxzIerPz6qSzZifEZYCgPjjeWaDPzDYb3lVzCw6/8p RBjPqQDFcS5OQJrfOdLMmACJGaKOpFDMh7X4oyAgT0ZdPyG7PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEdBbvKTJLVuNYOLSWrVi0R5MpxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvOWZmYTE2ZDMtMmQwOC0z NzA3LTk4YjUtMDdkOWUxMzEzNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1 ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk MWI5MjhhYjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAFJ0AGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGS2uEKP6QyWmSnbhmApf6EYJGxGVEHCMMfay7HisGF+40UQggKx W5I4v3uqFzzlfe/BPQEGFQl9ZCjKxt0RW3Dq84pWEnVzmSxhrEADP/wzRxOAK4xJ zBY3FfggJcM5sXDeOWsvQANrbWXdUvavOChXyU3oEDOwNgoMDLptuTv54Fczv2h1 3biQLyPHVlBoudSfyyNJyRv15h4I3nfy5r8kCXyRK1NfYGhmKqiqdap7pB2fDExf a5EtZd9yu09i7YH0X8v0r+Id9ZdmQYYtnqyHzIKTbRlycOLillsrACoOwcMTCmGe KB/1pi9cKAwmlGGZktD+InhWL+1YtVAEz3o= -----END CERTIFICATE-----Generated at Mon Oct 20 13:21:31 2025 by rpki-client