$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e32297ca-540b-37ea-a072-fb22e0d1b602.roa File: e32297ca-540b-37ea-a072-fb22e0d1b602.roa (raw, json) Hash identifier: 0FBKU6mMAHL/rfInRQZhV/laUwnvT7dJhUjAulzx5Js= Subject key identifier: D7:26:E7:91:70:80:41:C4:44:D7:84:56:00:C6:2F:A1:A6:69:ED:B5 Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Certificate serial: 010D0C9F4328584B80B759188A05788A1ABCD080 Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e32297ca-540b-37ea-a072-fb22e0d1b602.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 18460 IP address blocks: 2001:49d0:100::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:59:18:8a:05:78:8a:1a:bc:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=647b0793-7c1b-4f31-9282-ba9151c0b21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:01:fb:e8:d9:47:fb:7f:dd:ed:05:94:d4:30: 16:41:c6:02:cf:4f:cd:59:be:7d:58:44:03:5c:6b: b8:c5:40:9a:34:10:dc:01:11:dc:e0:a7:de:5d:d3: 0d:c3:d9:3b:b1:23:8e:12:83:08:6e:74:4a:47:2d: 2e:5a:df:14:71:ca:53:17:4c:85:dc:86:a9:a3:21: 67:9b:1c:b0:2a:89:c4:b1:7f:70:44:ef:ad:ee:30: 2e:1a:fa:43:b3:e9:70:48:24:38:d5:8c:08:0b:5f: a5:ce:de:42:95:53:a0:98:50:c7:bc:8a:51:b1:40: a3:64:9f:66:08:81:66:a6:c4:00:0f:fb:7a:42:6d: a2:34:5f:8a:cd:26:fb:f8:fc:47:78:35:5b:88:05: 25:d9:0c:6b:f3:5d:62:2b:1f:78:97:ed:2e:2d:d9: c5:4d:c6:9f:2e:95:ea:7e:f1:6a:14:91:f7:d7:a7: 67:af:35:12:b6:98:a0:ac:64:0b:fe:20:9b:22:de: 74:21:d3:b6:f3:0a:6e:53:14:a2:5f:9c:9f:84:22: c7:69:65:23:9a:c2:bb:72:23:a7:91:03:73:e2:89: d4:fd:82:0a:6b:02:41:2b:28:21:8e:48:fc:17:f9: 61:74:dd:57:81:d0:5c:18:4c:4a:9e:89:7b:72:69: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:26:E7:91:70:80:41:C4:44:D7:84:56:00:C6:2F:A1:A6:69:ED:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e32297ca-540b-37ea-a072-fb22e0d1b602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl X509v3 Authority Key Identifier: keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer sbgp-ipAddrBlock: critical IPv6: 2001:49d0:100::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:25:58:95:b8:ab:7d:46:e9:de:60:76:91:81:f5:4a:31:ad: 8c:19:86:cd:08:f6:1a:4a:08:3f:64:73:a6:30:e5:6a:0d:12: 67:23:9e:5f:ea:0d:fd:27:5b:c1:3f:1f:76:1a:3e:ba:30:41: 08:90:31:b6:31:f4:7c:2a:d4:ea:35:7c:10:22:22:8d:33:b0: 5c:b5:c9:58:eb:d5:29:8f:0d:f1:6f:3e:d9:84:95:34:7c:70: 44:eb:0a:0e:27:9e:93:0e:57:bc:cf:b1:e8:5c:94:98:85:78: c6:e6:a7:03:81:f9:71:1c:a1:5c:c9:cc:95:69:ae:ac:4e:d0: b5:9c:bd:9e:1c:04:b2:18:c7:de:6a:cd:03:74:39:3f:b2:45: ea:9e:d6:8b:cd:98:86:a9:81:df:c7:8f:25:be:1b:bf:e5:b2: 72:d2:70:fe:12:a7:8b:5e:89:e6:5f:9c:2b:5b:bf:39:b2:2f: fc:5c:78:60:42:bf:52:d2:d0:1c:67:4d:41:4a:31:35:2b:d1: c8:1d:3f:6f:ac:73:54:67:3d:2d:3f:66:12:5a:8b:6e:e6:70: 0e:02:d2:51:17:72:38:bb:11:3d:f9:e2:ee:b8:01:f9:86:3b: ef:2c:c3:3d:59:ac:c1:d8:56:c0:e1:41:05:53:a3:32:bc:9a: ad:bb:76:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuAt1kYigV4ihq80IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4 YWIxMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NjQ3YjA3OTMtN2MxYi00ZjMxLTkyODItYmE5MTUxYzBiMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigH76NlH+3/d7QWU1DAWQcYCz0/NWb59WEQD XGu4xUCaNBDcARHc4KfeXdMNw9k7sSOOEoMIbnRKRy0uWt8UccpTF0yF3IapoyFn mxywKonEsX9wRO+t7jAuGvpDs+lwSCQ41YwIC1+lzt5ClVOgmFDHvIpRsUCjZJ9m CIFmpsQAD/t6Qm2iNF+KzSb7+PxHeDVbiAUl2Qxr811iKx94l+0uLdnFTcafLpXq fvFqFJH316dnrzUStpigrGQL/iCbIt50IdO28wpuUxSiX5yfhCLHaWUjmsK7ciOn kQNz4onU/YIKawJBKyghjkj8F/lhdN1XgdBcGExKnol7cmm68wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNcm55FwgEHERNeEVgDGL6Gmae21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvZTMyMjk3Y2EtNTQwYi0z N2VhLWEwNzItZmIyMmUwZDFiNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1 ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk MWI5MjhhYjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAFJ0AEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAAlWJW4q31G6d5gdpGB9UoxrYwZhs0I9hpKCD9kc6Yw5WoNEmcj nl/qDf0nW8E/H3YaProwQQiQMbYx9Hwq1Oo1fBAiIo0zsFy1yVjr1SmPDfFvPtmE lTR8cETrCg4nnpMOV7zPsehclJiFeMbmpwOB+XEcoVzJzJVprqxO0LWcvZ4cBLIY x95qzQN0OT+yReqe1ovNmIapgd/HjyW+G7/lsnLScP4Sp4teieZfnCtbvzmyL/xc eGBCv1LS0BxnTUFKMTUr0cgdP2+sc1RnPS0/ZhJai27mcA4C0lEXcji7ET354u64 AfmGO+8swz1ZrMHYVsDhQQVTozK8mq27duc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:24:59 2025 by rpki-client