$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/320e3ef0-359c-3b2d-a4f7-c7bfc5191cbc.roa File: 320e3ef0-359c-3b2d-a4f7-c7bfc5191cbc.roa (raw, json) Hash identifier: VY7BAtxud+cEhkYoRw20ttG+IZfp3EtED0OPlgOaDB0= Subject key identifier: 56:9F:1F:58:D1:36:84:A3:04:FE:52:9A:B0:77:9A:48:07:D7:F0:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CFA56202ADA799A63B800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/320e3ef0-359c-3b2d-a4f7-c7bfc5191cbc.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2001:1908::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:fa:56:20:2a:da:79:9a:63:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=82fc6c64-b009-4e36-968b-aef16c532fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:eb:f6:64:ef:79:cd:2d:25:37:32:80:cd:69: 0c:36:3f:0a:a7:a9:ce:b3:c3:37:ed:a4:a4:80:07: 8e:70:98:a5:5d:02:a5:5d:e3:68:d7:29:3b:a7:a4: ee:35:4e:e6:99:6b:bd:a1:1a:91:08:75:74:83:e7: 38:cb:be:8e:fe:0a:6e:4e:06:66:d1:1e:fc:36:96: 87:1d:44:2b:2b:6c:0c:94:05:42:42:3b:f5:77:52: 7b:75:1f:da:a2:8b:c1:8a:15:45:27:bf:b3:b7:89: f2:74:65:91:06:dc:d7:40:f6:bd:22:7c:92:2f:27: aa:19:bc:cf:00:a4:83:00:9c:1e:9d:f2:91:0c:bb: 1e:50:e0:9a:ae:fe:3a:34:95:4f:dc:f3:45:1a:b4: e0:c1:35:5c:b4:4b:75:a2:2e:0d:02:bd:b9:a3:74: f6:43:f7:ea:02:3d:fc:aa:43:c8:0a:1a:28:70:11: 10:ec:6f:53:bf:ea:26:88:a1:9a:b6:bd:ea:d0:d2: 0d:0a:d0:21:91:95:9e:d1:bb:b1:0b:5f:7f:be:e2: f9:d8:53:b2:90:12:63:90:bc:e8:b1:f1:f2:02:8a: 98:ed:f8:7e:ff:6d:d7:37:76:8f:87:74:c8:c9:0c: ef:a9:83:e1:e1:53:01:fd:d1:10:47:c1:c5:49:e4: e9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9F:1F:58:D1:36:84:A3:04:FE:52:9A:B0:77:9A:48:07:D7:F0:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/320e3ef0-359c-3b2d-a4f7-c7bfc5191cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:1908::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ae:3b:1a:42:d7:b5:7a:a1:3f:21:2e:b4:ef:23:c4:36:86: 0d:68:fe:7e:93:df:f2:80:84:83:15:2c:2d:1f:1b:f2:a1:61: 71:fb:7c:10:99:ce:d6:00:33:cc:af:de:d5:32:13:0e:84:65: 5b:f6:24:39:bf:21:3f:0b:6a:d9:3d:00:b1:b4:9f:0e:00:3d: 1b:00:eb:b8:46:e5:4e:ed:44:ef:87:51:dc:9a:fd:0c:28:03: fb:11:aa:4b:9f:49:e8:56:df:31:a7:20:b1:4c:33:df:3d:2c: 49:4b:86:15:4e:bd:66:64:46:9d:f2:1f:e0:a0:bf:1c:b2:d2: 5d:8f:4b:9d:01:94:2b:1c:cd:6d:5a:b1:a9:30:b2:c0:76:72: 5a:a8:a4:99:75:e5:99:e0:46:cd:bb:11:60:74:ec:e0:ea:25: 1d:e3:34:aa:3b:ce:dd:e2:4d:20:33:c6:37:4c:5e:5e:6e:d9: 1d:bd:ae:7a:a5:34:98:17:c6:a0:92:dd:93:3d:95:2b:c3:fb: 22:4a:04:a6:25:34:40:2f:d2:7f:ef:48:dc:32:82:69:5e:45: e2:99:a5:17:c2:01:36:2f:7b:ab:4c:f8:a4:06:ac:22:48:4e: 32:45:4b:0f:06:e5:f2:f2:64:05:e6:f0:06:6a:57:cb:52:e8: 47:10:89:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxXPpWICraeZpjuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODJmYzZjNjQtYjAwOS00ZTM2LTk2OGItYWVmMTZjNTMyZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguv2ZO95zS0lNzKAzWkMNj8Kp6nOs8M37aSk gAeOcJilXQKlXeNo1yk7p6TuNU7mmWu9oRqRCHV0g+c4y76O/gpuTgZm0R78NpaH HUQrK2wMlAVCQjv1d1J7dR/aoovBihVFJ7+zt4nydGWRBtzXQPa9InySLyeqGbzP AKSDAJwenfKRDLseUOCarv46NJVP3PNFGrTgwTVctEt1oi4NAr25o3T2Q/fqAj38 qkPIChoocBEQ7G9Tv+omiKGatr3q0NINCtAhkZWe0buxC19/vuL52FOykBJjkLzo sfHyAoqY7fh+/23XN3aPh3TIyQzvqYPh4VMB/dEQR8HFSeTp2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFafH1jRNoSjBP5SmrB3mkgH1/DjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzIwZTNlZjAtMzU5Yy0z YjJkLWE0ZjctYzdiZmM1MTkxY2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATrjsaQte1eqE/IS607yPENoYNaP5+k9/ygISDFSwtHxvyoWFx+3wQ mc7WADPMr97VMhMOhGVb9iQ5vyE/C2rZPQCxtJ8OAD0bAOu4RuVO7UTvh1Hcmv0M KAP7EapLn0noVt8xpyCxTDPfPSxJS4YVTr1mZEad8h/goL8cstJdj0udAZQrHM1t WrGpMLLAdnJaqKSZdeWZ4EbNuxFgdOzg6iUd4zSqO87d4k0gM8Y3TF5ebtkdva56 pTSYF8agkt2TPZUrw/siSgSmJTRAL9J/70jcMoJpXkXimaUXwgE2L3urTPikBqwi SE4yRUsPBuXy8mQF5vAGalfLUuhHEIlb -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:15 2025 by rpki-client