$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa File: 095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa (raw, json) Hash identifier: AnF8OeUtYf0n95LxPvcopcvjQjV/7mdrrExV2I4IP+U= Subject key identifier: 33:95:9C:DF:5C:51:6D:7E:E6:06:71:FD:16:14:34:EC:67:29:9D:28 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673D267120BAADDE898F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 2001:500:4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3d:26:71:20:ba:ad:de:89:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=7fba620a-e8b3-4d89-b770-5712d7f19dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e5:05:34:e2:6b:e2:82:88:27:86:e0:76:a4: 6d:bf:53:41:7d:48:13:07:7e:1a:33:80:c0:cf:3f: 2f:cb:56:b4:14:dd:21:8c:5e:54:96:d1:46:89:a3: 29:04:29:e3:75:58:f0:3e:1e:12:98:ae:c2:68:97: 4b:19:df:a6:4b:10:f5:d6:30:21:c1:a3:f6:80:58: 6f:b7:1a:77:4f:d8:37:24:5b:00:f3:b8:17:b9:a5: 02:86:a1:08:e0:b8:c5:a5:ee:44:0a:a2:52:8c:d1: 54:63:03:d9:9b:b6:a0:4f:53:a3:20:81:5d:4c:cf: d1:e5:3b:56:94:8d:e2:6c:e0:6b:54:bf:1f:c2:93: da:d0:54:3d:48:dd:0f:a9:e4:f4:76:a9:44:64:ee: 47:44:ce:92:b2:79:f8:9f:63:a2:1b:2a:ec:ff:56: a2:a4:c2:7c:be:61:08:f9:99:93:95:c6:c7:ed:d6: f4:24:61:14:5a:b1:ce:65:8e:87:a3:bb:f6:78:d5: 47:be:bf:ad:83:b9:df:0c:ac:9b:5b:ef:46:68:8c: 32:d7:74:6b:96:4c:a8:8f:8c:05:09:a7:f1:d3:30: 23:20:4d:e8:6d:0c:51:cd:86:bc:59:9e:2e:55:bc: 60:b6:dc:f0:49:98:d2:2a:23:ee:e8:0c:99:da:9f: cd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:95:9C:DF:5C:51:6D:7E:E6:06:71:FD:16:14:34:EC:67:29:9D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:67:43:16:a8:81:f7:e5:aa:9e:b5:81:58:ee:54:5d:83:79: 3e:54:ce:9f:b8:23:eb:c8:d9:da:df:3f:15:48:37:66:e6:40: e0:a3:46:0c:2d:9a:9f:3e:f3:3d:cd:4b:8d:b1:94:34:93:ea: 48:fe:3d:7c:d0:f4:45:a1:fb:78:00:12:2a:49:61:01:df:6c: 37:a9:64:03:ea:9d:b3:d6:52:e4:1a:24:10:5d:7d:b8:ad:74: 50:da:a7:c0:7f:e5:5c:0e:d0:32:77:5e:82:0f:4b:a6:ca:c9: 09:8d:47:e7:ef:c6:1e:5e:3c:f8:29:52:f0:91:ee:b1:42:f9: fa:ba:7b:fb:a9:d9:01:2d:fb:9c:5d:fa:a3:b7:28:73:be:a5: 04:e7:bb:55:fd:0b:ea:8b:fd:42:1e:34:18:cd:54:b9:a5:46: 13:df:31:ee:eb:54:95:7b:05:95:ae:dc:bf:05:b8:97:62:f9: b5:9c:61:07:03:9d:e7:61:12:95:0d:f6:0d:e8:f0:cd:33:e4: d0:28:27:d5:b9:0c:ff:5c:45:5d:69:23:fd:18:78:2e:9d:9a: 6a:6f:c1:cf:5d:6c:6c:2b:8f:89:f6:7a:e8:05:4f:62:3e:6f: 7c:bd:8e:bf:96:60:63:d1:06:77:e4:c4:d3:6e:14:80:09:75: 31:72:ac:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZz0mcSC6rd6Jj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk N2ZiYTYyMGEtZThiMy00ZDg5LWI3NzAtNTcxMmQ3ZjE5ZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOUFNOJr4oKIJ4bgdqRtv1NBfUgTB34aM4DA zz8vy1a0FN0hjF5UltFGiaMpBCnjdVjwPh4SmK7CaJdLGd+mSxD11jAhwaP2gFhv txp3T9g3JFsA87gXuaUChqEI4LjFpe5ECqJSjNFUYwPZm7agT1OjIIFdTM/R5TtW lI3ibOBrVL8fwpPa0FQ9SN0PqeT0dqlEZO5HRM6Ssnn4n2OiGyrs/1aipMJ8vmEI +ZmTlcbH7db0JGEUWrHOZY6Ho7v2eNVHvr+tg7nfDKybW+9GaIwy13Rrlkyoj4wF Cafx0zAjIE3obQxRzYa8WZ4uVbxgttzwSZjSKiPu6AyZ2p/NywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDOVnN9cUW1+5gZx/RYUNOxnKZ0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDk1MjIzYTItNzdhYS0z MmU5LTk2NTUtN2RjOGU3YzZiYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHtnQxaogfflqp61gVjuVF2DeT5Uzp+4I+vI2drfPxVIN2bmQOCj Rgwtmp8+8z3NS42xlDST6kj+PXzQ9EWh+3gAEipJYQHfbDepZAPqnbPWUuQaJBBd fbitdFDap8B/5VwO0DJ3XoIPS6bKyQmNR+fvxh5ePPgpUvCR7rFC+fq6e/up2QEt +5xd+qO3KHO+pQTnu1X9C+qL/UIeNBjNVLmlRhPfMe7rVJV7BZWu3L8FuJdi+bWc YQcDnedhEpUN9g3o8M0z5NAoJ9W5DP9cRV1pI/0YeC6dmmpvwc9dbGwrj4n2eugF T2I+b3y9jr+WYGPRBnfkxNNuFIAJdTFyrNY= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:29 2025 by rpki-client