$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa File: 1a6c305a-690d-3108-8f35-980317f42700.roa (raw, json) Hash identifier: Q3M4PIJm0yeq5IRg1dAGWS3X/aHMAEm7f53EdsfAgFI= Subject key identifier: 68:FF:54:5B:5E:DF:13:E9:6B:E0:20:07:A8:42:D4:3B:A9:E5:D7:CA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE567A0127396676C31540 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:56:7a:01:27:39:66:76:c3:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=9ef67aad-1189-42ce-872c-d5a07e1ecd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e1:08:7e:ab:2c:a0:dc:a7:d3:4e:8b:49:e6: 71:0f:d3:a9:e6:30:b1:55:20:bf:23:3f:e1:d3:15: 8b:21:fa:25:fa:92:13:eb:2a:be:c3:9f:4d:f2:54: b4:0a:9f:7c:e2:c9:f0:4e:8f:18:72:e2:5a:00:ea: 53:5b:28:27:1d:41:e6:7c:3f:52:fa:4a:91:21:b9: c1:56:e2:d0:2b:b8:f8:a6:cc:c7:ab:d3:0a:82:f1: 6e:88:14:83:df:81:37:02:48:fa:69:b0:1a:15:9f: dc:c4:c5:bd:5a:72:4e:b7:c8:c6:b9:31:6d:ce:56: 5d:7a:df:f0:26:1a:da:ba:73:2c:56:9e:da:28:14: bd:26:73:38:4d:b7:24:2f:b8:bb:65:c8:88:bd:38: fd:39:d8:79:ad:41:35:60:06:66:bf:61:f5:0a:7b: 22:0c:be:3a:c6:7b:93:90:ba:66:8a:21:27:14:7c: d6:94:d5:16:ea:6b:ff:29:d1:6c:bc:f9:dd:17:13: 4e:7c:5b:d6:1e:36:be:e0:db:19:e6:bd:ca:14:f2: 12:92:1b:97:fe:c0:b5:c0:32:a1:83:1c:3b:33:e8: d6:e5:9a:cd:9d:ff:fe:53:9a:49:9f:97:5a:89:c6: 6d:f5:48:52:f2:33:1f:69:76:58:f7:3a:2d:9d:87: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:54:5B:5E:DF:13:E9:6B:E0:20:07:A8:42:D4:3B:A9:E5:D7:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:fb:e4:ff:ae:ea:fa:f8:af:81:94:7c:a5:42:23:f8:45:18: 7e:2e:df:50:5b:90:1c:e1:2f:e1:cf:e0:d5:c2:55:8d:04:68: ce:96:69:fe:67:f6:b9:bf:d2:f1:b6:f2:22:d4:a6:5e:eb:94: 14:77:44:b0:ab:82:e5:0b:2c:21:98:c4:5e:1a:65:e0:67:81: b8:27:64:47:eb:42:f3:54:ee:7c:0e:5a:21:db:90:c0:8c:d4: b4:db:3b:b6:46:e0:20:62:d2:6a:bd:71:0a:0e:17:61:5d:77: a3:82:fc:86:0d:88:3c:be:fb:92:df:de:82:8a:34:6f:10:c9: 1e:97:29:3f:c2:30:fb:a7:ff:41:f8:7f:8a:4b:f2:0c:c0:94: 5f:ba:0c:ec:7e:4d:b0:3b:a1:6c:1c:f1:a1:01:98:89:e1:da: ef:79:1f:a4:b6:fc:1d:c6:10:e7:1d:8d:73:0d:fe:ec:fa:51: 7b:ed:4b:a3:12:50:13:12:f6:70:ca:5f:c7:9f:f8:65:a7:68: df:4b:f2:4a:ef:a6:55:9d:a0:a5:31:b4:5f:55:c0:53:7e:7f: c3:8d:2b:b1:59:e9:24:c9:ff:25:c7:ce:05:18:fe:ab:6b:2d: 2c:37:39:d3:35:02:a9:eb:ce:30:c3:7b:b5:02:13:34:2e:44: 19:92:59:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzlZ6ASc5ZnbDFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OWVmNjdhYWQtMTE4OS00MmNlLTg3MmMtZDVhMDdlMWVjZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+EIfqssoNyn006LSeZxD9Op5jCxVSC/Iz/h 0xWLIfol+pIT6yq+w59N8lS0Cp984snwTo8YcuJaAOpTWygnHUHmfD9S+kqRIbnB VuLQK7j4pszHq9MKgvFuiBSD34E3Akj6abAaFZ/cxMW9WnJOt8jGuTFtzlZdet/w JhraunMsVp7aKBS9JnM4TbckL7i7ZciIvTj9Odh5rUE1YAZmv2H1CnsiDL46xnuT kLpmiiEnFHzWlNUW6mv/KdFsvPndFxNOfFvWHja+4NsZ5r3KFPISkhuX/sC1wDKh gxw7M+jW5ZrNnf/+U5pJn5daicZt9UhS8jMfaXZY9zotnYdaiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGj/VFte3xPpa+AgB6hC1Dup5dfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWE2YzMwNWEtNjkwZC0z MTA4LThmMzUtOTgwMzE3ZjQyNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKz75P+u6vr4r4GUfKVCI/hFGH4u31BbkBzhL+HP4NXCVY0EaM6W af5n9rm/0vG28iLUpl7rlBR3RLCrguULLCGYxF4aZeBngbgnZEfrQvNU7nwOWiHb kMCM1LTbO7ZG4CBi0mq9cQoOF2Fdd6OC/IYNiDy++5Lf3oKKNG8QyR6XKT/CMPun /0H4f4pL8gzAlF+6DOx+TbA7oWwc8aEBmInh2u95H6S2/B3GEOcdjXMN/uz6UXvt S6MSUBMS9nDKX8ef+GWnaN9L8krvplWdoKUxtF9VwFN+f8ONK7FZ6STJ/yXHzgUY /qtrLSw3OdM1AqnrzjDDe7UCEzQuRBmSWaU= -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:27 2025 by rpki-client