$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa File: 1dba6855-d043-3318-9f5b-e0247f7172d4.roa (raw, json) Hash identifier: bJt+9F5FBMZ6n5NG2UxQeaBC6Tc4ww3dOUSxYDYHcPQ= Subject key identifier: 1B:59:CA:97:BF:9F:D6:A0:E8:A1:57:93:9B:B3:2C:AE:11:23:6E:0B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CCA172ABFC02EBE67E7580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:a1:72:ab:fc:02:eb:e6:7e:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=24d24f89-b1d1-47a0-94e0-3ee24b5eca16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:13:4a:62:19:12:c1:f7:f6:67:9f:01:23:03: a1:ca:77:cb:cf:66:97:1e:a4:6d:65:84:bf:f1:ef: ad:8c:9e:35:79:a2:9a:24:e1:30:89:f8:70:35:d9: a9:ca:26:89:9e:d8:88:be:c3:d9:a6:58:69:e0:2e: c0:b5:68:a6:8b:c7:5c:2e:2c:3f:b4:4a:bd:d7:a0: 3d:8f:ca:d6:fd:56:bd:c4:eb:bb:ad:ce:b0:dc:83: 2d:8b:51:89:3f:2e:93:13:71:09:8d:76:10:92:3c: 84:92:44:d7:6e:b8:a2:49:e6:af:50:2a:f9:98:31: 09:e2:88:ce:59:15:ff:11:f4:18:e2:80:81:56:4e: 0b:19:2f:58:05:cd:de:a3:ba:62:79:fa:66:23:57: 9f:6d:79:78:48:23:02:79:26:e1:99:9d:f9:9f:03: 4e:ce:de:a1:61:cf:de:21:7d:6d:77:fd:53:56:1b: 3d:8a:77:d0:f9:9b:b2:bf:c9:2d:d9:08:5c:a2:0f: 01:2c:1d:27:57:dc:be:a8:99:4f:e5:f9:28:88:e7: 47:46:c4:9e:d4:5a:9f:5a:05:d4:84:d9:14:f0:b6: 4e:a6:6d:c3:65:dd:15:0e:07:e8:fc:41:4f:bf:35: 4e:6f:0f:00:71:7c:be:51:fe:3c:b9:fc:7f:c1:b6: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:59:CA:97:BF:9F:D6:A0:E8:A1:57:93:9B:B3:2C:AE:11:23:6E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bb:5d:67:a4:a7:25:48:f1:80:5a:9f:79:7a:bb:78:3f:25: 32:04:e6:1c:8e:b0:9a:01:db:9a:09:62:83:8d:59:1d:23:0d: 5f:6c:15:7a:42:72:2e:16:6e:c1:b2:7b:0e:14:f8:ce:11:d8: d2:3e:5f:e9:03:35:cf:ee:b6:2a:42:e3:54:02:96:10:1e:28: 0c:ec:8e:f6:85:1b:a8:fe:4f:00:eb:ea:55:a8:13:e1:43:a0: 91:ed:ab:47:50:7a:84:85:8a:93:36:b2:d7:ae:1c:d0:e4:3d: 96:df:fd:05:34:12:f5:f8:3d:fa:b8:bc:bc:d7:66:77:33:64: 49:06:f4:08:98:f1:72:46:61:d2:d4:d1:b9:78:6c:02:e9:3c: 38:fe:91:6f:eb:fa:ea:c0:b1:66:67:6f:3c:63:13:91:e2:79: ba:16:b5:ad:c7:53:17:9f:e5:89:cc:38:82:be:15:60:14:7f: 8e:3f:09:e6:7e:96:09:28:be:d5:2c:7f:88:de:d7:55:b4:d6: 17:93:5a:f5:a6:2e:19:c2:e9:51:52:b1:a0:fb:aa:78:c4:70: 4f:6e:0b:dc:98:51:5d:b2:43:ed:f4:01:d0:01:bb:23:00:b7: 57:2a:3c:e6:df:28:93:c6:39:7b:3c:0c:d1:49:15:da:45:cc: 58:a9:87:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzKFyq/wC6+Z+dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjRkMjRmODktYjFkMS00N2EwLTk0ZTAtM2VlMjRiNWVjYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BNKYhkSwff2Z58BIwOhynfLz2aXHqRtZYS/ 8e+tjJ41eaKaJOEwifhwNdmpyiaJntiIvsPZplhp4C7AtWimi8dcLiw/tEq916A9 j8rW/Va9xOu7rc6w3IMti1GJPy6TE3EJjXYQkjyEkkTXbriiSeavUCr5mDEJ4ojO WRX/EfQY4oCBVk4LGS9YBc3eo7piefpmI1efbXl4SCMCeSbhmZ35nwNOzt6hYc/e IX1td/1TVhs9infQ+Zuyv8kt2Qhcog8BLB0nV9y+qJlP5fkoiOdHRsSe1FqfWgXU hNkU8LZOpm3DZd0VDgfo/EFPvzVObw8AcXy+Uf48ufx/wbbkmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBtZype/n9ag6KFXk5uzLK4RI24LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWRiYTY4NTUtZDA0My0z MzE4LTlmNWItZTAyNDdmNzE3MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA27XWekpyVI8YBan3l6u3g/JTIE5hyOsJoB25oJYoONWR0jDV9s FXpCci4WbsGyew4U+M4R2NI+X+kDNc/utipC41QClhAeKAzsjvaFG6j+TwDr6lWo E+FDoJHtq0dQeoSFipM2steuHNDkPZbf/QU0EvX4Pfq4vLzXZnczZEkG9AiY8XJG YdLU0bl4bALpPDj+kW/r+urAsWZnbzxjE5HieboWta3HUxef5YnMOIK+FWAUf44/ CeZ+lgkovtUsf4je11W01heTWvWmLhnC6VFSsaD7qnjEcE9uC9yYUV2yQ+30AdAB uyMAt1cqPObfKJPGOXs8DNFJFdpFzFiphxI= -----END CERTIFICATE-----Generated at Fri Oct 10 22:16:35 2025 by rpki-client