$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa File: 309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa (raw, json) Hash identifier: O5rtT20Klvg9+3rtmMs/UbkzWdXpLOsfM9nKmFZN8AM= Subject key identifier: E3:0D:88:D5:C9:89:FC:E5:FB:74:1F:0E:47:0D:1B:20:FE:A9:4B:5A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE4A05623FEFAFB7589500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4a:05:62:3f:ef:af:b7:58:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d4c1cfe8-6672-469e-bcbe-f41e292d6ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:90:68:2c:6a:f3:d0:5f:29:ad:d4:88:24:02: 08:01:92:34:00:93:6b:d9:51:1f:88:a9:5f:a1:55: eb:d3:34:0b:c4:12:8f:12:c1:6a:bb:65:b1:75:1a: 09:8e:64:19:39:dc:b5:74:f7:6c:8d:9e:6d:9b:48: 72:d4:77:08:73:20:4a:8a:d1:ad:19:18:61:b5:77: 95:be:4a:bc:7c:f1:95:80:3f:2c:df:97:0f:52:3c: cd:d7:03:69:1e:f5:48:43:c6:bf:61:5f:37:29:bc: 51:fd:a8:c5:c8:02:d9:b6:6e:84:02:f5:6d:de:fc: d4:c8:97:d1:f3:c3:24:9c:f7:76:62:cb:67:1c:5e: 30:0f:e2:ae:47:6f:70:de:58:01:ec:57:51:c0:75: a4:a7:42:b5:27:9a:06:49:d3:83:f8:c6:db:f1:85: 3e:dd:e3:53:cc:86:eb:a3:ba:3e:85:1e:92:8a:2a: 58:bb:cf:b9:ee:aa:77:72:51:43:f9:27:ec:f4:94: 86:cf:74:5c:38:49:37:e4:8b:3f:1e:ef:24:b2:99: cf:3f:99:24:31:4d:e1:d0:39:66:13:8e:20:07:bf: 3c:7e:be:1d:04:00:e6:31:54:9c:0b:ae:12:ba:97: 51:fb:56:25:15:c6:2a:59:df:27:10:b9:4d:82:15: 94:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0D:88:D5:C9:89:FC:E5:FB:74:1F:0E:47:0D:1B:20:FE:A9:4B:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:46::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ba:42:25:0e:7c:c7:11:0b:4f:e5:f7:d9:ab:46:f3:1d:0a: 31:26:ac:c3:3e:99:94:e3:08:e4:2e:83:c7:9f:ed:28:c8:94: b8:2b:ba:24:04:1c:75:2f:b7:30:58:33:d0:6b:b6:a9:6b:1a: bb:5f:a7:21:88:d0:74:9e:4d:e1:a0:d2:2e:98:b0:ac:b3:00: 8c:3d:f8:02:de:49:59:e2:cd:ab:9f:4d:59:6c:1f:6f:f9:35: 47:2c:02:a8:b8:c0:d7:c2:fe:d6:d0:1f:9a:5f:8b:d6:95:e8: 9c:81:e9:d0:89:b8:97:4f:c7:ae:54:c1:2d:96:ee:62:b8:f5: 15:6f:09:14:0d:9e:eb:3a:75:b9:20:ee:a0:2c:ae:29:ce:71: 1a:2a:39:b5:85:db:4e:bc:b8:e0:30:b9:7e:48:53:35:2b:5f: 7d:47:ad:4b:88:4f:ca:9f:c5:c3:b7:47:7b:fa:a3:33:07:ba: 33:e3:06:a9:06:bd:98:51:d3:68:73:bc:9e:3f:39:b1:2b:92: 60:44:e6:11:ca:9e:04:96:26:9f:33:bb:56:0b:7e:c2:31:d6: b9:e1:4f:84:fc:84:2d:d6:c8:0a:fc:c6:9f:29:8f:8f:fc:8c: e9:0e:7a:6a:3b:9e:b2:60:1e:d2:6d:ba:84:88:b3:8e:07:6a: bf:d9:a1:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzkoFYj/vr7dYlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDRjMWNmZTgtNjY3Mi00NjllLWJjYmUtZjQxZTI5MmQ2YWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5BoLGrz0F8prdSIJAIIAZI0AJNr2VEfiKlf oVXr0zQLxBKPEsFqu2WxdRoJjmQZOdy1dPdsjZ5tm0hy1HcIcyBKitGtGRhhtXeV vkq8fPGVgD8s35cPUjzN1wNpHvVIQ8a/YV83KbxR/ajFyALZtm6EAvVt3vzUyJfR 88MknPd2YstnHF4wD+KuR29w3lgB7FdRwHWkp0K1J5oGSdOD+Mbb8YU+3eNTzIbr o7o+hR6SiipYu8+57qp3clFD+Sfs9JSGz3RcOEk35Is/Hu8kspnPP5kkMU3h0Dlm E44gB788fr4dBADmMVScC64SupdR+1YlFcYqWd8nELlNghWU8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOMNiNXJifzl+3QfDkcNGyD+qUtaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzA5YzkwOTktM2IwMC0z OGM2LWIyYjQtMmJkYmY1ZTc5YTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFm6QiUOfMcRC0/l99mrRvMdCjEmrMM+mZTjCOQug8ef7SjIlLgr uiQEHHUvtzBYM9BrtqlrGrtfpyGI0HSeTeGg0i6YsKyzAIw9+ALeSVnizaufTVls H2/5NUcsAqi4wNfC/tbQH5pfi9aV6JyB6dCJuJdPx65UwS2W7mK49RVvCRQNnus6 dbkg7qAsrinOcRoqObWF2068uOAwuX5IUzUrX31HrUuIT8qfxcO3R3v6ozMHujPj BqkGvZhR02hzvJ4/ObErkmBE5hHKngSWJp8zu1YLfsIx1rnhT4T8hC3WyAr8xp8p j4/8jOkOemo7nrJgHtJtuoSIs44Har/Zodk= -----END CERTIFICATE-----Generated at Fri Oct 10 23:59:45 2025 by rpki-client