$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/43117425-905b-3355-9503-e90e2655c0b0.roa File: 43117425-905b-3355-9503-e90e2655c0b0.roa (raw, json) Hash identifier: DKZbhvY+gnA5HLo73lnCsnpYmZHvmQkQTI7L2cido04= Subject key identifier: 1C:69:C8:65:EE:FF:FA:C0:0B:3E:73:11:49:5F:65:EA:0B:D0:92:0B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE53D23D3F7038CD595900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/43117425-905b-3355-9503-e90e2655c0b0.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:53:d2:3d:3f:70:38:cd:59:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f0159598-3be2-485e-9645-2b57bbfc7498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:f9:7e:38:87:42:ad:2a:67:16:6a:df:57: 5c:91:45:3f:ca:34:a9:00:b8:0c:b8:f8:6a:16:cd: 71:50:22:74:2d:04:3f:c3:9b:12:41:72:a8:fd:80: 3b:4d:f1:3f:7d:aa:dc:94:46:b2:0f:66:31:90:fb: 63:8d:b5:0a:86:75:fa:ac:af:08:81:83:93:cb:39: 1d:85:53:8c:61:29:ba:0a:b2:87:7c:0b:05:91:1c: c1:35:23:19:05:1a:11:6f:f6:c2:9d:e4:90:5f:68: b0:c3:9d:3d:cf:9d:9b:a0:70:22:27:75:57:32:e1: 3b:e0:da:fa:b6:b0:6f:5a:c8:59:d9:05:93:c7:0d: 2c:17:46:4b:0e:fe:74:34:20:07:dc:1d:98:67:b8: ba:5a:60:d9:f3:e7:58:4e:1a:a6:d8:3c:91:b6:d9: 86:1e:ff:bc:fd:8d:dd:d7:6c:9b:4e:f0:74:cf:2d: 39:df:35:a5:90:45:dd:f4:55:6f:dd:c8:2c:c3:ae: ff:e4:99:e7:37:b1:58:bc:91:68:de:d1:14:2b:ac: 9f:f1:7c:38:95:8e:35:c7:df:90:cf:9a:7e:40:5e: c0:b9:cc:ec:2c:ee:71:f0:de:9a:f4:da:af:ca:fc: f4:c3:6d:54:aa:05:6a:82:c7:a0:d8:32:ff:62:7e: 50:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:69:C8:65:EE:FF:FA:C0:0B:3E:73:11:49:5F:65:EA:0B:D0:92:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/43117425-905b-3355-9503-e90e2655c0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:56::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:96:31:a3:fa:5b:3a:ed:f8:65:79:f9:c7:c4:77:ef:eb:a7: 1b:1d:6a:a8:de:b0:7a:ae:1b:ef:3e:9a:72:f8:f7:b6:f2:bf: 37:72:26:33:51:43:36:6e:bf:d7:77:02:d2:cb:e4:28:7e:5f: c8:76:5b:65:04:8a:d7:ae:8b:6d:73:00:77:6f:75:51:8e:e0: 1c:7e:bd:7e:08:46:b5:86:1c:ea:ce:86:35:e1:9d:c6:ef:23: ab:dc:cc:4c:9c:20:e7:54:85:85:ee:63:42:73:03:44:5d:8c: 7a:2f:c3:f6:d7:60:8f:33:60:76:d1:20:de:e5:5c:b3:43:eb: 50:7c:1d:40:b3:a8:f5:3a:05:c3:57:fc:2f:bf:d9:89:6a:95: ec:3a:79:56:f7:34:61:1b:f5:3f:42:de:c9:67:a5:8a:7f:cf: 9d:ed:08:32:d9:ac:dd:eb:9c:74:6f:60:a8:5f:30:95:c2:bc: 49:8d:ec:4a:0d:ce:f9:4f:a9:a0:29:a9:e9:a4:aa:47:db:c3: 7f:33:1f:c7:a6:2f:17:6c:f2:42:e9:e6:fb:40:58:8f:5d:13: d8:67:84:39:8a:3d:76:05:26:77:33:45:bd:34:e0:b8:96:e7: 89:0e:ef:56:d6:9b:bf:c6:a0:b1:13:2b:fe:14:97:6b:81:11: d1:ad:07:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzlPSPT9wOM1ZWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjAxNTk1OTgtM2JlMi00ODVlLTk2NDUtMmI1N2JiZmM3NDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUz5fjiHQq0qZxZq31dckUU/yjSpALgMuPhq Fs1xUCJ0LQQ/w5sSQXKo/YA7TfE/farclEayD2YxkPtjjbUKhnX6rK8IgYOTyzkd hVOMYSm6CrKHfAsFkRzBNSMZBRoRb/bCneSQX2iww509z52boHAiJ3VXMuE74Nr6 trBvWshZ2QWTxw0sF0ZLDv50NCAH3B2YZ7i6WmDZ8+dYThqm2DyRttmGHv+8/Y3d 12ybTvB0zy053zWlkEXd9FVv3cgsw67/5JnnN7FYvJFo3tEUK6yf8Xw4lY41x9+Q z5p+QF7AuczsLO5x8N6a9Nqvyvz0w21UqgVqgseg2DL/Yn5QjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBxpyGXu//rACz5zEUlfZeoL0JILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDMxMTc0MjUtOTA1Yi0z MzU1LTk1MDMtZTkwZTI2NTVjMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJSWMaP6Wzrt+GV5+cfEd+/rpxsdaqjesHquG+8+mnL497byvzdy JjNRQzZuv9d3AtLL5Ch+X8h2W2UEiteui21zAHdvdVGO4Bx+vX4IRrWGHOrOhjXh ncbvI6vczEycIOdUhYXuY0JzA0RdjHovw/bXYI8zYHbRIN7lXLND61B8HUCzqPU6 BcNX/C+/2Ylqlew6eVb3NGEb9T9C3slnpYp/z53tCDLZrN3rnHRvYKhfMJXCvEmN 7EoNzvlPqaApqemkqkfbw38zH8emLxds8kLp5vtAWI9dE9hnhDmKPXYFJnczRb00 4LiW54kO71bWm7/GoLETK/4Ul2uBEdGtB7M= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:44 2025 by rpki-client