$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa File: 49bbbd0f-35ec-3df0-96be-ba897acece3b.roa (raw, json) Hash identifier: 5OLxeqYY0V22qq1Ooy6Uk0s4U2sIwlP44FJuYG0ckyg= Subject key identifier: B4:AC:C7:6D:A0:8E:CA:DD:75:94:06:D8:30:CE:6D:3C:0C:BE:C9:9B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE530666A882220BD37F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:53:06:66:a8:82:22:0b:d3:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c1ccc2b6-b2e2-4ac1-89b6-c4443e23fe6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:46:54:14:98:4e:c9:fe:0f:bd:3f:fa:7e: 05:ef:e2:be:fb:48:9b:a2:40:de:d8:17:5c:25:0c: 57:1e:1b:76:bf:29:05:32:76:98:e6:a6:3f:a8:3f: d1:ca:1d:1b:74:f4:cb:48:24:a7:10:c7:e2:14:96: ea:fe:61:31:c2:bb:a1:ef:98:e6:fc:7a:50:31:f9: ee:e8:a1:c9:b7:ec:52:05:1b:fd:f3:05:42:b3:1d: 8e:b9:6c:ea:b8:11:a8:31:d4:b1:76:b7:07:db:a8: 73:6d:db:d4:97:d1:12:47:b6:fa:09:7e:c3:b2:15: 45:a6:ed:2c:4a:1b:97:de:bd:0e:d4:ea:53:88:eb: 33:2d:91:2c:e2:de:aa:86:3d:76:dc:72:f0:56:2c: 0c:2a:c5:07:53:d0:42:6b:18:e5:04:ae:ee:34:7b: 1f:55:1b:3f:f8:a8:f3:85:f5:59:bc:84:d6:8e:df: 76:ed:36:6d:32:5c:5c:bc:22:8a:11:6d:98:4b:9f: 89:fd:e0:9a:05:21:82:1f:79:36:eb:2c:90:bf:5b: 89:6d:bc:91:e1:7b:8b:6c:6a:d4:7f:97:d9:c9:02: 7c:62:12:38:d1:0b:72:d2:85:02:f0:83:70:b2:c2: 08:75:b2:8d:19:1f:2d:4f:e8:fa:85:6d:2f:35:61: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AC:C7:6D:A0:8E:CA:DD:75:94:06:D8:30:CE:6D:3C:0C:BE:C9:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:10:f9:f2:5c:8b:da:2d:af:e6:68:14:e0:f1:dc:ce:fc:ee: 0f:87:ac:9f:d1:c6:e3:e3:82:c5:d8:4c:93:cb:fc:d2:04:0e: 94:85:d8:ac:c7:e1:22:19:4c:a9:c5:95:80:cd:04:68:5e:05: af:7a:c4:9a:38:e5:72:c5:a2:ab:fe:4d:f5:e1:c2:b1:71:d9: 9b:ac:6c:d9:e3:51:2e:84:4c:fc:1b:5d:51:3f:9d:1d:91:5d: 25:e7:c7:da:4d:ee:dd:5b:37:a2:a9:5f:c2:35:27:1c:2e:55: 1b:06:87:88:f2:4e:36:7e:b4:77:88:26:b4:ff:3a:a4:80:26: c8:63:e8:93:b6:86:36:b3:56:89:b2:8f:55:c1:38:f0:e8:e4: 15:51:bc:b6:f9:c2:10:ec:5e:26:81:72:f9:ac:58:b2:d5:87: b0:15:e1:62:a8:be:09:6a:5a:24:46:c3:a3:1a:6b:d4:1a:10: 2a:da:04:00:3f:f9:e9:79:23:1c:fb:01:12:46:77:cf:5b:0c: 64:d5:e9:f6:fc:ea:37:11:52:83:ec:6c:1a:75:5c:5c:e9:15: 1c:dc:77:ad:73:bb:a4:cc:42:4e:b6:2f:4f:fe:de:fa:1d:a1: bf:94:f2:d6:bb:fb:6c:1a:e6:17:86:c9:34:8e:b8:fd:8e:78: df:e8:85:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzlMGZqiCIgvTfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzFjY2MyYjYtYjJlMi00YWMxLTg5YjYtYzQ0NDNlMjNmZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnFGVBSYTsn+D70/+n4F7+K++0ibokDe2Bdc JQxXHht2vykFMnaY5qY/qD/Ryh0bdPTLSCSnEMfiFJbq/mExwruh75jm/HpQMfnu 6KHJt+xSBRv98wVCsx2OuWzquBGoMdSxdrcH26hzbdvUl9ESR7b6CX7DshVFpu0s ShuX3r0O1OpTiOszLZEs4t6qhj123HLwViwMKsUHU9BCaxjlBK7uNHsfVRs/+Kjz hfVZvITWjt927TZtMlxcvCKKEW2YS5+J/eCaBSGCH3k26yyQv1uJbbyR4XuLbGrU f5fZyQJ8YhI40Qty0oUC8INwssIIdbKNGR8tT+j6hW0vNWELzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSsx22gjsrddZQG2DDObTwMvsmbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDliYmJkMGYtMzVlYy0z ZGYwLTk2YmUtYmE4OTdhY2VjZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJMQ+fJci9otr+ZoFODx3M787g+HrJ/RxuPjgsXYTJPL/NIEDpSF 2KzH4SIZTKnFlYDNBGheBa96xJo45XLFoqv+TfXhwrFx2ZusbNnjUS6ETPwbXVE/ nR2RXSXnx9pN7t1bN6KpX8I1JxwuVRsGh4jyTjZ+tHeIJrT/OqSAJshj6JO2hjaz Vomyj1XBOPDo5BVRvLb5whDsXiaBcvmsWLLVh7AV4WKovglqWiRGw6Maa9QaECra BAA/+el5Ixz7ARJGd89bDGTV6fb86jcRUoPsbBp1XFzpFRzcd61zu6TMQk62L0/+ 3vodob+U8ta7+2wa5heGyTSOuP2OeN/ohRk= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:36 2025 by rpki-client