$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6727b461-7666-36ca-ac4c-880d3828fd1c.roa File: 6727b461-7666-36ca-ac4c-880d3828fd1c.roa (raw, json) Hash identifier: xBU00+FqYQ+x7f/mOwYPq1boVKib12PYqdkxQOTj4Cg= Subject key identifier: 91:B9:B4:C9:E1:F7:81:2E:C0:C5:25:9A:4C:56:BC:CC:08:1B:B5:19 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE4D2F42F513518E3172E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6727b461-7666-36ca-ac4c-880d3828fd1c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4d:2f:42:f5:13:51:8e:31:72:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=dd73f346-9200-48b2-8753-f35578cbd73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cb:53:61:58:05:dd:74:97:55:d6:a2:1c:30: e9:72:27:28:e5:ee:c0:67:1d:0b:1b:d1:79:18:b3: 58:6b:c6:ee:11:72:e1:f9:45:35:b0:24:f7:9d:f9: 61:7d:ff:fb:92:41:79:f7:e1:28:9d:ed:54:91:ec: dc:14:d3:94:c6:f9:16:33:95:8b:be:eb:17:99:f3: b5:e2:b0:cf:77:d8:e6:6c:ab:f2:b3:0a:1b:20:f1: af:db:39:ec:6f:12:90:de:d4:d9:73:82:84:be:58: cc:80:ff:60:11:c2:e0:6b:fc:49:43:06:40:6b:91: d1:c0:43:ba:6b:77:b6:83:9c:bf:cb:f7:14:e6:59: 3d:e3:0f:74:5a:4e:96:47:cc:60:05:12:8d:79:11: e3:81:16:52:11:6c:dd:cc:34:cc:77:63:88:c5:ff: 84:f6:93:5e:48:20:3c:a4:55:b3:ec:d6:63:65:1e: dc:34:39:ba:07:91:eb:19:75:28:dc:26:0a:83:fd: 51:69:26:aa:9b:ca:b8:4c:ae:3b:88:b9:7d:02:6b: da:1e:86:d5:b3:53:40:c2:bb:28:10:a5:9f:eb:0a: 6c:78:ed:53:e2:fa:93:59:05:37:9c:de:67:8e:48: 85:22:b2:6f:23:ea:98:fd:ac:42:20:b9:86:04:e3: 80:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B9:B4:C9:E1:F7:81:2E:C0:C5:25:9A:4C:56:BC:CC:08:1B:B5:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6727b461-7666-36ca-ac4c-880d3828fd1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ea::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:cd:53:d0:1b:ae:51:29:3c:f1:9f:06:2f:5a:4a:45:1c:c6: c1:61:99:8f:7c:a6:23:d1:1e:6b:ee:01:50:86:d2:82:13:4e: cd:27:34:71:f2:94:57:15:15:2d:f8:62:9d:f2:63:45:c2:ea: c6:ce:87:96:53:93:8f:49:56:98:08:d4:f3:30:85:b2:b3:63: 6d:5c:7f:ad:24:2c:b7:02:f8:f1:c2:30:ee:38:8b:ef:13:f8: 0e:b3:5c:d2:67:12:e8:dc:02:56:90:24:56:57:07:36:2c:64: c9:3f:10:f3:94:a3:d0:10:01:28:75:b6:e0:44:51:84:67:7a: 86:c7:29:f4:54:60:75:27:c9:04:e8:87:17:1b:4b:be:a8:ba: a7:d9:09:4a:91:89:22:06:c0:81:d7:2a:d7:2f:da:7b:64:d0: 61:df:c0:ad:cc:69:a4:d6:e6:a7:a5:c9:26:b7:1a:28:05:1e: d0:af:78:cb:10:d2:d4:c7:0c:03:e6:9e:ea:73:ee:c3:3f:e5: 1b:bc:5a:82:2d:d1:54:fc:57:d4:42:93:3c:1f:42:13:ec:52: 05:5b:fd:83:5f:84:25:a5:f5:bd:60:b1:45:10:6c:ad:fc:b1: 4e:22:37:9c:05:9b:4f:04:fa:0d:9d:15:ce:7f:dc:25:54:9d: 5f:7d:26:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzk0vQvUTUY4xcuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGQ3M2YzNDYtOTIwMC00OGIyLTg3NTMtZjM1NTc4Y2JkNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMtTYVgF3XSXVdaiHDDpcico5e7AZx0LG9F5 GLNYa8buEXLh+UU1sCT3nflhff/7kkF59+Eone1UkezcFNOUxvkWM5WLvusXmfO1 4rDPd9jmbKvyswobIPGv2znsbxKQ3tTZc4KEvljMgP9gEcLga/xJQwZAa5HRwEO6 a3e2g5y/y/cU5lk94w90Wk6WR8xgBRKNeRHjgRZSEWzdzDTMd2OIxf+E9pNeSCA8 pFWz7NZjZR7cNDm6B5HrGXUo3CYKg/1RaSaqm8q4TK47iLl9AmvaHobVs1NAwrso EKWf6wpseO1T4vqTWQU3nN5njkiFIrJvI+qY/axCILmGBOOAUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJG5tMnh94EuwMUlmkxWvMwIG7UZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjcyN2I0NjEtNzY2Ni0z NmNhLWFjNGMtODgwZDM4MjhmZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACfNU9AbrlEpPPGfBi9aSkUcxsFhmY98piPRHmvuAVCG0oITTs0n NHHylFcVFS34Yp3yY0XC6sbOh5ZTk49JVpgI1PMwhbKzY21cf60kLLcC+PHCMO44 i+8T+A6zXNJnEujcAlaQJFZXBzYsZMk/EPOUo9AQASh1tuBEUYRneobHKfRUYHUn yQTohxcbS76ouqfZCUqRiSIGwIHXKtcv2ntk0GHfwK3MaaTW5qelySa3GigFHtCv eMsQ0tTHDAPmnupz7sM/5Ru8WoIt0VT8V9RCkzwfQhPsUgVb/YNfhCWl9b1gsUUQ bK38sU4iN5wFm08E+g2dFc5/3CVUnV99Jq4= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:51 2025 by rpki-client