$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a5f089f-0a19-3def-b03b-0d71364d19ea.roa File: 6a5f089f-0a19-3def-b03b-0d71364d19ea.roa (raw, json) Hash identifier: O+QMPWZnPfSGT97lAavtd8gKpqyYNwS2G+rCoCQesBk= Subject key identifier: 11:14:FF:CA:2B:F2:23:77:DB:D4:2B:D2:60:92:28:2F:7A:2E:87:1A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CC83F6F5C1235C8EE58BA0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a5f089f-0a19-3def-b03b-0d71364d19ea.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:83:f6:f5:c1:23:5c:8e:e5:8b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c61708a2-9f18-4059-9a8c-b44dd52c5385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:f6:b1:dc:f5:f5:4a:dd:57:5e:31:a8:77: 6e:4e:78:dc:46:ef:a9:17:1f:60:39:2c:db:41:c1: f4:1c:34:5c:dd:b2:02:d2:fe:f8:1e:26:2c:71:f8: 14:b5:db:d4:cf:c1:22:c8:4d:ed:a0:41:a1:98:3d: 62:e8:21:7a:07:84:ae:91:5c:2d:68:6e:73:e2:b7: 9a:97:45:c3:a3:11:7b:de:f7:8a:d8:a7:4a:10:7e: 34:20:b1:0a:be:8b:9e:66:df:a5:ef:44:c4:c6:53: bc:52:ff:c1:17:3a:1e:ea:91:14:82:7b:c1:a6:ec: 65:13:2d:94:db:ca:b2:d3:05:70:ca:96:ba:e6:0e: 51:cb:13:68:c8:b1:27:3c:07:c1:40:16:31:95:68: 24:f1:37:30:2d:bd:3f:db:d1:45:f2:83:3c:13:fb: c1:30:7e:c5:b2:fe:d8:9c:08:f2:bd:27:ef:0e:9c: ba:5b:74:1f:ca:39:79:ec:1e:ee:54:e9:d2:30:53: 42:a1:2e:2a:96:3e:47:7d:90:3a:cd:64:f5:37:44: f6:dd:af:3c:da:51:ae:08:3c:6f:fa:14:76:74:d0: f3:5e:69:8d:fa:9f:6c:b5:b1:3a:b6:0b:9a:4a:be: 4c:8e:8a:2c:11:dc:b1:7b:d7:d9:9e:b1:dd:09:53: e6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:14:FF:CA:2B:F2:23:77:DB:D4:2B:D2:60:92:28:2F:7A:2E:87:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a5f089f-0a19-3def-b03b-0d71364d19ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3e:57:d2:aa:b6:e1:d5:ca:19:8d:96:72:10:58:d5:9d:e2: 7a:86:c4:21:d2:a4:63:7c:b9:98:95:29:7e:63:e7:a0:5d:13: 46:02:30:80:76:5c:b4:61:9a:fe:ca:94:bb:62:d7:cc:95:11: b1:44:81:fb:7e:cc:9d:0b:f7:25:32:ee:31:bc:c5:66:50:b5: 83:cd:22:0b:73:4a:f4:0c:cd:d2:e9:42:1f:33:e4:cb:14:82: 68:2b:70:8c:64:04:8b:a9:ff:58:0d:c6:2a:76:0f:c0:8e:73: 47:e5:17:0d:2e:e1:1a:b5:24:a1:3b:c8:43:17:28:01:89:4c: 0b:ef:b2:5c:fc:9b:71:74:c3:ef:d4:7b:d9:2c:1b:84:22:fb: 35:70:03:a7:fa:72:0c:44:36:4b:df:19:39:c8:66:75:1c:af: b8:69:b3:60:fc:59:13:fb:6e:7d:a2:4e:e1:bf:38:14:ce:68: aa:61:e6:f3:bc:74:01:33:49:fd:59:1d:5c:80:fc:e4:8d:2f: 81:02:df:41:a7:6f:42:59:77:ca:f4:cc:44:20:2b:be:59:ff: e6:52:1f:f5:c9:2e:c6:c5:61:fb:af:6a:2f:32:81:04:2c:fb: e6:65:62:45:57:30:a9:11:67:6e:ec:c9:2e:a8:54:e7:1a:40: 80:fd:fb:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzIP29cEjXI7li6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzYxNzA4YTItOWYxOC00MDU5LTlhOGMtYjQ0ZGQ1MmM1Mzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/z2sdz19UrdV14xqHduTnjcRu+pFx9gOSzb QcH0HDRc3bIC0v74HiYscfgUtdvUz8EiyE3toEGhmD1i6CF6B4SukVwtaG5z4rea l0XDoxF73veK2KdKEH40ILEKvoueZt+l70TExlO8Uv/BFzoe6pEUgnvBpuxlEy2U 28qy0wVwypa65g5RyxNoyLEnPAfBQBYxlWgk8TcwLb0/29FF8oM8E/vBMH7Fsv7Y nAjyvSfvDpy6W3Qfyjl57B7uVOnSMFNCoS4qlj5HfZA6zWT1N0T23a882lGuCDxv +hR2dNDzXmmN+p9stbE6tguaSr5MjoosEdyxe9fZnrHdCVPmaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBEU/8or8iN329Qr0mCSKC96LocaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmE1ZjA4OWYtMGExOS0z ZGVmLWIwM2ItMGQ3MTM2NGQxOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4+V9KqtuHVyhmNlnIQWNWd4nqGxCHSpGN8uZiVKX5j56BdE0YC MIB2XLRhmv7KlLti18yVEbFEgft+zJ0L9yUy7jG8xWZQtYPNIgtzSvQMzdLpQh8z 5MsUgmgrcIxkBIup/1gNxip2D8COc0flFw0u4Rq1JKE7yEMXKAGJTAvvslz8m3F0 w+/Ue9ksG4Qi+zVwA6f6cgxENkvfGTnIZnUcr7hps2D8WRP7bn2iTuG/OBTOaKph 5vO8dAEzSf1ZHVyA/OSNL4EC30Gnb0JZd8r0zEQgK75Z/+ZSH/XJLsbFYfuvai8y gQQs++ZlYkVXMKkRZ27syS6oVOcaQID9+0o= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:15 2025 by rpki-client