$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa File: 6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa (raw, json) Hash identifier: DEEk3sC7Dwv5SxThIv/MT/kCh5vbGbgWHtJMYQnR57g= Subject key identifier: B9:B4:C1:89:A1:B8:3B:63:D6:10:81:CF:A3:D3:D2:6B:A6:DE:17:3A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CC7F08F32F420D83555520 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:7f:08:f3:2f:42:0d:83:55:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e8a41c34-4093-4e6b-8b45-0935383d1b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:71:35:b4:30:3e:de:ef:f5:52:1f:60:ab: c1:a5:40:70:ee:e2:60:1b:05:71:8b:20:51:84:42: 49:9f:69:20:06:b0:ec:ae:b1:9a:88:27:df:47:c6: bb:fe:2c:3e:7e:1d:19:e5:0c:59:9d:24:2d:dc:db: 65:f5:d7:3b:c3:9e:a1:4e:b8:39:e4:ed:0e:f7:e8: 67:91:e6:c4:0c:b6:67:3f:98:f4:94:7b:ea:cd:bb: e6:36:1c:60:21:ff:8a:26:04:bf:ab:4a:27:85:a5: 20:b3:a3:b0:ca:32:79:2f:f7:0f:fd:0e:e0:97:33: 65:1a:72:92:a2:a0:8c:c0:f4:4a:21:e0:41:0c:a3: 04:27:02:9a:4e:e9:ec:de:c2:d3:c5:c7:68:4e:30: ee:80:c4:b0:90:a6:02:ba:10:b6:98:13:10:8a:67: 8f:37:5a:2a:78:48:87:2e:02:23:7e:0d:10:cd:c1: 5f:52:2b:b0:46:09:61:9b:5c:dc:70:f0:19:27:c0: a8:77:bb:6d:18:ea:47:63:d0:fd:2d:72:95:e4:d6: c1:d2:c0:15:fa:2e:49:35:cf:f3:73:85:cf:d4:f5: bc:d3:20:f1:e4:ca:94:57:6a:ba:ff:e7:b8:b7:0c: 1f:0c:56:94:e0:dc:f8:90:41:62:e4:c1:20:0c:53: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B4:C1:89:A1:B8:3B:63:D6:10:81:CF:A3:D3:D2:6B:A6:DE:17:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e7:56:eb:65:01:d5:15:85:de:f4:b9:5f:71:f3:f2:2a:5a: c5:2c:c2:c5:b2:7f:7f:b8:7b:82:d1:d4:a9:22:4c:23:e5:97: f6:dd:75:60:78:f8:3e:1a:73:26:40:b9:0c:d4:d5:b6:b4:91: 36:39:78:d8:4e:50:d6:bf:e4:8a:30:be:1a:64:23:c7:82:20: 4b:89:8b:ef:a2:f0:ea:c2:95:93:30:e7:4e:e9:47:ed:a2:dc: b0:dd:ee:95:22:8d:d3:45:6f:4f:b0:ff:0b:c1:4d:62:31:10: 2c:c0:48:b3:3f:b1:9d:05:54:5e:42:dd:63:fa:ff:a1:4b:2c: 5f:1f:ff:1e:e8:51:2f:e6:30:7e:a9:99:21:97:01:ac:3a:66: 58:da:2e:27:83:ec:68:50:4b:99:00:a5:8c:74:35:a2:84:18: 6d:93:f4:d1:aa:87:7b:55:c5:fb:34:db:ec:14:de:2c:e2:f3: 1f:2d:23:80:01:7f:32:34:8e:5f:f2:27:3c:49:7e:4c:5e:45: 04:2d:ff:c9:32:48:9f:86:0a:f2:d7:20:c0:1e:96:c2:d6:f3: 75:bd:60:94:ed:76:64:ff:cb:57:3a:f5:3e:ad:1c:9d:c0:b4: 5f:2a:59:88:25:23:2f:e6:6d:a2:ac:40:fa:d8:29:62:5d:b5: 36:de:9b:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzH8I8y9CDYNVVSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZThhNDFjMzQtNDA5My00ZTZiLThiNDUtMDkzNTM4M2QxYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GpxNbQwPt7v9VIfYKvBpUBw7uJgGwVxiyBR hEJJn2kgBrDsrrGaiCffR8a7/iw+fh0Z5QxZnSQt3Ntl9dc7w56hTrg55O0O9+hn kebEDLZnP5j0lHvqzbvmNhxgIf+KJgS/q0onhaUgs6OwyjJ5L/cP/Q7glzNlGnKS oqCMwPRKIeBBDKMEJwKaTuns3sLTxcdoTjDugMSwkKYCuhC2mBMQimePN1oqeEiH LgIjfg0QzcFfUiuwRglhm1zccPAZJ8Cod7ttGOpHY9D9LXKV5NbB0sAV+i5JNc/z c4XP1PW80yDx5MqUV2q6/+e4twwfDFaU4Nz4kEFi5MEgDFPeewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLm0wYmhuDtj1hCBz6PT0mum3hc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmU1ZTVmZjgtN2IxZi0z ZjA1LTg2MGEtZWUwM2U0MmMzYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHbnVutlAdUVhd70uV9x8/IqWsUswsWyf3+4e4LR1KkiTCPll/bd dWB4+D4acyZAuQzU1ba0kTY5eNhOUNa/5IowvhpkI8eCIEuJi++i8OrClZMw507p R+2i3LDd7pUijdNFb0+w/wvBTWIxECzASLM/sZ0FVF5C3WP6/6FLLF8f/x7oUS/m MH6pmSGXAaw6ZljaLieD7GhQS5kApYx0NaKEGG2T9NGqh3tVxfs02+wU3izi8x8t I4ABfzI0jl/yJzxJfkxeRQQt/8kySJ+GCvLXIMAelsLW83W9YJTtdmT/y1c69T6t HJ3AtF8qWYglIy/mbaKsQPrYKWJdtTbem28= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:37 2025 by rpki-client