$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa File: 7143821d-b959-370f-bcec-f9e5be34ed99.roa (raw, json) Hash identifier: fuddvGg2MfZDDI95WpSakl3Zp75ZZwSAU71ONZIJUBw= Subject key identifier: 39:53:C3:8D:D5:82:B3:EB:8E:A5:6E:54:5B:65:4E:9F:22:60:48:46 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE5128C9379F6B3F9D3160 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:51:28:c9:37:9f:6b:3f:9d:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4dec92ac-6894-49b0-8291-5f729d4f3a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:84:1a:17:eb:a0:87:9f:f1:ce:e6:f9:82: bc:2a:d4:d3:0d:82:bd:6f:b8:59:0f:20:31:28:fc: e7:29:9f:38:93:b4:0f:3c:0c:65:e0:53:ce:24:6c: 09:b2:39:28:9c:20:60:21:46:dd:6f:82:46:30:ed: 31:e4:72:ad:e5:9b:22:fa:2e:1a:8a:6b:7b:15:78: 19:b5:1d:50:a4:cf:dc:54:d6:26:77:b6:f2:0c:98: cc:3f:06:81:ee:6a:7c:2c:ea:a6:77:fb:b9:4c:4a: ee:71:8a:c0:b2:47:b2:ec:5a:42:46:a7:24:e3:dc: 98:6a:0b:ab:52:d6:f5:4a:20:73:8e:93:15:a1:42: 20:df:97:84:de:3c:84:ea:bc:e5:ae:62:ff:ef:e1: 68:67:e2:45:72:3e:2d:5f:35:79:73:c8:1a:4d:46: 99:a6:e1:8b:11:83:a4:ba:b6:4c:5c:73:2a:d7:46: 05:00:63:09:6e:2a:fc:cb:22:77:f5:98:f5:de:39: 5d:5c:c9:a0:22:02:d6:e6:c6:22:28:43:12:9a:9e: f9:a5:b0:12:6d:f6:1b:60:ba:e1:46:19:dc:05:f1: 2b:a6:d5:2c:03:96:90:db:ab:3e:6b:4e:2d:66:30: 3e:2b:68:a9:0e:c9:dd:76:0a:f6:45:30:fa:e9:c9: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:53:C3:8D:D5:82:B3:EB:8E:A5:6E:54:5B:65:4E:9F:22:60:48:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:fc:59:39:82:91:a5:5d:86:2b:ea:f4:34:19:2b:a7:86:43: 52:b8:78:86:13:69:d9:fe:e9:c8:4a:f3:b7:c4:38:60:67:bb: 64:71:e1:98:47:27:9a:8b:73:18:d9:b2:8c:f5:bc:7c:46:2a: 2d:10:63:45:31:ef:69:79:ba:29:19:da:02:0c:79:02:06:15: b0:96:7c:ee:7b:fb:f8:03:ad:31:fd:06:21:96:3d:51:65:4c: df:c0:ef:25:ff:f0:2c:6f:6c:d6:56:0b:67:eb:41:00:e3:33: ca:6b:cb:08:2c:ea:ff:7a:38:7c:a3:6c:3b:a3:f2:d2:cb:bd: ab:96:28:f1:27:4e:45:37:ba:ef:0b:3b:d7:1a:47:b0:27:4e: d1:5d:b1:98:0e:7b:ce:2a:02:a7:94:80:05:6d:2f:81:3e:3d: a4:b4:ee:f7:7b:77:16:d5:7f:6a:62:ba:78:8c:f0:09:bf:3b: eb:e4:dc:65:c5:6c:29:61:a7:9e:b4:04:32:dc:27:25:a8:a0: 03:a6:a5:ef:19:92:5f:0a:5d:e9:10:4e:f0:7f:8e:49:a3:94: 88:e4:9d:34:26:e1:ad:85:3a:aa:52:1d:f0:98:e6:48:48:a0: b5:86:98:9e:8c:25:46:91:22:c3:32:bc:ce:17:db:46:fe:21: 80:5a:8b:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzlEoyTefaz+dMWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGRlYzkyYWMtNjg5NC00OWIwLTgyOTEtNWY3MjlkNGYzYTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruOEGhfroIef8c7m+YK8KtTTDYK9b7hZDyAx KPznKZ84k7QPPAxl4FPOJGwJsjkonCBgIUbdb4JGMO0x5HKt5Zsi+i4aimt7FXgZ tR1QpM/cVNYmd7byDJjMPwaB7mp8LOqmd/u5TErucYrAskey7FpCRqck49yYagur Utb1SiBzjpMVoUIg35eE3jyE6rzlrmL/7+FoZ+JFcj4tXzV5c8gaTUaZpuGLEYOk urZMXHMq10YFAGMJbir8yyJ39Zj13jldXMmgIgLW5sYiKEMSmp75pbASbfYbYLrh RhncBfErptUsA5aQ26s+a04tZjA+K2ipDsnddgr2RTD66cmQowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDlTw43VgrPrjqVuVFtlTp8iYEhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzE0MzgyMWQtYjk1OS0z NzBmLWJjZWMtZjllNWJlMzRlZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHb8WTmCkaVdhivq9DQZK6eGQ1K4eIYTadn+6chK87fEOGBnu2Rx 4ZhHJ5qLcxjZsoz1vHxGKi0QY0Ux72l5uikZ2gIMeQIGFbCWfO57+/gDrTH9BiGW PVFlTN/A7yX/8CxvbNZWC2frQQDjM8prywgs6v96OHyjbDuj8tLLvauWKPEnTkU3 uu8LO9caR7AnTtFdsZgOe84qAqeUgAVtL4E+PaS07vd7dxbVf2piuniM8Am/O+vk 3GXFbClhp560BDLcJyWooAOmpe8Zkl8KXekQTvB/jkmjlIjknTQm4a2FOqpSHfCY 5khIoLWGmJ6MJUaRIsMyvM4X20b+IYBai0s= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:30 2025 by rpki-client