$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa File: 7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa (raw, json) Hash identifier: qMFJDoVBK3h7IlNDW73zDtSOmbmuCAj/A5x5fZLWJUs= Subject key identifier: 43:86:CC:0F:3F:40:B7:7E:92:50:27:65:4A:C2:A2:E5:87:5D:83:24 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE4430F2662FAB22EBFC6C Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:cf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:44:30:f2:66:2f:ab:22:eb:fc:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bac3a3af-e376-4ba2-853e-2df86d8cc051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:73:26:7a:ed:63:a8:f0:fc:19:af:ac:f0: 49:6d:d4:ac:c6:7a:7d:be:a3:29:9e:87:30:af:53: 47:20:b3:b7:37:8a:ea:a3:5a:7b:a6:4d:2b:65:73: e2:dc:91:b7:a6:9c:b6:41:5a:c1:7e:5f:2e:35:69: 64:34:f9:c3:65:6d:87:72:1c:13:38:45:43:ab:df: 0d:c4:00:58:e8:fc:e1:98:a6:a0:e9:c5:2a:0a:29: e6:7f:4d:58:90:85:fb:a0:dd:aa:02:cc:e7:db:a1: bf:e5:ef:9a:67:39:f2:4f:fc:1f:58:5e:bb:15:4d: 31:f6:cd:61:60:5c:19:58:e4:25:c8:9c:12:6a:cb: 57:b4:60:4d:22:8b:74:d7:ca:35:86:ae:78:5b:0b: 75:f2:fc:02:f3:2f:1e:1e:1d:ea:0f:cc:48:40:90: 76:a9:86:95:ac:97:7d:c1:95:ee:11:0a:ab:4b:b5: d7:1f:3b:03:89:40:c6:30:84:9e:0a:5d:21:b5:1e: c7:f1:da:74:dd:08:c3:61:85:e0:f8:3b:a8:f7:4b: a8:28:a2:8b:1e:75:63:1c:76:3d:bc:17:43:f8:15: 7a:e7:99:83:86:70:f0:6e:ab:68:17:e0:43:91:00: 79:81:cb:ad:3d:3d:81:69:56:6d:94:f1:0a:24:fd: 15:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:86:CC:0F:3F:40:B7:7E:92:50:27:65:4A:C2:A2:E5:87:5D:83:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:41:01:89:1b:34:ba:de:9b:9e:65:5c:cc:10:73:cc:97:32: ac:ae:b1:d3:da:f2:8d:c6:35:2a:f9:6f:42:f0:78:48:6c:a0: 2c:e7:8b:94:c8:14:ce:f2:25:18:c7:0f:19:f8:af:5f:75:93: ae:bc:ed:a8:b7:46:fd:ed:d4:65:47:6e:01:56:5a:04:b4:ce: b1:70:69:22:f2:d9:00:86:a9:4c:62:1d:72:d8:cb:6c:d8:79: 35:f3:19:81:39:ec:6a:59:54:c3:4c:b6:2e:69:0e:56:44:dc: d6:6c:f8:18:10:fb:5b:43:f5:98:fb:6b:00:c7:1a:82:b1:9f: 44:6f:24:3b:bc:be:11:dc:14:9b:9c:ef:d2:52:75:a3:05:df: 24:2f:c6:5c:78:87:07:5d:33:b1:5f:3e:32:02:78:62:80:16: 29:04:07:45:e9:5d:12:f3:a0:80:e8:c3:11:d5:63:13:5b:ea: 57:6f:7b:8a:15:19:29:74:21:5f:5d:46:49:fc:c1:4d:d3:89: 59:12:34:df:2f:27:55:19:94:1b:74:87:f4:73:e1:e9:ea:c9: 00:91:e2:4c:d8:23:9a:af:2e:b2:c0:7b:63:d2:eb:29:44:5c: 15:54:9e:29:44:06:7b:ef:5a:be:1c:07:8b:6a:2a:5a:e3:2c: c7:51:3b:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzkQw8mYvqyLr/GwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmFjM2EzYWYtZTM3Ni00YmEyLTg1M2UtMmRmODZkOGNjMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnatzJnrtY6jw/BmvrPBJbdSsxnp9vqMpnocw r1NHILO3N4rqo1p7pk0rZXPi3JG3ppy2QVrBfl8uNWlkNPnDZW2HchwTOEVDq98N xABY6PzhmKag6cUqCinmf01YkIX7oN2qAszn26G/5e+aZznyT/wfWF67FU0x9s1h YFwZWOQlyJwSastXtGBNIot018o1hq54Wwt18vwC8y8eHh3qD8xIQJB2qYaVrJd9 wZXuEQqrS7XXHzsDiUDGMISeCl0htR7H8dp03QjDYYXg+Duo90uoKKKLHnVjHHY9 vBdD+BV655mDhnDwbqtoF+BDkQB5gcutPT2BaVZtlPEKJP0VAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEOGzA8/QLd+klAnZUrCouWHXYMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzQzOWQxYTEtOTQxYi0z ZTBmLWI0YmYtZTMyNjdkYjIwNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJlBAYkbNLrem55lXMwQc8yXMqyusdPa8o3GNSr5b0LweEhsoCzn i5TIFM7yJRjHDxn4r191k6687ai3Rv3t1GVHbgFWWgS0zrFwaSLy2QCGqUxiHXLY y2zYeTXzGYE57GpZVMNMti5pDlZE3NZs+BgQ+1tD9Zj7awDHGoKxn0RvJDu8vhHc FJuc79JSdaMF3yQvxlx4hwddM7FfPjICeGKAFikEB0XpXRLzoIDowxHVYxNb6ldv e4oVGSl0IV9dRkn8wU3TiVkSNN8vJ1UZlBt0h/Rz4enqyQCR4kzYI5qvLrLAe2PS 6ylEXBVUnilEBnvvWr4cB4tqKlrjLMdROy8= -----END CERTIFICATE-----Generated at Sat Oct 11 00:00:27 2025 by rpki-client