$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa File: 9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa (raw, json) Hash identifier: +z7O5uaUF4RkgnNiPXg7x+KAXd9e0HvKTGg5tNi7rfA= Subject key identifier: 4D:D8:F2:90:B0:7D:DA:D8:C5:AD:0B:CD:06:62:4C:34:E9:10:95:92 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CC8399B9625F67677E8120 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:83:99:b9:62:5f:67:67:7e:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ea7b4205-d4a8-46c0-9187-f1863efdc1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:c0:bb:fd:7a:9b:b9:24:36:ec:e9:2c:ba: 6a:4a:b9:63:ee:4d:1e:ff:75:3d:43:3b:b7:ee:04: 89:d1:32:23:67:54:01:b3:2c:25:07:0c:99:0d:35: 48:91:db:c8:0e:a0:30:28:74:92:62:68:a4:15:e8: fb:c5:3e:e8:ff:08:1d:bc:e2:b3:4e:d7:57:74:4e: 37:7e:2d:03:d2:a4:2e:ea:1c:70:0f:b3:ee:b2:0b: 60:d8:f9:6c:56:73:d4:dd:68:74:d5:ad:a4:0a:04: 3f:53:f3:fd:c1:d4:7e:9e:83:c6:ac:b7:5b:04:da: 75:f0:e9:fe:dc:d0:72:7c:23:16:c2:b9:8b:fd:07: 41:63:62:38:d1:50:c3:58:96:28:7a:21:76:07:ae: e6:a2:41:e2:95:d2:e8:18:71:18:3d:8e:58:ce:99: 7a:8a:f6:e3:9d:02:41:95:e5:41:b3:e2:fd:f8:2f: b8:a5:df:45:60:28:57:50:c4:45:91:7e:5a:0b:34: ec:ef:e3:d6:d7:51:e1:9a:4a:53:25:ff:02:16:d7: 34:05:89:23:eb:4e:19:54:f3:ab:4f:88:34:8c:16: d9:e6:30:c7:24:2e:5f:a2:97:d0:ed:f0:9d:1d:fb: 26:8d:3f:e2:72:2e:fe:cd:be:fa:0d:7a:01:91:a6: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D8:F2:90:B0:7D:DA:D8:C5:AD:0B:CD:06:62:4C:34:E9:10:95:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:de::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c2:f0:82:7c:45:77:2d:55:c6:f1:bf:bb:a6:60:48:4c:0a: 31:0b:d3:ca:4a:cf:b7:bd:96:9b:72:d2:55:00:5b:e7:ca:31: 60:5e:bb:08:fa:14:38:4c:48:c1:c1:97:f4:8f:fb:16:7c:a4: 97:51:0e:9d:53:14:1e:10:fe:9a:92:fd:fa:bd:69:81:37:88: 36:54:d5:b6:08:c3:91:ff:1b:88:99:23:14:2f:48:97:8b:6f: 9e:a1:06:95:00:9f:66:24:ad:f4:55:ed:d8:12:70:56:63:dd: 3f:34:ec:bf:c6:6e:4c:d2:29:d2:c6:fd:94:55:46:77:89:4f: 42:68:37:e7:e0:38:9c:c7:2b:cc:35:da:21:7e:c7:53:56:93: be:b5:c4:12:8f:f1:11:c7:20:f8:07:7e:74:8c:82:e7:ee:ec: 38:9d:8c:d9:d9:eb:a8:a0:fe:5e:4a:be:9d:b8:55:a7:30:97: ea:93:94:16:c1:9a:ad:bc:ec:94:78:87:8b:98:4e:ac:95:9e: cd:11:2d:bc:b7:27:77:52:f5:e4:b3:fd:9f:69:e9:1f:eb:ce: d8:b2:a6:b2:ad:0a:d1:de:9d:a6:85:57:94:b3:df:48:4d:fb: 71:10:e7:8e:6f:1d:a9:f3:9c:45:c2:6d:76:ee:5f:64:ce:fe: 35:ac:c9:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzIOZuWJfZ2d+gSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWE3YjQyMDUtZDRhOC00NmMwLTkxODctZjE4NjNlZmRjMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocTAu/16m7kkNuzpLLpqSrlj7k0e/3U9Qzu3 7gSJ0TIjZ1QBsywlBwyZDTVIkdvIDqAwKHSSYmikFej7xT7o/wgdvOKzTtdXdE43 fi0D0qQu6hxwD7Pusgtg2PlsVnPU3Wh01a2kCgQ/U/P9wdR+noPGrLdbBNp18On+ 3NByfCMWwrmL/QdBY2I40VDDWJYoeiF2B67mokHildLoGHEYPY5Yzpl6ivbjnQJB leVBs+L9+C+4pd9FYChXUMRFkX5aCzTs7+PW11HhmkpTJf8CFtc0BYkj604ZVPOr T4g0jBbZ5jDHJC5fopfQ7fCdHfsmjT/ici7+zb76DXoBkaZmBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE3Y8pCwfdrYxa0LzQZiTDTpEJWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWRmMTlkZWUtMDE1MC0z M2M1LWI3ZjAtY2NiNGE2Y2I4ZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI/C8IJ8RXctVcbxv7umYEhMCjEL08pKz7e9lpty0lUAW+fKMWBe uwj6FDhMSMHBl/SP+xZ8pJdRDp1TFB4Q/pqS/fq9aYE3iDZU1bYIw5H/G4iZIxQv SJeLb56hBpUAn2YkrfRV7dgScFZj3T807L/GbkzSKdLG/ZRVRneJT0JoN+fgOJzH K8w12iF+x1NWk761xBKP8RHHIPgHfnSMgufu7DidjNnZ66ig/l5Kvp24Vacwl+qT lBbBmq287JR4h4uYTqyVns0RLby3J3dS9eSz/Z9p6R/rztiyprKtCtHenaaFV5Sz 30hN+3EQ545vHanznEXCbXbuX2TO/jWsySI= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:19 2025 by rpki-client