$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa File: a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa (raw, json) Hash identifier: im4c4Dlt2+xMur+H1bwMe7UyOxFOBZsNZW7hZE8c+4s= Subject key identifier: 0D:FC:CD:A3:0B:A8:D5:DF:C1:59:B0:B3:CE:9A:95:5E:D8:C3:8F:57 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CC9BDD265707E29D704100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:9b:dd:26:57:07:e2:9d:70:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=cbb6bab5-b6d7-4547-a2ff-bc18773086f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cd:5e:21:c8:a5:40:ec:1d:24:3d:c7:90:33: d6:5d:86:c7:4e:82:e3:31:7f:ac:9a:f0:b9:90:2f: c6:77:7d:e1:b6:d3:51:03:18:d0:77:d7:0d:0e:37: 9a:4c:64:34:33:4c:4a:fb:59:c6:11:f2:d6:50:28: 13:17:04:cf:90:5b:63:9d:bc:df:4f:f1:4c:40:dc: 6d:f6:ef:d9:76:49:a1:31:6e:4a:5b:0c:31:e3:c9: f4:60:79:7c:b2:38:94:76:0f:e5:15:2c:53:06:d9: ab:92:b3:2b:be:e5:97:22:80:ed:ad:02:78:83:1a: 31:f1:1d:7a:66:f0:cf:95:79:82:cc:2b:69:e5:c6: 85:70:48:cd:8d:2d:79:9a:45:a7:71:be:74:d3:f9: 59:2a:3d:3b:f4:55:21:36:50:9a:fa:ee:19:8a:76: 29:4e:4b:8d:37:39:50:17:c0:9a:d0:69:b9:12:a9: 31:76:a0:e2:32:d5:4c:0e:0d:aa:c1:82:d8:95:34: 4b:58:3d:9a:96:97:21:e6:dd:f1:b3:5d:1b:b7:f9: cf:e0:4d:96:7b:2a:35:c0:31:1e:e3:f6:08:58:9b: 58:92:e6:12:bf:a3:56:11:6e:93:b6:f5:87:25:fb: 24:af:5a:81:b2:6c:59:52:58:3c:94:34:85:30:d1: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FC:CD:A3:0B:A8:D5:DF:C1:59:B0:B3:CE:9A:95:5E:D8:C3:8F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f6:a9:80:e1:98:34:a1:60:79:f4:5b:b1:40:29:cc:b9:7b: cb:8c:98:ad:80:a6:fa:1f:d1:ff:62:ec:30:55:16:8a:f4:05: e8:7a:b5:55:88:37:03:b4:90:5c:ee:83:eb:51:b0:5b:1a:59: 1b:7d:b7:42:bf:75:38:0b:a9:8e:6b:0b:d5:d1:b8:47:9a:46: 73:c9:f5:79:42:4b:df:9c:bf:e6:ed:87:0d:30:71:96:6a:82: c9:f5:21:c1:d3:a4:98:db:95:6d:b7:62:1a:85:6c:24:39:43: d4:dd:34:05:8d:88:98:63:77:46:0a:ee:7a:ff:a0:32:91:5f: 7b:94:0a:c2:94:9c:b6:f9:75:e2:d4:99:0e:33:98:f6:a6:52: 60:6d:42:27:b6:c4:b4:1c:08:4e:7c:f7:b4:96:f3:f4:9a:a5: 80:bf:55:84:7e:b0:a7:42:ac:2e:1c:4d:17:3f:ac:42:ab:54: f8:04:93:d4:00:8f:ba:05:24:2b:80:ac:30:ed:ef:39:12:7b: 3b:0e:2e:3d:26:d3:37:f3:ab:16:20:02:f1:22:96:fb:4a:8b: 12:88:a6:70:ad:09:4d:13:f5:fd:fc:1d:2c:9b:1c:41:c7:b4: 65:4b:77:d5:77:ce:c8:df:ce:ee:e9:d3:53:27:9b:72:a8:dd: a9:47:d7:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzJvdJlcH4p1wQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2JiNmJhYjUtYjZkNy00NTQ3LWEyZmYtYmMxODc3MzA4NmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh81eIcilQOwdJD3HkDPWXYbHToLjMX+smvC5 kC/Gd33httNRAxjQd9cNDjeaTGQ0M0xK+1nGEfLWUCgTFwTPkFtjnbzfT/FMQNxt 9u/ZdkmhMW5KWwwx48n0YHl8sjiUdg/lFSxTBtmrkrMrvuWXIoDtrQJ4gxox8R16 ZvDPlXmCzCtp5caFcEjNjS15mkWncb500/lZKj079FUhNlCa+u4ZinYpTkuNNzlQ F8Ca0Gm5EqkxdqDiMtVMDg2qwYLYlTRLWD2alpch5t3xs10bt/nP4E2Weyo1wDEe 4/YIWJtYkuYSv6NWEW6TtvWHJfskr1qBsmxZUlg8lDSFMNHNOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA38zaMLqNXfwVmws86alV7Yw49XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTJhYzc0ZDgtYzVkNC0z Y2NmLWI3Y2UtMmE4NjgxM2FkMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI72qYDhmDShYHn0W7FAKcy5e8uMmK2Apvof0f9i7DBVFor0Beh6 tVWINwO0kFzug+tRsFsaWRt9t0K/dTgLqY5rC9XRuEeaRnPJ9XlCS9+cv+bthw0w cZZqgsn1IcHTpJjblW23YhqFbCQ5Q9TdNAWNiJhjd0YK7nr/oDKRX3uUCsKUnLb5 deLUmQ4zmPamUmBtQie2xLQcCE5897SW8/SapYC/VYR+sKdCrC4cTRc/rEKrVPgE k9QAj7oFJCuArDDt7zkSezsOLj0m0zfzqxYgAvEilvtKixKIpnCtCU0T9f38HSyb HEHHtGVLd9V3zsjfzu7p01Mnm3Ko3alH19A= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:03 2025 by rpki-client