$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a3d25f6e-e6bd-31bb-981f-4b471302626b.roa File: a3d25f6e-e6bd-31bb-981f-4b471302626b.roa (raw, json) Hash identifier: cRC/9SqBzh56aSkaNIHdMAjMAxZkSaqRafZWLMsz1fY= Subject key identifier: 09:CA:59:55:B1:86:0C:99:F4:CF:4E:A5:3E:B1:90:DA:6D:52:A9:06 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CC8F9EAD4F882F52B24E30 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a3d25f6e-e6bd-31bb-981f-4b471302626b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:8f:9e:ad:4f:88:2f:52:b2:4e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=76cf856f-7e65-4b80-b58e-8ff0d1f9b417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:35:be:2b:2f:2a:f2:bc:94:fc:a5:3f:47: 9e:c7:04:be:b9:53:71:40:b4:d5:56:dd:40:13:8b: be:32:2e:dd:66:bc:9b:5f:cf:79:12:b4:a7:fb:49: 94:27:fb:73:25:1a:f8:54:ba:b2:1f:2a:94:bd:9f: a6:a3:a7:ee:7f:06:af:1d:38:fe:30:c9:9e:a5:12: 09:8c:9e:fc:63:36:20:c6:11:96:08:0b:d3:08:1a: 15:8f:fb:61:a7:47:f9:ee:72:d0:25:d4:bf:9f:c1: fd:65:00:93:b6:72:e5:88:5d:3d:de:6f:4e:45:4d: a4:83:19:8a:2a:a9:e6:3e:11:6a:b7:f9:4b:bb:d0: 8b:97:f7:91:2f:68:5a:91:7e:75:48:e9:fe:ae:95: 41:d8:82:e9:d8:c7:aa:33:f9:55:30:d3:d1:c9:da: da:84:c4:d9:a9:ec:64:7f:ca:1b:3a:fe:78:1a:ef: 17:b2:d4:90:7f:27:21:de:da:0d:d0:7d:18:7c:02: ce:3d:49:43:d3:f1:7a:f2:1a:fb:59:84:60:11:83: eb:b0:11:b8:68:c7:2f:f0:2a:d2:41:9e:e5:25:6e: d1:70:7f:e2:b0:10:41:40:86:69:54:69:12:c7:a7: 76:1c:6d:16:8c:60:27:2a:f2:16:10:1a:6d:da:5b: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CA:59:55:B1:86:0C:99:F4:CF:4E:A5:3E:B1:90:DA:6D:52:A9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a3d25f6e-e6bd-31bb-981f-4b471302626b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ca:42:15:4c:75:80:25:c7:cd:42:f4:aa:92:78:f5:50:d8: 01:05:de:81:da:72:48:35:6a:4f:81:9d:33:56:ce:fc:36:94: 82:39:07:76:1c:2e:0a:0e:6c:2f:42:cc:7a:04:87:51:a0:b7: 01:2e:3e:01:8e:f6:1d:c7:e6:4a:14:c9:0b:67:20:0e:70:bf: a6:fe:cb:d8:87:6d:33:f3:b2:f4:58:80:34:ed:d9:79:de:b0: 27:25:81:c3:66:d2:7d:51:45:00:15:24:d5:85:ad:87:2f:3b: 3b:2b:6f:85:f7:d7:4c:a8:5f:a0:b6:d1:07:37:d0:22:fb:6c: b0:b0:fc:26:58:9f:22:4c:71:1a:b3:c5:2d:33:6c:29:09:6d: d3:31:5b:57:47:b1:fb:8e:4d:d3:ce:43:10:54:b6:7b:7f:55: 01:77:8f:c4:bb:ca:52:4c:8a:16:57:8e:b7:4e:ad:79:c8:90: 5a:86:5b:c1:d2:0e:06:3c:11:b7:ea:c4:16:69:6e:7b:49:8e: 71:be:4a:35:40:6c:22:33:4b:b8:26:f9:8a:48:4c:9f:95:75: 87:51:6d:3b:c3:74:27:51:69:6b:58:3f:ad:06:42:88:72:69: 41:bf:d2:e3:5e:9c:03:81:c9:7b:ad:f0:4a:c1:b0:c6:7a:7f: e7:16:e3:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzI+erU+IL1KyTjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzZjZjg1NmYtN2U2NS00YjgwLWI1OGUtOGZmMGQxZjliNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR41visvKvK8lPylP0eexwS+uVNxQLTVVt1A E4u+Mi7dZrybX895ErSn+0mUJ/tzJRr4VLqyHyqUvZ+mo6fufwavHTj+MMmepRIJ jJ78YzYgxhGWCAvTCBoVj/thp0f57nLQJdS/n8H9ZQCTtnLliF093m9ORU2kgxmK KqnmPhFqt/lLu9CLl/eRL2hakX51SOn+rpVB2ILp2MeqM/lVMNPRydrahMTZqexk f8obOv54Gu8XstSQfych3toN0H0YfALOPUlD0/F68hr7WYRgEYPrsBG4aMcv8CrS QZ7lJW7RcH/isBBBQIZpVGkSx6d2HG0WjGAnKvIWEBpt2lv1AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAnKWVWxhgyZ9M9OpT6xkNptUqkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTNkMjVmNmUtZTZiZC0z MWJiLTk4MWYtNGI0NzEzMDI2MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADnKQhVMdYAlx81C9KqSePVQ2AEF3oHackg1ak+BnTNWzvw2lII5 B3YcLgoObC9CzHoEh1GgtwEuPgGO9h3H5koUyQtnIA5wv6b+y9iHbTPzsvRYgDTt 2XnesCclgcNm0n1RRQAVJNWFrYcvOzsrb4X310yoX6C20Qc30CL7bLCw/CZYnyJM cRqzxS0zbCkJbdMxW1dHsfuOTdPOQxBUtnt/VQF3j8S7ylJMihZXjrdOrXnIkFqG W8HSDgY8EbfqxBZpbntJjnG+SjVAbCIzS7gm+YpITJ+VdYdRbTvDdCdRaWtYP60G QohyaUG/0uNenAOByXut8ErBsMZ6f+cW40w= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:45 2025 by rpki-client