$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8f8b674-1337-3905-9e06-024d28c6206a.roa File: a8f8b674-1337-3905-9e06-024d28c6206a.roa (raw, json) Hash identifier: s+Ccq7YqM3gpXtkakNMZL0XIGcZJRzMlIKZW6D3+M7Y= Subject key identifier: 28:04:04:4F:81:0D:8E:28:AE:14:91:16:8F:C0:64:9D:17:BF:F5:5A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CC89C935A7558F3E142D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8f8b674-1337-3905-9e06-024d28c6206a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:89:c9:35:a7:55:8f:3e:14:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8467b357-682b-4687-8779-cc2454bf20c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:c3:2d:d6:d8:e0:b0:a1:1f:78:a3:17:5e: 09:e5:d8:c0:1b:d9:d3:c0:cb:3b:83:ff:be:c0:0a: 6b:d9:6f:2a:39:94:3b:89:7b:a6:bf:2e:7d:95:d6: 1a:9e:e6:1e:39:bf:c0:66:a9:55:e3:b0:51:91:1d: b4:85:a9:57:51:87:69:c9:fc:0c:bd:ab:e1:b5:f5: de:c7:14:59:bb:c2:f2:c5:7d:80:5e:6a:94:13:c0: c8:8f:17:6b:78:d0:be:cb:39:be:e9:ec:c6:61:3a: 62:3c:2b:7d:31:38:c5:32:da:76:99:99:81:2e:4c: 43:f8:41:47:1c:c8:f1:58:18:bd:c3:35:02:8a:de: 48:3c:45:47:c7:70:20:d6:44:07:63:11:f3:a8:c2: bb:3e:73:5c:d1:0f:32:f6:d5:52:1d:7b:62:9c:10: b7:29:87:e4:a6:b9:a0:4f:5c:12:9e:22:9c:6b:13: 66:73:e4:d1:e3:8c:29:b3:23:be:3d:b3:92:96:c3: dc:3f:e5:8e:2c:4b:2b:d1:b9:94:fa:ac:3b:f3:de: 95:75:bd:9d:31:02:f0:93:bd:32:c2:c7:ea:dd:90: 20:85:08:2f:2d:38:d7:6f:0b:dd:9d:38:c4:37:77: 3e:2c:d3:4a:7f:74:55:0a:8a:6d:c8:2e:83:1a:f0: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:04:04:4F:81:0D:8E:28:AE:14:91:16:8F:C0:64:9D:17:BF:F5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8f8b674-1337-3905-9e06-024d28c6206a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:28:a9:d2:16:85:6b:bd:f8:4d:86:85:c2:f7:a5:cc:35:66: 42:31:61:77:d4:d0:46:f5:4c:51:3c:83:f3:13:c0:b8:90:42: 28:65:68:9a:27:36:80:e6:bc:ff:16:3b:94:d3:0a:dc:4a:bf: 3b:74:60:43:e9:24:b0:47:09:63:a4:20:b3:da:c8:f7:87:6f: b4:62:a6:05:a4:0b:37:84:98:28:82:be:a1:72:2c:4e:13:3c: bf:f4:32:d6:b0:f3:52:2e:74:77:07:0c:b4:e7:5b:68:fb:39: 4c:2c:24:cd:b3:37:8e:e9:91:58:94:ab:ea:08:9c:3b:51:85: db:86:38:32:1f:0a:ac:bd:51:dd:3d:0e:f7:69:2e:70:25:56: 8d:66:c7:20:a2:44:59:ee:04:d5:fc:b7:59:55:80:9a:b6:f5: c2:57:4f:48:71:e9:c7:32:a7:2a:94:50:14:4c:d8:6b:37:b1: 57:18:25:b6:c6:94:3a:c4:42:aa:a7:88:95:4a:56:0f:c9:54: 23:bd:93:ef:ac:5d:56:d5:5d:52:83:23:f7:54:e5:74:0e:36: 34:ff:38:6b:f1:ba:67:52:4d:ad:ab:35:15:92:c7:0d:80:18: db:f4:75:d2:b4:2f:8f:22:ec:95:aa:e7:ab:0d:62:0e:ad:34: 00:a3:b3:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzInJNadVjz4ULQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODQ2N2IzNTctNjgyYi00Njg3LTg3NzktY2MyNDU0YmYyMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy7DLdbY4LChH3ijF14J5djAG9nTwMs7g/++ wApr2W8qOZQ7iXumvy59ldYanuYeOb/AZqlV47BRkR20halXUYdpyfwMvavhtfXe xxRZu8LyxX2AXmqUE8DIjxdreNC+yzm+6ezGYTpiPCt9MTjFMtp2mZmBLkxD+EFH HMjxWBi9wzUCit5IPEVHx3Ag1kQHYxHzqMK7PnNc0Q8y9tVSHXtinBC3KYfkprmg T1wSniKcaxNmc+TR44wpsyO+PbOSlsPcP+WOLEsr0bmU+qw7896Vdb2dMQLwk70y wsfq3ZAghQgvLTjXbwvdnTjEN3c+LNNKf3RVCoptyC6DGvDgTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgEBE+BDY4orhSRFo/AZJ0Xv/VaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYThmOGI2NzQtMTMzNy0z OTA1LTllMDYtMDI0ZDI4YzYyMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGkoqdIWhWu9+E2GhcL3pcw1ZkIxYXfU0Eb1TFE8g/MTwLiQQihl aJonNoDmvP8WO5TTCtxKvzt0YEPpJLBHCWOkILPayPeHb7RipgWkCzeEmCiCvqFy LE4TPL/0Mtaw81IudHcHDLTnW2j7OUwsJM2zN47pkViUq+oInDtRhduGODIfCqy9 Ud09DvdpLnAlVo1mxyCiRFnuBNX8t1lVgJq29cJXT0hx6ccypyqUUBRM2Gs3sVcY JbbGlDrEQqqniJVKVg/JVCO9k++sXVbVXVKDI/dU5XQONjT/OGvxumdSTa2rNRWS xw2AGNv0ddK0L48i7JWq56sNYg6tNACjs30= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:38 2025 by rpki-client