$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa File: bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa (raw, json) Hash identifier: Meko9UymtH+/pi/2ix/zmS5zgrjyT+guY8d8gTF2imk= Subject key identifier: 23:59:71:D5:86:54:43:C0:AF:F3:13:7C:EE:DC:74:8D:8C:8F:89:9C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CCAEB776B1FEF06DE65B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:ae:b7:76:b1:fe:f0:6d:e6:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c9b5e7ba-f4b7-46a8-b7b5-d91ef74b5a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:22:f9:c9:f7:f0:35:f5:62:c3:b4:cb:bf:63: ac:ac:f7:8e:8d:af:43:20:54:20:c7:75:34:ec:92: f4:b7:73:23:8b:56:da:76:1f:1f:e1:8c:0c:15:70: 1d:ac:52:e3:d4:09:ab:83:e2:a9:1d:b0:05:16:2d: 6e:0a:2c:7b:e7:d7:ad:2b:51:9e:f0:c5:a7:bf:80: e1:26:a2:28:25:bd:6c:8e:8f:86:bd:8a:50:3b:0c: 11:50:6e:1f:76:27:3a:03:b0:2e:20:9a:14:a1:0f: 0f:93:ae:f2:52:ac:dc:27:bb:ea:d1:87:62:c5:bb: 51:e7:24:14:34:35:fb:84:0a:2c:91:00:c8:39:03: 94:d3:6e:35:18:11:84:46:84:72:ca:26:13:2f:ff: 2c:67:fd:66:9a:92:23:ed:f0:45:f8:c8:6c:35:13: 63:e3:51:a4:62:db:0f:99:0c:5c:b1:76:4d:f6:87: 29:86:5e:11:c2:8a:e5:6a:7d:0e:88:07:e4:86:00: b4:9a:87:f8:7e:e8:46:b2:4a:3d:50:9d:94:42:b2: de:d3:6a:de:37:d1:e6:c2:fe:0a:a5:b6:8f:66:39: 02:f7:52:f8:c7:08:59:ee:2b:a8:37:0b:45:24:b8: 66:f1:b7:d2:b7:c9:26:4e:84:a4:11:13:11:38:d4: bf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:71:D5:86:54:43:C0:AF:F3:13:7C:EE:DC:74:8D:8C:8F:89:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:54:2d:3c:a5:e2:cf:cd:e7:15:0f:f4:d4:56:f5:1d:28:da: 40:90:d1:b7:88:9f:9c:4b:43:f1:ab:47:f7:fd:a1:b4:63:bb: 3f:17:99:ab:e3:a4:79:35:35:4b:d5:14:ff:c4:47:28:57:93: 77:ee:bd:55:c1:1e:1d:87:9f:5e:b1:8e:3b:07:28:75:19:44: f8:42:1f:7a:fb:e1:04:79:89:cb:db:2b:c1:e2:19:c3:bc:ee: 42:33:a5:17:5e:7c:19:ac:5d:12:5d:a8:0a:da:e8:35:94:ba: 12:a4:9e:cd:84:88:1c:d8:66:e2:62:ba:b2:f6:91:4a:c1:d7: 93:c0:c1:42:91:60:00:91:7b:ff:04:53:a3:4c:99:f5:35:cd: 0e:37:47:79:51:44:1c:5d:1a:d4:af:24:62:d8:97:97:02:51: 8a:bd:6a:12:9b:65:cc:a5:10:95:e9:ee:d0:9f:f7:bf:52:dc: 16:f7:2b:34:12:19:91:26:3c:4d:da:d4:51:3d:13:38:15:98: de:19:c9:9c:16:28:5e:2f:58:04:87:9c:39:4f:06:cf:14:2f: 9a:60:3d:1b:c3:67:cf:17:84:98:4a:84:00:18:ef:b3:02:df: 28:8e:63:02:7e:66:76:cc:39:27:94:b0:02:5c:a7:c7:a4:80: 12:48:64:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzK63drH+8G3mW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzliNWU3YmEtZjRiNy00NmE4LWI3YjUtZDkxZWY3NGI1YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCL5yffwNfViw7TLv2OsrPeOja9DIFQgx3U0 7JL0t3Mji1badh8f4YwMFXAdrFLj1Amrg+KpHbAFFi1uCix759etK1Ge8MWnv4Dh JqIoJb1sjo+GvYpQOwwRUG4fdic6A7AuIJoUoQ8Pk67yUqzcJ7vq0YdixbtR5yQU NDX7hAoskQDIOQOU0241GBGERoRyyiYTL/8sZ/1mmpIj7fBF+MhsNRNj41GkYtsP mQxcsXZN9ocphl4Rworlan0OiAfkhgC0mof4fuhGsko9UJ2UQrLe02reN9Hmwv4K pbaPZjkC91L4xwhZ7iuoNwtFJLhm8bfSt8kmToSkERMRONS/EwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNZcdWGVEPAr/MTfO7cdI2Mj4mcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmM2ZTI5YTctNmEzYy0z N2VkLTg0NTktMGZkZGMxMzNhNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAdULTyl4s/N5xUP9NRW9R0o2kCQ0beIn5xLQ/GrR/f9obRjuz8X mavjpHk1NUvVFP/ERyhXk3fuvVXBHh2Hn16xjjsHKHUZRPhCH3r74QR5icvbK8Hi GcO87kIzpRdefBmsXRJdqAra6DWUuhKkns2EiBzYZuJiurL2kUrB15PAwUKRYACR e/8EU6NMmfU1zQ43R3lRRBxdGtSvJGLYl5cCUYq9ahKbZcylEJXp7tCf979S3Bb3 KzQSGZEmPE3a1FE9EzgVmN4ZyZwWKF4vWASHnDlPBs8UL5pgPRvDZ88XhJhKhAAY 77MC3yiOYwJ+ZnbMOSeUsAJcp8ekgBJIZI4= -----END CERTIFICATE-----Generated at Fri Oct 10 22:17:13 2025 by rpki-client