$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa File: ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa (raw, json) Hash identifier: ir0bJRiw9hJwxsvn7X4RQji+/7OhK5Wb5ZJvwQmphAw= Subject key identifier: DD:2B:38:E7:3B:82:A6:89:1B:39:EA:C9:29:3B:34:40:E0:C1:65:74 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CC9501CC736899A6B09700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:95:01:cc:73:68:99:a6:b0:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=61c8f357-7681-4635-8a24-52c5dd976397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:1a:2b:bf:93:6a:f6:b6:4a:99:59:46:20: 1f:fc:2c:0c:1f:67:01:1e:6b:8e:55:f0:25:43:be: ec:85:92:98:9f:87:cb:b7:7d:6e:fb:b9:30:a0:d5: 8e:53:50:63:d1:46:cd:54:5d:f0:b8:15:28:1d:45: 11:42:ec:90:95:73:c3:89:e1:c1:f4:5c:51:ab:dc: 68:40:25:32:0b:7a:b0:e0:5e:4e:96:15:b7:38:4d: c9:15:48:5c:98:fe:f1:76:99:4d:fc:e8:61:70:37: 5f:b9:17:90:42:83:63:b7:03:60:e5:e8:af:03:ff: 08:a4:7e:ec:f8:98:61:8f:15:c4:89:4a:8a:98:9f: d0:08:47:ac:5a:bb:2c:34:2c:b9:47:76:dd:ae:b5: 57:d2:6b:dc:eb:2b:ad:05:f0:05:c3:c7:82:9a:5b: fb:4e:d4:c9:c9:6b:73:fb:08:5b:d3:b9:87:69:ec: 41:db:2f:85:15:4b:aa:44:1b:5d:9f:7e:13:47:b7: c6:91:e3:52:38:70:49:b4:a8:69:3d:1f:26:8a:98: 10:c5:e9:a7:fe:8e:39:24:52:cc:ad:21:74:35:4b: a6:1a:73:71:80:0b:6c:a0:ee:be:7c:21:c0:92:ab: 4d:cc:10:31:95:ad:a9:81:56:75:9f:72:95:da:9f: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2B:38:E7:3B:82:A6:89:1B:39:EA:C9:29:3B:34:40:E0:C1:65:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:60:4b:01:da:47:4c:65:df:4e:44:1c:88:a7:c9:e4:1f:cc: bf:cc:c7:a3:2c:44:1c:6b:04:94:37:c3:42:69:38:04:41:ff: 47:43:ca:33:1e:e3:3e:31:11:1e:c0:74:60:4e:3f:f2:5d:83: 8c:dc:5e:ad:86:86:18:48:c2:b7:03:af:e3:d6:ea:65:00:96: c1:00:fd:07:35:67:34:cb:0e:6b:59:54:63:6f:e3:bc:6f:81: 92:96:41:82:9e:3b:c7:4b:e5:0a:83:fe:d2:c4:4f:9d:c1:1f: b4:3c:f7:b6:5b:5d:8d:3b:9d:a5:c4:f0:4f:e0:e4:eb:8f:d0: 05:07:18:6f:70:01:48:e6:84:17:25:b6:b3:f5:9b:41:86:3b: 05:0d:d3:b0:22:71:87:35:dc:e3:13:cf:bb:93:f6:a8:eb:85: 81:04:41:02:db:7d:f9:6a:86:93:bc:e6:d6:1e:b9:64:b5:c0: 88:20:9f:a2:07:86:7f:f3:fb:f3:2d:4e:2f:f6:e9:7a:47:44: 4f:e4:05:ec:f4:61:91:7a:60:4a:2d:c5:b5:ff:eb:b8:fc:82: 67:12:dc:32:7e:fc:09:7d:2e:0d:0b:50:fa:61:99:62:75:93: a4:f6:86:b5:cf:c1:3e:ab:82:c8:cd:ff:3e:89:f1:e5:fc:58: 29:da:32:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzJUBzHNomaawlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjFjOGYzNTctNzY4MS00NjM1LThhMjQtNTJjNWRkOTc2Mzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSQaK7+Tava2SplZRiAf/CwMH2cBHmuOVfAl Q77shZKYn4fLt31u+7kwoNWOU1Bj0UbNVF3wuBUoHUURQuyQlXPDieHB9FxRq9xo QCUyC3qw4F5OlhW3OE3JFUhcmP7xdplN/OhhcDdfuReQQoNjtwNg5eivA/8IpH7s +JhhjxXEiUqKmJ/QCEesWrssNCy5R3bdrrVX0mvc6yutBfAFw8eCmlv7TtTJyWtz +whb07mHaexB2y+FFUuqRBtdn34TR7fGkeNSOHBJtKhpPR8mipgQxemn/o45JFLM rSF0NUumGnNxgAtsoO6+fCHAkqtNzBAxla2pgVZ1n3KV2p/GXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN0rOOc7gqaJGznqySk7NEDgwWV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2E1N2Y4YWUtMzc4Ny0z OTgyLWI0MjMtZWEzNWJiZjQyYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHhgSwHaR0xl305EHIinyeQfzL/Mx6MsRBxrBJQ3w0JpOARB/0dD yjMe4z4xER7AdGBOP/Jdg4zcXq2GhhhIwrcDr+PW6mUAlsEA/Qc1ZzTLDmtZVGNv 47xvgZKWQYKeO8dL5QqD/tLET53BH7Q897ZbXY07naXE8E/g5OuP0AUHGG9wAUjm hBcltrP1m0GGOwUN07AicYc13OMTz7uT9qjrhYEEQQLbfflqhpO85tYeuWS1wIgg n6IHhn/z+/MtTi/26XpHRE/kBez0YZF6YEotxbX/67j8gmcS3DJ+/Al9Lg0LUPph mWJ1k6T2hrXPwT6rgsjN/z6J8eX8WCnaMtk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:36 2025 by rpki-client