$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e76a78e1-3171-30fd-9326-d571af93c71b.roa File: e76a78e1-3171-30fd-9326-d571af93c71b.roa (raw, json) Hash identifier: X5YIe2Trcs5TY7cw6uo9x8QNZ9dcYckLw+OnhcBqODo= Subject key identifier: 06:1F:3B:86:7E:E7:E1:8B:17:D8:5A:04:D5:30:30:E3:0C:6F:52:FA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B636749012194606744E8D1C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e76a78e1-3171-30fd-9326-d571af93c71b.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 2001:500:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:49:01:21:94:60:67:44:e8:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=dfbd3d62-6e71-4acf-96bb-9b043219e11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:83:98:d4:95:df:8d:f8:e6:a6:fc:89:c8: 2e:57:4b:49:39:37:3e:31:29:99:c9:7c:40:b3:61: dc:1f:be:30:bb:08:5f:d6:81:f6:b9:78:a6:a1:33: 9a:ef:be:a2:a1:0d:05:ef:ab:02:41:b1:85:35:6e: c1:d2:33:6c:bf:c1:cd:d3:a1:13:4d:49:29:b0:be: 3e:0d:ea:53:53:18:c6:83:3c:f1:ad:01:f2:11:d7: 21:b1:bc:9c:6c:97:72:da:bf:cd:19:b2:2b:bd:c0: 1d:70:04:34:49:bd:db:4f:e5:bd:8b:91:0c:b4:bd: 6f:ff:ca:6e:93:9d:ef:1d:d2:8e:e5:62:15:d1:5a: e9:dd:db:21:a5:eb:3d:f3:4c:84:1b:7c:f8:66:85: 42:91:23:bb:5a:f0:b0:4a:8f:bf:c1:15:e4:20:26: 46:a8:00:9e:3d:13:7b:51:17:2d:14:95:0a:99:98: c7:a3:4e:6e:bd:9f:aa:3c:9d:bb:64:ea:e2:68:92: 3d:a9:e2:f3:61:6c:df:8e:b3:56:45:d8:d3:9e:03: 8f:5a:2f:9a:a8:28:b6:72:79:a4:71:25:ed:90:1e: 74:0c:e6:85:b2:c7:52:18:af:3d:34:80:e3:2e:57: 17:73:a9:88:c4:61:c8:c1:d7:d9:15:b3:e1:aa:e1: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1F:3B:86:7E:E7:E1:8B:17:D8:5A:04:D5:30:30:E3:0C:6F:52:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e76a78e1-3171-30fd-9326-d571af93c71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f8:c5:5a:82:51:61:29:b6:c5:82:b3:40:6b:09:ae:a0:ec: 76:9d:7b:db:ac:ba:79:86:ff:1e:dd:1c:54:ca:9d:e1:57:ef: e2:8c:01:5b:94:e7:22:94:a3:68:41:20:6c:c6:bf:ee:95:5d: 15:fa:d5:66:c1:24:3d:28:68:47:61:70:4e:94:6b:a2:93:8e: 0b:5f:b8:87:19:8a:17:17:0e:62:f4:d6:48:a0:d5:d7:d8:45: 02:29:ae:cb:f0:81:d1:88:a6:b9:b6:ea:e1:58:7c:72:4a:db: dd:19:17:8b:25:75:2a:eb:1e:35:a3:68:99:15:9e:0f:31:51: 39:cd:a9:e0:97:f5:e6:68:71:22:f2:51:6b:fe:12:3c:9a:46: db:4c:9b:b2:d4:9c:c3:0f:89:59:6a:8c:99:67:fe:5a:9d:60: 69:f3:f2:0c:6a:e2:28:5c:0b:4c:d3:10:c3:63:dc:3c:53:12: c9:c7:55:9b:d6:69:77:26:9f:25:4f:7f:ef:6b:51:39:11:03: 58:bd:11:a0:bb:37:01:35:ca:72:97:da:33:96:ed:f0:92:ce: 9f:4a:84:00:da:84:49:ac:c9:92:0d:2a:01:e3:ec:4d:82:86: 0d:14:4d:2f:b3:80:39:e6:58:8b:63:f8:2e:57:61:07:a5:10: 09:22:07:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ0kBIZRgZ0To0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZGZiZDNkNjItNmU3MS00YWNmLTk2YmItOWIwNDMyMTllMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleyDmNSV34345qb8icguV0tJOTc+MSmZyXxA s2HcH74wuwhf1oH2uXimoTOa776ioQ0F76sCQbGFNW7B0jNsv8HN06ETTUkpsL4+ DepTUxjGgzzxrQHyEdchsbycbJdy2r/NGbIrvcAdcAQ0Sb3bT+W9i5EMtL1v/8pu k53vHdKO5WIV0Vrp3dshpes980yEG3z4ZoVCkSO7WvCwSo+/wRXkICZGqACePRN7 URctFJUKmZjHo05uvZ+qPJ27ZOriaJI9qeLzYWzfjrNWRdjTngOPWi+aqCi2cnmk cSXtkB50DOaFssdSGK89NIDjLlcXc6mIxGHIwdfZFbPhquF7hwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAYfO4Z+5+GLF9haBNUwMOMMb1L6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTc2YTc4ZTEtMzE3MS0z MGZkLTkzMjYtZDU3MWFmOTNjNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE74xVqCUWEptsWCs0BrCa6g7Hade9usunmG/x7dHFTKneFX7+KM AVuU5yKUo2hBIGzGv+6VXRX61WbBJD0oaEdhcE6Ua6KTjgtfuIcZihcXDmL01kig 1dfYRQIprsvwgdGIprm26uFYfHJK290ZF4sldSrrHjWjaJkVng8xUTnNqeCX9eZo cSLyUWv+EjyaRttMm7LUnMMPiVlqjJln/lqdYGnz8gxq4ihcC0zTEMNj3DxTEsnH VZvWaXcmnyVPf+9rUTkRA1i9EaC7NwE1ynKX2jOW7fCSzp9KhADahEmsyZINKgHj 7E2Chg0UTS+zgDnmWItj+C5XYQelEAkiB+0= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:34 2025 by rpki-client