$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f880f895-6d8d-3e52-9181-5ea151bed946.roa File: f880f895-6d8d-3e52-9181-5ea151bed946.roa (raw, json) Hash identifier: 0SyjKdBcCn0YVIo/2D518xoO5p2CFMZIboUcshezX/s= Subject key identifier: 30:57:C4:11:5E:57:99:17:78:47:9F:39:D9:AD:A8:44:12:8A:E2:1D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63675019B38FC172E61726C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f880f895-6d8d-3e52-9181-5ea151bed946.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 2001:500:e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:50:19:b3:8f:c1:72:e6:17:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=880f789d-ff8f-47e3-a6a3-48bcaff8aab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:07:50:44:5f:87:90:6c:51:45:b5:e6:ea: 46:7a:ac:03:16:94:3f:f3:a5:dc:28:3d:98:a7:16: 06:21:e9:9f:73:af:62:52:5f:5d:0b:05:9d:d8:3a: bc:56:3f:a8:72:12:12:6c:be:1e:c3:44:e3:32:7e: fe:24:ed:13:a2:f7:3a:8f:33:c2:1e:d9:02:2c:e1: da:60:f3:56:ba:a0:a3:4a:e3:51:f9:4c:86:d1:7f: a5:52:87:9a:34:a4:87:f0:a2:a2:4c:ec:ff:a2:5e: dd:30:75:a8:ec:d1:8b:73:62:6e:34:3d:9f:d0:4a: 22:74:ee:11:11:bd:3f:71:94:4d:c1:78:da:31:f0: ae:37:5a:52:2c:1e:f3:d5:4c:52:c4:3c:3c:25:4a: 0a:76:53:89:7f:30:44:89:6e:5b:0a:cc:03:99:13: 59:7a:0b:7f:b9:ac:9b:dc:d0:35:c8:3c:9e:3c:6b: 10:08:cc:9f:22:cc:b8:95:6d:5a:a8:3f:b2:9e:b7: 94:d6:a3:23:a6:65:6a:3d:0d:ee:30:07:b0:71:45: 7a:b9:0d:21:0a:cf:4b:df:5e:43:94:5f:3d:c4:23: 4e:e4:f0:a5:b0:f9:81:79:2a:da:d0:9c:96:bb:13: 19:7f:62:b8:bb:94:47:86:9c:46:a2:10:26:09:fe: de:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:57:C4:11:5E:57:99:17:78:47:9F:39:D9:AD:A8:44:12:8A:E2:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f880f895-6d8d-3e52-9181-5ea151bed946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b1:d5:4a:8e:87:af:0f:9c:e4:8f:7a:e0:1b:81:6f:df:9b: 43:d3:25:67:d5:00:63:3d:4a:0d:c3:82:6b:95:48:59:b0:eb: 37:83:3e:98:21:79:c3:fb:e3:e2:cd:73:24:6f:34:b1:a6:3b: 3e:d2:e2:0d:3a:bb:82:a9:38:56:24:71:2d:f6:85:6c:a3:64: 0a:23:31:ee:54:49:6f:e9:3d:15:d9:06:1c:87:bf:20:ba:2e: 57:f3:7e:7c:d0:49:58:3f:29:32:31:53:4b:64:ee:cc:0f:32: 8c:b8:21:fa:98:27:ab:d4:bd:8d:9f:19:9d:92:a5:1f:6c:de: d6:be:91:de:d0:8d:f0:2c:33:96:fb:90:59:9f:7c:38:c0:8d: e8:31:02:22:11:d6:07:6a:a6:43:1f:fc:19:55:98:7c:62:b4: 91:a2:4c:78:05:72:27:05:b9:1c:f0:15:da:a3:b4:b5:17:c9: 42:24:7a:86:3c:1e:cb:e6:75:11:e8:c2:b0:3e:f2:47:a0:d7: 4c:97:d4:fd:5b:00:17:45:5a:be:36:a5:26:eb:77:6c:d8:81: 47:8e:06:e9:d1:60:99:4c:27:cd:79:a2:26:d1:3d:9d:f5:8e: 3f:38:e6:43:66:d6:90:eb:14:a8:2a:c0:c8:3a:5e:6d:74:86: 38:eb:55:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ1AZs4/BcuYXJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ODgwZjc4OWQtZmY4Zi00N2UzLWE2YTMtNDhiY2FmZjhhYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMwHUERfh5BsUUW15upGeqwDFpQ/86XcKD2Y pxYGIemfc69iUl9dCwWd2Dq8Vj+ochISbL4ew0TjMn7+JO0Tovc6jzPCHtkCLOHa YPNWuqCjSuNR+UyG0X+lUoeaNKSH8KKiTOz/ol7dMHWo7NGLc2JuND2f0EoidO4R Eb0/cZRNwXjaMfCuN1pSLB7z1UxSxDw8JUoKdlOJfzBEiW5bCswDmRNZegt/uayb 3NA1yDyePGsQCMyfIsy4lW1aqD+ynreU1qMjpmVqPQ3uMAewcUV6uQ0hCs9L315D lF89xCNO5PClsPmBeSra0JyWuxMZf2K4u5RHhpxGohAmCf7ezwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDBXxBFeV5kXeEefOdmtqEQSiuIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjg4MGY4OTUtNmQ4ZC0z ZTUyLTkxODEtNWVhMTUxYmVkOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFGx1UqOh68PnOSPeuAbgW/fm0PTJWfVAGM9Sg3DgmuVSFmw6zeD PpghecP74+LNcyRvNLGmOz7S4g06u4KpOFYkcS32hWyjZAojMe5USW/pPRXZBhyH vyC6LlfzfnzQSVg/KTIxU0tk7swPMoy4IfqYJ6vUvY2fGZ2SpR9s3ta+kd7QjfAs M5b7kFmffDjAjegxAiIR1gdqpkMf/BlVmHxitJGiTHgFcicFuRzwFdqjtLUXyUIk eoY8HsvmdRHowrA+8keg10yX1P1bABdFWr42pSbrd2zYgUeOBunRYJlMJ815oibR PZ31jj845kNm1pDrFKgqwMg6Xm10hjjrVXo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:07:49 2025 by rpki-client