$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa File: cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa (raw, json) Hash identifier: Ql0ZQbss2p7WT9kyWomgIsaFggAQAlSC7/yrkLoM8PE= Subject key identifier: 47:C3:FA:F0:D9:C3:B5:2F:AA:F0:86:6B:CF:10:08:C5:47:DD:3F:FF Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584B95A789FFA164FDD26DB67880 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33071 IP address blocks: 2001:500:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:89:ff:a1:64:fd:d2:6d:b6:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f64c5ee1-6eee-420e-ba60-197aa96aa7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:08:60:71:c9:c3:f7:e8:30:ef:e1:9e:b1:19: e4:3d:8a:0e:62:6a:b5:d6:c8:79:23:34:84:61:e1: c9:87:e1:1a:1e:97:54:1e:d8:a1:9b:92:0a:a3:0f: 40:eb:2c:73:ca:5a:8c:40:42:74:48:f5:2b:14:01: ee:94:99:c3:6f:c9:e3:b2:1f:13:b2:24:d8:50:67: f7:1a:56:b4:8a:92:7c:6f:d9:66:c7:25:58:f1:5d: c9:08:d6:7a:b2:f3:1d:0e:42:66:eb:29:5b:32:42: 17:9b:e5:01:e7:7d:f7:f2:4e:a1:1a:50:b1:90:2b: c6:7c:32:9b:b9:1a:a1:b5:9a:61:e3:d4:18:7f:1a: cc:02:40:67:22:38:01:07:2b:75:c0:b5:1f:c9:e9: 5e:84:3a:47:a7:27:e1:44:f5:59:51:85:53:38:80: ff:ee:85:99:53:28:49:13:66:cd:fc:b1:07:5b:64: 3e:62:65:d1:1c:04:32:f2:61:a2:ce:3c:8e:b1:c9: da:ec:d4:8c:df:f5:34:13:31:60:82:26:eb:3c:4e: 56:1e:a2:71:2b:cf:ba:b4:cd:04:fe:4e:85:dc:a2: c8:cf:d2:1b:42:b4:bb:9a:9f:2a:c4:18:7a:02:dd: bc:56:62:21:c6:16:8c:e5:fd:fd:bb:35:c7:b3:af: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C3:FA:F0:D9:C3:B5:2F:AA:F0:86:6B:CF:10:08:C5:47:DD:3F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:bd:ac:25:92:2c:86:77:bc:4c:f8:39:47:ae:b8:50:45:a7: 05:f0:fe:00:8b:e9:7c:9f:fd:e5:f6:45:04:c6:5c:c1:9f:3d: 62:85:9c:56:fa:48:32:62:66:4c:e3:18:13:dc:74:24:99:83: ba:c7:b7:49:9a:6d:a9:97:b0:f4:21:66:99:56:f3:50:32:ef: 93:3a:00:f1:da:aa:52:e2:66:7d:bb:42:b2:93:ca:38:4f:c9: 08:67:c6:a0:65:61:08:74:04:d2:e6:bb:0b:a0:8f:1b:4f:5c: 81:0e:ed:71:c8:ad:b9:a4:ef:6a:0c:8b:d8:5b:b8:59:71:17: 40:c3:08:e0:54:2a:60:2f:84:9f:e1:bc:b3:2b:18:59:1c:fb: 65:49:07:e0:bf:0d:b1:03:9f:33:fa:00:9b:03:cf:2f:f1:43: 23:c8:3d:15:82:db:67:73:c5:dc:09:78:9b:e5:5b:76:b6:3a: 02:de:87:89:89:c8:59:88:0f:6d:28:7f:ba:75:dc:8b:4a:f7: 98:a0:ee:da:35:15:b3:82:ff:5e:8b:f5:9a:05:0c:89:50:29: 03:34:44:65:cf:81:f2:83:8c:33:f2:27:f7:f3:30:93:6a:58: 36:93:40:4f:d0:c1:19:ba:bf:12:20:9d:9e:b5:b0:8b:9a:42: f4:19:41:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuVp4n/oWT90m22eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjY0YzVlZTEtNmVlZS00MjBlLWJhNjAtMTk3YWE5NmFhN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ghgccnD9+gw7+GesRnkPYoOYmq11sh5IzSE YeHJh+EaHpdUHtihm5IKow9A6yxzylqMQEJ0SPUrFAHulJnDb8njsh8TsiTYUGf3 Gla0ipJ8b9lmxyVY8V3JCNZ6svMdDkJm6ylbMkIXm+UB53338k6hGlCxkCvGfDKb uRqhtZph49QYfxrMAkBnIjgBByt1wLUfyelehDpHpyfhRPVZUYVTOID/7oWZUyhJ E2bN/LEHW2Q+YmXRHAQy8mGizjyOscna7NSM3/U0EzFggibrPE5WHqJxK8+6tM0E /k6F3KLIz9IbQrS7mp8qxBh6At28VmIhxhaM5f39uzXHs682EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEfD+vDZw7UvqvCGa88QCMVH3T//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvY2YwMGJkMTYtNTBlOC0z YWMyLTk3YjUtMzk5Y2Q3ZDlkMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIq9rCWSLIZ3vEz4OUeuuFBFpwXw/gCL6Xyf/eX2RQTGXMGfPWKF nFb6SDJiZkzjGBPcdCSZg7rHt0mabamXsPQhZplW81Ay75M6APHaqlLiZn27QrKT yjhPyQhnxqBlYQh0BNLmuwugjxtPXIEO7XHIrbmk72oMi9hbuFlxF0DDCOBUKmAv hJ/hvLMrGFkc+2VJB+C/DbEDnzP6AJsDzy/xQyPIPRWC22dzxdwJeJvlW3a2OgLe h4mJyFmID20of7p13ItK95ig7to1FbOC/16L9ZoFDIlQKQM0RGXPgfKDjDPyJ/fz MJNqWDaTQE/QwRm6vxIgnZ61sIuaQvQZQX8= -----END CERTIFICATE-----Generated at Sat Oct 25 13:40:22 2025 by rpki-client