$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa File: 1a6c305a-690d-3108-8f35-980317f42700.roa (raw, json) Hash identifier: 8jvYFFzQbsU0+AG7ojHXAmKp30tLOzdIYKGTd/U6kZk= Subject key identifier: A6:07:E4:F2:CC:95:0E:67:BF:79:0A:88:DA:25:66:61:BD:21:41:B3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BC7D7E1E5ABFBDEA8540 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bc:7d:7e:1e:5a:bf:bd:ea:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d31016c7-f867-4516-bd6d-3944a8ded29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:bb:d8:dc:c1:33:48:f8:2d:55:fd:a8:51: cb:aa:d0:bb:8d:3d:c5:72:dc:6b:28:a9:20:53:98: 1e:ff:7f:8f:c0:03:53:98:51:de:24:7b:20:41:98: 09:37:0b:0c:41:30:25:cd:a1:3c:eb:65:78:7a:9f: 3f:7c:b5:51:90:b7:bf:e6:a2:59:6c:be:2e:65:11: a7:05:b1:93:66:29:d3:06:62:74:1a:05:fd:d1:fd: 54:a8:88:86:68:75:33:fc:99:db:db:52:2b:24:20: 47:b3:3d:80:e8:53:7a:9e:71:88:ad:95:60:cb:17: 1c:9e:16:a0:78:d0:0f:c9:f7:c9:c2:a3:ce:ba:21: 54:e2:2b:72:16:24:a3:43:a4:3c:a9:c6:31:31:17: 86:9c:68:4a:52:f2:3c:da:e8:af:2c:90:e8:36:e1: eb:b3:24:ea:e7:4f:66:bf:ea:6d:70:8e:00:5c:a1: 49:d3:d3:87:9c:08:b9:d9:7b:39:e0:46:c2:21:b5: af:2f:cd:8a:00:b7:de:74:18:14:e4:8a:3e:86:28: 23:bf:fc:fa:46:f3:03:49:35:28:7e:52:fc:db:b0: e0:d9:7d:1d:11:5c:bd:66:1a:af:65:e4:71:6e:5e: de:b5:d0:51:52:56:5c:e6:ca:95:71:c3:fa:14:e2: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:07:E4:F2:CC:95:0E:67:BF:79:0A:88:DA:25:66:61:BD:21:41:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fe:5c:b6:ab:94:6c:6c:09:f6:83:53:e3:2a:5e:7e:b7:13: 26:2d:fb:69:72:ec:8d:b8:77:cf:0d:35:b9:48:1c:a5:7e:c9: bc:10:91:4c:47:95:76:73:46:59:12:31:66:30:aa:50:c1:2d: 2c:dd:45:f8:f8:dc:39:28:3c:20:b7:bf:9f:0a:54:ab:c8:62: 05:0c:ae:1c:5f:55:00:55:a6:0b:78:60:75:6c:b3:ba:e2:23: 86:71:ab:0f:99:e0:07:9e:d7:d6:6a:40:db:a1:33:37:0e:14: 19:78:ec:fb:28:ae:6a:32:9d:0a:ae:fa:64:ff:ff:51:52:ac: 13:b4:f6:56:b0:6e:93:ec:70:ac:88:65:07:2f:b9:17:f2:49: 83:72:52:21:38:39:34:99:68:21:02:6b:06:26:41:3b:53:12: 4b:71:5a:f7:3a:73:e0:04:58:7f:ae:b4:ec:cd:84:cb:1d:7b: 91:be:32:ea:95:a1:94:8d:95:99:6d:4b:9e:e3:38:32:d2:13: 05:1b:d3:a2:ed:68:76:fd:aa:0c:92:93:ba:5b:81:5e:a0:f3: 39:33:3b:22:da:e4:7b:e5:5b:02:fb:e1:3a:6d:d4:8b:d9:e3: fa:a7:ff:04:af:02:0e:18:66:3a:d2:cc:74:4a:5f:fd:3f:46: cf:d8:08:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELx9fh5av73qhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDMxMDE2YzctZjg2Ny00NTE2LWJkNmQtMzk0NGE4ZGVkMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArym72NzBM0j4LVX9qFHLqtC7jT3FctxrKKkg U5ge/3+PwANTmFHeJHsgQZgJNwsMQTAlzaE862V4ep8/fLVRkLe/5qJZbL4uZRGn BbGTZinTBmJ0GgX90f1UqIiGaHUz/Jnb21IrJCBHsz2A6FN6nnGIrZVgyxccnhag eNAPyffJwqPOuiFU4ityFiSjQ6Q8qcYxMReGnGhKUvI82uivLJDoNuHrsyTq509m v+ptcI4AXKFJ09OHnAi52Xs54EbCIbWvL82KALfedBgU5Io+higjv/z6RvMDSTUo flL827Dg2X0dEVy9ZhqvZeRxbl7etdBRUlZc5sqVccP6FOLkWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKYH5PLMlQ5nv3kKiNolZmG9IUGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWE2YzMwNWEtNjkwZC0z MTA4LThmMzUtOTgwMzE3ZjQyNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAET+XLarlGxsCfaDU+MqXn63EyYt+2ly7I24d88NNblIHKV+ybwQ kUxHlXZzRlkSMWYwqlDBLSzdRfj43DkoPCC3v58KVKvIYgUMrhxfVQBVpgt4YHVs s7riI4Zxqw+Z4Aee19ZqQNuhMzcOFBl47PsormoynQqu+mT//1FSrBO09lawbpPs cKyIZQcvuRfySYNyUiE4OTSZaCECawYmQTtTEktxWvc6c+AEWH+utOzNhMsde5G+ MuqVoZSNlZltS57jODLSEwUb06LtaHb9qgySk7pbgV6g8zkzOyLa5HvlWwL74Tpt 1IvZ4/qn/wSvAg4YZjrSzHRKX/0/Rs/YCGk= -----END CERTIFICATE-----Generated at Thu Aug 21 19:00:42 2025 by rpki-client