$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/01d63254-2c2a-337d-a5c5-5c3d27344457.roa File: 01d63254-2c2a-337d-a5c5-5c3d27344457.roa (raw, json) Hash identifier: c5+DONs0EpzTiTGrlICEMXfgqRE+z6/30KG9NmA/XCs= Subject key identifier: 3D:17:78:1F:F3:E7:D0:D6:AF:42:E5:22:6D:82:D4:2C:5D:95:3E:B0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BD753CCC390EA96EE140 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/01d63254-2c2a-337d-a5c5-5c3d27344457.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bd:75:3c:cc:39:0e:a9:6e:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fed7aaa4-cc64-430a-8c13-df52d95357d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:25:f1:88:18:06:13:58:af:6f:a5:41:64: e5:80:03:52:8e:8a:d5:b9:c3:94:57:9e:68:1e:98: 57:62:10:e7:d4:51:27:17:bc:05:b6:bc:de:af:d7: 33:ad:e7:ae:c3:e8:a9:ef:63:a3:d9:3f:fb:04:ab: ee:96:de:1d:3a:35:11:ef:0a:d4:3f:66:95:ac:1d: 7c:e6:8d:f7:4e:a1:d3:81:5f:2e:ae:9e:30:9a:1f: 39:b9:ea:5d:ad:17:a3:2d:bb:83:e2:ac:65:c3:0c: 0d:80:6f:57:f1:b8:ed:ab:33:54:17:e0:ec:6f:05: f4:b0:46:4e:77:18:00:58:9a:87:e7:55:84:a4:ac: dd:89:8c:94:75:c7:e0:34:c9:fd:99:ab:a4:18:8e: be:dc:7a:bb:3c:60:54:20:fb:3f:00:08:94:84:80: 5f:ed:41:b1:cc:90:72:eb:1f:92:8d:c1:da:90:c3: 38:1f:e3:36:2f:95:66:60:44:bd:9e:e5:26:28:f4: 1e:b6:b2:8b:ce:0a:ce:10:d1:d9:10:07:77:f6:23: d1:5a:50:0f:7f:51:9e:0f:14:20:a5:f9:e9:8e:5e: e8:5d:ea:fd:6a:48:15:11:6e:e6:d5:5c:a7:f8:ba: 60:f9:b1:9b:21:ff:bd:c2:4e:49:29:e1:64:3d:68: e1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:17:78:1F:F3:E7:D0:D6:AF:42:E5:22:6D:82:D4:2C:5D:95:3E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/01d63254-2c2a-337d-a5c5-5c3d27344457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e7:b3:bd:3d:54:84:6d:46:59:53:ae:13:b4:d9:52:59:7f: 3b:26:96:1b:92:25:4e:50:d3:9e:3b:93:60:92:73:12:26:6c: 93:5d:49:7b:cd:c0:da:75:08:cb:a9:1f:ce:24:f0:65:b6:ef: 1c:be:b9:54:72:a2:24:ca:0c:e3:39:4e:d4:d9:df:e6:5c:33: ae:0a:73:ba:19:d9:58:c2:70:a4:43:ad:20:86:86:e1:f7:a4: b6:c2:c0:01:be:5a:d7:d2:fe:33:af:e3:ff:52:78:c0:7c:d9: ed:91:aa:43:c6:3c:e8:35:bf:47:03:be:e5:95:de:4c:e7:6b: 9b:c4:06:fc:de:2f:2b:39:11:d1:85:a4:aa:90:29:da:2c:dd: dd:07:12:fd:42:df:7b:31:4b:6e:87:eb:52:42:fb:06:3c:0b: c2:3c:5c:57:bb:2c:89:1b:fc:0d:69:0e:bf:eb:0d:c0:2b:3c: 04:3d:89:59:06:8b:19:ff:49:e4:f8:22:ac:d3:0b:c8:ba:04: 01:9f:64:1f:3f:11:3f:7a:a9:2f:62:fd:f2:69:75:01:db:63: 5d:43:ec:59:27:10:0e:cf:5e:67:e0:72:a1:60:40:91:51:7b: eb:6c:3e:1e:16:49:aa:9e:4f:9f:45:81:d6:58:4f:f6:34:d9: 31:1d:b3:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEL11PMw5Dqlu4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmVkN2FhYTQtY2M2NC00MzBhLThjMTMtZGY1MmQ5NTM1N2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuool8YgYBhNYr2+lQWTlgANSjorVucOUV55o HphXYhDn1FEnF7wFtrzer9czreeuw+ip72Oj2T/7BKvult4dOjUR7wrUP2aVrB18 5o33TqHTgV8urp4wmh85uepdrRejLbuD4qxlwwwNgG9X8bjtqzNUF+DsbwX0sEZO dxgAWJqH51WEpKzdiYyUdcfgNMn9maukGI6+3Hq7PGBUIPs/AAiUhIBf7UGxzJBy 6x+SjcHakMM4H+M2L5VmYES9nuUmKPQetrKLzgrOENHZEAd39iPRWlAPf1GeDxQg pfnpjl7oXer9akgVEW7m1Vyn+Lpg+bGbIf+9wk5JKeFkPWjhwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD0XeB/z59DWr0LlIm2C1CxdlT6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDFkNjMyNTQtMmMyYS0z MzdkLWE1YzUtNWMzZDI3MzQ0NDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHns709VIRtRllTrhO02VJZfzsmlhuSJU5Q0547k2CScxImbJNd SXvNwNp1CMupH84k8GW27xy+uVRyoiTKDOM5TtTZ3+ZcM64Kc7oZ2VjCcKRDrSCG huH3pLbCwAG+WtfS/jOv4/9SeMB82e2RqkPGPOg1v0cDvuWV3kzna5vEBvzeLys5 EdGFpKqQKdos3d0HEv1C33sxS26H61JC+wY8C8I8XFe7LIkb/A1pDr/rDcArPAQ9 iVkGixn/SeT4IqzTC8i6BAGfZB8/ET96qS9i/fJpdQHbY11D7FknEA7PXmfgcqFg QJFRe+tsPh4WSaqeT59FgdZYT/Y02TEds0Q= -----END CERTIFICATE-----Generated at Thu Aug 7 03:23:32 2025 by rpki-client