$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0274c4e5-72a5-3fda-ae9d-37ba2e970e11.roa File: 0274c4e5-72a5-3fda-ae9d-37ba2e970e11.roa (raw, json) Hash identifier: OUqYfrEziRb1ap1skewY2G80vOr3R1iP10/rwFAIbUE= Subject key identifier: 4B:6C:C0:C3:70:B4:AD:95:B0:B8:80:5E:31:DF:BA:FC:88:5B:A4:F3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BE25F8EBC075A6784400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0274c4e5-72a5-3fda-ae9d-37ba2e970e11.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:be:25:f8:eb:c0:75:a6:78:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fa0c9a7c-2a15-4aaf-b7bf-3b9f57b43055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:11:53:c6:dc:a8:63:26:b1:8a:24:11:97: 81:51:fc:10:76:78:ef:23:15:b5:0d:9e:dc:f1:01: 14:a6:da:9e:73:14:dc:f8:d3:f7:b6:ed:68:07:2f: 8b:30:d9:33:ee:92:8f:7e:b5:f1:24:95:34:cd:9f: 30:b4:ee:07:1d:85:d5:52:b9:92:0c:54:f6:c7:70: c7:24:9e:cc:70:5f:7f:f2:ff:46:1e:33:5d:9c:b6: 2e:da:f6:61:8f:b6:e6:40:f7:ae:a8:67:8d:fb:d7: 39:88:40:4d:cd:ba:a7:46:93:f9:41:76:bf:24:30: 8d:e2:3d:35:c9:2a:d4:58:58:cd:b3:d5:42:67:00: a9:db:1f:e4:30:19:54:bc:91:dc:2f:97:c2:ba:6e: e2:24:35:6d:f1:df:26:db:a2:61:00:87:87:70:89: 07:35:3f:4f:52:83:e3:9f:c1:07:f7:35:e5:88:2f: 2f:56:8c:86:6f:92:cd:ec:82:d1:7f:29:85:0f:d8: 3d:f4:99:26:bb:ab:a8:79:b9:c8:00:4f:a3:d3:a1: c1:05:b1:96:35:83:df:69:da:56:bd:38:40:61:19: 0c:26:b0:94:5d:cc:9b:32:36:59:06:c2:f8:3b:ec: bf:ca:51:e7:fa:c0:e0:71:c4:0e:e7:d4:f2:d1:34: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6C:C0:C3:70:B4:AD:95:B0:B8:80:5E:31:DF:BA:FC:88:5B:A4:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0274c4e5-72a5-3fda-ae9d-37ba2e970e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:aa:5f:74:60:4a:0e:72:7c:c1:52:a9:84:bb:34:44:b4:8b: 91:c5:52:89:a4:8f:05:4d:c8:de:58:7b:e2:62:6c:02:fa:5a: 50:c9:d6:a0:44:fd:bc:1d:62:86:f5:51:c5:73:3e:c9:db:8a: 2d:00:59:6a:10:7a:14:aa:d6:ca:54:dc:f2:17:26:7b:bc:5b: 72:0e:67:47:84:1c:b3:ca:2a:12:25:2d:70:6b:98:37:be:24: d7:f4:c0:89:b2:89:ea:24:b6:d3:ce:09:18:ef:d3:97:5b:1e: 28:f1:0f:ae:2e:8b:c7:bf:85:96:4d:d4:49:5d:d4:87:95:86: a4:70:90:93:d4:bf:21:3f:4e:77:69:ce:1f:51:0b:e6:62:28: 1b:1b:cb:44:64:39:e9:0b:b0:24:2f:a4:4b:a2:38:13:3d:a1: c8:f2:4c:5f:f7:97:0c:86:35:79:ee:14:ef:d7:e7:2b:24:03: 6c:45:93:89:5c:e0:22:54:eb:f8:30:c0:61:9e:9a:0c:44:50: 73:ca:21:46:41:be:c6:03:93:06:50:1b:f0:d0:e5:65:92:3c: 54:20:e6:f6:1b:4f:f9:bd:a1:33:6a:34:3a:44:bb:b9:c5:ee: cd:37:b6:1d:77:59:36:5a:73:8c:6f:c8:dc:90:bc:cd:65:16: 35:2f:6e:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEL4l+OvAdaZ4RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmEwYzlhN2MtMmExNS00YWFmLWI3YmYtM2I5ZjU3YjQzMDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8ERU8bcqGMmsYokEZeBUfwQdnjvIxW1DZ7c 8QEUptqecxTc+NP3tu1oBy+LMNkz7pKPfrXxJJU0zZ8wtO4HHYXVUrmSDFT2x3DH JJ7McF9/8v9GHjNdnLYu2vZhj7bmQPeuqGeN+9c5iEBNzbqnRpP5QXa/JDCN4j01 ySrUWFjNs9VCZwCp2x/kMBlUvJHcL5fCum7iJDVt8d8m26JhAIeHcIkHNT9PUoPj n8EH9zXliC8vVoyGb5LN7ILRfymFD9g99Jkmu6uoebnIAE+j06HBBbGWNYPfadpW vThAYRkMJrCUXcybMjZZBsL4O+y/ylHn+sDgccQO59Ty0TRhlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEtswMNwtK2VsLiAXjHfuvyIW6TzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDI3NGM0ZTUtNzJhNS0z ZmRhLWFlOWQtMzdiYTJlOTcwZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHiqX3RgSg5yfMFSqYS7NES0i5HFUomkjwVNyN5Ye+JibAL6WlDJ 1qBE/bwdYob1UcVzPsnbii0AWWoQehSq1spU3PIXJnu8W3IOZ0eEHLPKKhIlLXBr mDe+JNf0wImyieokttPOCRjv05dbHijxD64ui8e/hZZN1Eld1IeVhqRwkJPUvyE/ Tndpzh9RC+ZiKBsby0RkOekLsCQvpEuiOBM9ocjyTF/3lwyGNXnuFO/X5yskA2xF k4lc4CJU6/gwwGGemgxEUHPKIUZBvsYDkwZQG/DQ5WWSPFQg5vYbT/m9oTNqNDpE u7nF7s03th13WTZac4xvyNyQvM1lFjUvbgo= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:27 2025 by rpki-client