$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa File: 07137d18-ea2a-3814-9a59-8ee61677f7c2.roa (raw, json) Hash identifier: p8LyYbwrej1Uvzq2/9y9i8tT2sExEFtOFOhus0YdFQ4= Subject key identifier: C1:71:53:11:14:E8:F3:FB:44:DF:25:31:AF:D5:AA:D0:6B:CE:19:9D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584AADF0FADA9BBAAAF28AF98200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 198260 IP address blocks: 2001:500:f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:fa:da:9b:ba:aa:f2:8a:f9:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=cbae7d32-0d22-460e-a109-6b0a4f3afe8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:92:f1:79:ce:78:b7:6d:91:98:61:79:f4: cf:b2:e8:2f:63:06:8f:da:2c:bd:ae:78:9d:57:7f: a0:b4:a9:b2:d1:81:5c:84:12:27:b3:dc:e8:ff:8f: 1d:50:22:24:e0:51:1e:51:74:da:84:26:c7:2e:30: f4:58:0a:45:0e:9e:f8:33:1b:04:89:e6:00:8e:2e: 19:e4:a7:c6:3a:62:7b:82:4f:de:ce:72:b1:ee:c9: 94:62:9c:17:2e:67:2d:e5:59:30:29:9b:ad:47:db: b2:1b:40:b4:44:16:a6:71:0e:64:c4:39:e7:12:d7: 6e:d7:fd:97:1a:fb:1b:6f:0b:ec:85:7c:84:88:c4: 0f:ee:d8:d1:03:e6:93:02:e2:cd:3b:3a:b2:cd:ca: 89:30:bb:76:0b:d0:13:ab:33:2a:06:a2:81:6f:b6: 9f:14:7b:a4:99:07:27:a4:b9:06:28:fe:f4:e0:a6: 5a:e7:a1:35:96:14:39:93:de:73:66:22:64:b2:0c: 1c:ca:45:3f:55:d9:b3:60:c6:50:d2:b8:48:37:a1: 65:96:76:d4:12:f1:bb:a4:8d:05:2b:2c:67:c3:a6: 6c:c1:88:de:82:c3:5d:80:d3:44:74:e5:39:2d:15: d5:10:39:0c:0c:27:0d:1f:69:86:1a:09:2b:24:b4: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:71:53:11:14:E8:F3:FB:44:DF:25:31:AF:D5:AA:D0:6B:CE:19:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:47:ea:63:6a:21:82:74:78:d7:a1:52:fc:51:0a:06:94:f5: 2f:b6:fd:f2:c6:2c:af:3a:e6:15:8a:63:d7:14:01:c8:4c:da: f0:f4:dd:17:ec:ec:e4:d5:7a:e9:e2:9b:21:cc:27:5a:9e:6d: 0a:eb:c9:9d:00:95:7d:6f:f7:ee:dd:2c:c0:81:50:b6:7f:a6: 08:97:b8:1c:fd:45:96:18:85:9a:5e:b4:e5:7c:8d:a2:54:8e: b8:48:3c:ae:56:30:72:d3:53:b6:28:58:9f:0a:47:83:6c:78: c3:20:19:93:59:8e:ec:b7:e9:9c:04:7b:d6:94:5f:60:7f:eb: 97:58:fa:5e:c8:64:53:af:44:49:42:c7:a9:47:16:13:0a:6e: 52:1a:30:3d:1c:f1:3e:cd:35:66:f0:5c:f0:af:e8:2f:e9:86: 43:67:75:93:96:60:69:e5:fb:f5:fc:88:4f:24:d2:3f:f9:1b: 31:94:74:ee:f6:42:d0:82:c5:a7:d1:32:c2:97:f0:c6:28:31: d3:90:83:67:58:cc:16:ec:1e:70:bd:ef:d5:dd:e6:c7:4e:25: f7:64:9c:87:71:f5:11:6c:08:3c:4a:7e:24:47:cc:52:ad:df: 04:b5:34:fd:63:e0:54:53:5b:ec:2a:08:0c:40:ce:a1:c2:4a: 26:61:14:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqt8Pram7qq8or5ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk Y2JhZTdkMzItMGQyMi00NjBlLWExMDktNmIwYTRmM2FmZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP2S8XnOeLdtkZhhefTPsugvYwaP2iy9rnid V3+gtKmy0YFchBIns9zo/48dUCIk4FEeUXTahCbHLjD0WApFDp74MxsEieYAji4Z 5KfGOmJ7gk/eznKx7smUYpwXLmct5VkwKZutR9uyG0C0RBamcQ5kxDnnEtdu1/2X GvsbbwvshXyEiMQP7tjRA+aTAuLNOzqyzcqJMLt2C9ATqzMqBqKBb7afFHukmQcn pLkGKP704KZa56E1lhQ5k95zZiJksgwcykU/VdmzYMZQ0rhIN6FllnbUEvG7pI0F Kyxnw6ZswYjegsNdgNNEdOU5LRXVEDkMDCcNH2mGGgkrJLQn6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMFxUxEU6PP7RN8lMa/VqtBrzhmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDcxMzdkMTgtZWEyYS0z ODE0LTlhNTktOGVlNjE2NzdmN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHBH6mNqIYJ0eNehUvxRCgaU9S+2/fLGLK865hWKY9cUAchM2vD0 3Rfs7OTVeunimyHMJ1qebQrryZ0AlX1v9+7dLMCBULZ/pgiXuBz9RZYYhZpetOV8 jaJUjrhIPK5WMHLTU7YoWJ8KR4NseMMgGZNZjuy36ZwEe9aUX2B/65dY+l7IZFOv RElCx6lHFhMKblIaMD0c8T7NNWbwXPCv6C/phkNndZOWYGnl+/X8iE8k0j/5GzGU dO72QtCCxafRMsKX8MYoMdOQg2dYzBbsHnC979Xd5sdOJfdknIdx9RFsCDxKfiRH zFKt3wS1NP1j4FRTW+wqCAxAzqHCSiZhFFg= -----END CERTIFICATE-----Generated at Thu Aug 7 02:00:01 2025 by rpki-client