$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa File: 08891ef8-25ed-318c-973b-a8f9d9331675.roa (raw, json) Hash identifier: imZDSVfKaG4jC8MMCsmJenq9TWUGSuglFgzG4IrDab8= Subject key identifier: 70:26:55:2B:07:16:28:56:F5:11:D6:57:09:86:99:50:B1:13:64:81 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410B44967747A06D7415BC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:b4:49:67:74:7a:06:d7:41:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0a41db2c-7a96-4ec4-8be7-f84e12a5c164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bf:3a:b7:34:6a:5c:fe:53:81:7d:b6:4d:56: d3:80:6f:87:28:8c:85:a2:33:c5:75:2e:2a:fd:bd: 04:94:07:0e:91:73:c1:d6:a8:f6:80:a9:80:74:c1: 10:34:ea:ab:28:5c:03:a6:ff:fa:f9:3e:7d:b3:0a: d9:fb:e8:b8:6f:ca:3d:1a:51:9d:00:ce:19:3f:a9: 74:9e:a7:7e:6c:5f:ef:55:29:da:1c:d8:ec:5d:3c: 4e:79:0c:58:cb:29:d2:24:f7:54:cd:0a:6a:77:14: 8f:1a:fe:03:19:86:b2:1f:1a:60:af:28:2e:14:1f: e5:8c:52:d6:83:95:9b:9e:05:ca:36:44:07:03:e8: ae:a4:2b:f6:0b:7c:06:62:ec:be:b2:f6:61:7e:70: 50:b3:f2:11:ae:92:dd:70:e9:49:8c:02:3b:bb:d1: ea:0b:cb:1f:1c:57:42:5a:dc:40:ef:81:0a:85:1a: 37:59:1f:1a:89:43:54:10:57:38:bc:0d:d4:82:a6: 0c:63:92:f5:45:ce:6f:2e:c6:6a:b4:23:56:a9:bc: 42:86:7a:ba:af:da:72:0e:14:bf:8b:db:53:75:a4: bc:08:6b:5b:29:ae:9b:c2:1f:de:e2:61:59:f4:52: ca:3c:2f:4f:3b:fd:83:60:44:ed:45:08:d1:52:25: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:26:55:2B:07:16:28:56:F5:11:D6:57:09:86:99:50:B1:13:64:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8b:33:06:d0:a3:71:d6:88:2e:a8:a2:64:90:3b:3e:44:48: ad:52:f8:80:f9:4d:b7:7e:a8:6b:97:52:6a:1a:0d:63:28:d0: 95:85:89:c8:42:73:4b:21:3a:95:46:40:15:b6:b0:4b:7d:d3: 66:29:98:42:69:f2:44:81:85:1f:7e:9f:d6:c5:0a:08:c7:49: f5:b7:20:9e:39:b3:9d:c1:8b:8f:ea:6e:1c:be:37:21:24:8f: 84:5f:17:71:e8:da:2b:f5:55:cf:09:2b:75:19:fe:7f:82:69: 26:52:9a:53:0e:38:82:3a:f2:36:93:7d:33:4a:3a:a9:34:ef: a2:34:f9:44:3f:55:16:33:4c:a1:c0:72:ef:ef:2a:c4:cf:67: 23:62:6e:94:92:5b:33:c4:16:64:47:16:4c:75:6d:3b:8e:e3: 5e:8f:0d:51:a7:93:b5:33:d4:22:e2:2a:ac:fa:1d:43:7b:b8: 1d:84:a9:ff:04:49:13:87:76:14:42:e4:ef:fb:04:81:35:bc: db:18:e1:be:a5:07:fa:07:34:93:4b:d4:0d:91:e3:b2:02:66: 9e:00:17:04:e5:87:88:1e:c8:60:b9:87:64:f4:36:85:01:ca: b0:ba:c4:fb:c3:ad:3c:82:34:5a:29:29:c0:62:c2:f0:01:3b: 54:fe:d7:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELRJZ3R6BtdBW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGE0MWRiMmMtN2E5Ni00ZWM0LThiZTctZjg0ZTEyYTVjMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL86tzRqXP5TgX22TVbTgG+HKIyFojPFdS4q /b0ElAcOkXPB1qj2gKmAdMEQNOqrKFwDpv/6+T59swrZ++i4b8o9GlGdAM4ZP6l0 nqd+bF/vVSnaHNjsXTxOeQxYyynSJPdUzQpqdxSPGv4DGYayHxpgryguFB/ljFLW g5WbngXKNkQHA+iupCv2C3wGYuy+svZhfnBQs/IRrpLdcOlJjAI7u9HqC8sfHFdC WtxA74EKhRo3WR8aiUNUEFc4vA3UgqYMY5L1Rc5vLsZqtCNWqbxChnq6r9pyDhS/ i9tTdaS8CGtbKa6bwh/e4mFZ9FLKPC9PO/2DYETtRQjRUiW/4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHAmVSsHFihW9RHWVwmGmVCxE2SBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDg4OTFlZjgtMjVlZC0z MThjLTk3M2ItYThmOWQ5MzMxNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIiLMwbQo3HWiC6oomSQOz5ESK1S+ID5Tbd+qGuXUmoaDWMo0JWF ichCc0shOpVGQBW2sEt902YpmEJp8kSBhR9+n9bFCgjHSfW3IJ45s53Bi4/qbhy+ NyEkj4RfF3Ho2iv1Vc8JK3UZ/n+CaSZSmlMOOII68jaTfTNKOqk076I0+UQ/VRYz TKHAcu/vKsTPZyNibpSSWzPEFmRHFkx1bTuO416PDVGnk7Uz1CLiKqz6HUN7uB2E qf8ESROHdhRC5O/7BIE1vNsY4b6lB/oHNJNL1A2R47ICZp4AFwTlh4geyGC5h2T0 NoUByrC6xPvDrTyCNFopKcBiwvABO1T+1x4= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:20 2025 by rpki-client