$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa File: 11cdd2e2-39fe-3cac-a71b-b6844486d252.roa (raw, json) Hash identifier: /hsT/iXp8ec3BYMQbDnhWW5rV2ae9S8Nk9ea02aq1bI= Subject key identifier: C3:19:FF:4F:5E:41:A5:C0:ED:60:95:F6:B1:34:65:6D:23:37:5D:B2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE5835FA9D50E85EF78E20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:58:35:fa:9d:50:e8:5e:f7:8e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3d799155-5a58-4853-bc21-2ccc1a725ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:07:c8:be:99:7a:aa:b8:04:f0:2e:66:59: 0a:b8:02:68:d4:7d:8c:70:d8:1e:09:7f:b4:65:1b: 7a:a1:2a:42:01:c1:f0:a7:2c:93:2d:0c:94:6a:29: e1:8b:db:ff:3d:cd:6d:15:22:69:00:15:25:c7:e8: 42:f1:be:38:dd:df:c4:14:28:1b:87:0b:86:8d:dd: f7:f4:14:66:93:7f:6a:a4:c5:ce:b2:28:07:04:20: 40:d8:bc:f0:c3:ae:fb:b8:d8:13:37:6e:4f:31:f8: e0:eb:bb:1b:9d:13:63:43:9d:72:1a:3c:48:90:21: be:c1:39:78:dd:de:67:22:24:92:99:51:99:d1:0b: d7:27:04:39:2b:d7:75:46:7c:34:92:20:28:5d:91: 87:2e:25:0f:70:94:94:60:50:ed:dc:9f:f4:ee:56: f5:76:e2:94:1b:ca:a4:d8:69:09:e7:62:f8:79:a5: c2:90:ac:2a:f7:ff:71:89:cf:24:50:23:6c:a7:43: 64:00:34:41:10:f6:98:34:62:f4:34:b1:f5:27:93: 9b:16:57:ae:72:77:54:5c:9e:d7:91:1c:fc:46:5c: 0c:64:a7:ca:56:83:e4:76:61:52:49:55:54:0f:33: 1f:1d:8d:7b:64:50:71:59:96:f4:d7:61:e9:07:bb: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:19:FF:4F:5E:41:A5:C0:ED:60:95:F6:B1:34:65:6D:23:37:5D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:b9:92:81:cd:1a:d8:5e:21:d2:19:41:60:73:79:d8:f7:4c: 29:0b:58:b7:62:cd:82:3d:3b:f9:b7:2b:45:8c:34:82:53:19: 4b:eb:92:36:78:51:a1:2b:2e:86:16:dd:de:a6:7e:11:a8:7d: cc:ac:b5:59:fd:07:a8:7c:5a:1e:f3:fa:9f:9f:7d:b8:8d:f9: 14:1d:8f:3c:0b:70:bc:e5:e0:18:b7:b5:ab:67:fa:08:77:53: 09:db:7a:ad:c5:5b:09:12:3d:da:64:d4:18:fb:9b:c0:98:f3: b7:b3:f8:0a:55:a6:98:fd:e9:9d:d8:28:33:c8:11:eb:bc:42: 0e:ea:1b:f7:28:e2:c1:c3:82:17:ad:22:0b:2a:37:a3:56:a5: b6:a7:08:01:d8:11:f7:ae:a2:b3:63:f2:6b:e1:0d:4e:6e:0a: 45:75:b0:bb:ec:95:55:45:54:22:07:63:ac:be:1f:d1:93:9c: f2:33:47:95:23:35:b8:82:e0:9b:09:e8:26:72:1f:47:e1:9f: 88:78:59:16:ef:6b:9c:89:18:be:da:a6:89:a8:c7:44:5e:73: 3c:d2:2f:5b:02:d5:7d:d7:a7:e9:a8:ed:94:16:2e:06:6c:3a: 6e:70:06:be:5d:1f:6e:e6:9a:d5:b9:fa:7f:41:f3:ce:fe:1c: 0b:28:a2:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzlg1+p1Q6F73jiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2Q3OTkxNTUtNWE1OC00ODUzLWJjMjEtMmNjYzFhNzI1ZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfkHyL6Zeqq4BPAuZlkKuAJo1H2McNgeCX+0 ZRt6oSpCAcHwpyyTLQyUainhi9v/Pc1tFSJpABUlx+hC8b443d/EFCgbhwuGjd33 9BRmk39qpMXOsigHBCBA2Lzww677uNgTN25PMfjg67sbnRNjQ51yGjxIkCG+wTl4 3d5nIiSSmVGZ0QvXJwQ5K9d1Rnw0kiAoXZGHLiUPcJSUYFDt3J/07lb1duKUG8qk 2GkJ52L4eaXCkKwq9/9xic8kUCNsp0NkADRBEPaYNGL0NLH1J5ObFleucndUXJ7X kRz8RlwMZKfKVoPkdmFSSVVUDzMfHY17ZFBxWZb012HpB7sGvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMMZ/09eQaXA7WCV9rE0ZW0jN12yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTFjZGQyZTItMzlmZS0z Y2FjLWE3MWItYjY4NDQ0ODZkMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALy5koHNGtheIdIZQWBzedj3TCkLWLdizYI9O/m3K0WMNIJTGUvr kjZ4UaErLoYW3d6mfhGofcystVn9B6h8Wh7z+p+ffbiN+RQdjzwLcLzl4Bi3tatn +gh3Uwnbeq3FWwkSPdpk1Bj7m8CY87ez+ApVppj96Z3YKDPIEeu8Qg7qG/co4sHD ghetIgsqN6NWpbanCAHYEfeuorNj8mvhDU5uCkV1sLvslVVFVCIHY6y+H9GTnPIz R5UjNbiC4JsJ6CZyH0fhn4h4WRbva5yJGL7apomox0ReczzSL1sC1X3Xp+mo7ZQW LgZsOm5wBr5dH27mmtW5+n9B887+HAsoogc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:05 2025 by rpki-client