$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa File: 11cdd2e2-39fe-3cac-a71b-b6844486d252.roa (raw, json) Hash identifier: nj0lxCQQVMJRTSf/fdDxaWHZt9lkFGyjPYLe6Desjzk= Subject key identifier: E2:E4:79:0D:A1:14:AF:5E:18:FC:6D:49:E8:5C:F5:A3:87:76:8A:E9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C1A6A0D18B9436516600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c1:a6:a0:d1:8b:94:36:51:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=34210203-da9a-4e80-8938-49f102bfd7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:28:40:ac:d7:e5:a3:c8:2e:ba:c1:4f:9e: e4:0a:4f:6d:a3:1f:06:05:6d:48:68:43:cd:b4:6e: 7a:8d:40:61:cf:43:e6:cd:f4:30:26:cf:3c:e2:b5: dc:96:c1:4c:73:ae:92:b0:a4:a1:4b:7d:24:36:d3: 22:f7:07:8a:46:9d:b7:11:01:0a:b7:c2:9a:b9:a4: a4:6c:31:23:99:70:34:f2:23:1f:58:74:b2:12:dd: 00:66:ed:6e:39:17:de:49:74:c9:1d:31:d6:39:dc: 0a:5a:b8:59:0f:d1:4a:e7:a4:0e:4e:f9:bb:7b:de: 00:92:ce:1d:e1:a4:bd:d3:53:b0:6d:78:1f:e1:9a: a7:95:7b:6a:9d:e6:0c:9f:09:c6:c2:c0:4d:ed:d6: 32:d0:56:32:a3:f9:63:c3:49:94:4b:d7:ba:61:e1: 93:12:06:ae:4a:f7:db:6d:64:c0:44:53:d7:ff:70: 01:7a:68:79:40:22:8e:ea:e5:14:c8:68:57:a0:0e: 2d:a3:bd:c7:c9:fd:57:bd:b9:7a:7a:e4:34:6f:c3: b1:e0:ef:40:5a:6c:e1:6d:88:c6:ec:9b:16:87:53: 38:83:48:c6:51:c6:cd:24:14:7e:35:51:51:64:31: f1:e5:94:99:2f:1f:77:b6:6b:0f:2e:6a:69:03:23: fb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E4:79:0D:A1:14:AF:5E:18:FC:6D:49:E8:5C:F5:A3:87:76:8A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:15:f4:5b:87:ca:f6:57:93:d2:62:61:cb:02:4c:ee:f5:00: dd:90:b1:68:ed:9c:b6:77:55:8b:c7:1c:13:f8:61:c7:22:d8: 8b:b8:54:7c:47:69:e3:3b:61:3f:4d:e4:6f:44:ff:36:c9:eb: 70:60:b7:51:31:de:2a:35:74:33:8a:26:1d:62:21:c4:e6:0a: c1:eb:4c:62:27:41:8f:fa:8b:07:69:07:ef:8f:a8:16:4c:1c: ed:49:9a:5d:90:83:76:ba:ac:ad:66:f8:e1:e7:41:bb:f2:f0: e5:98:09:9d:2d:a5:39:b2:cf:4c:69:5b:dd:0c:71:09:cf:35: 2f:33:2c:75:99:64:b2:9a:1a:ce:19:78:1a:f2:8b:d9:78:96: cc:7b:ad:16:b6:af:a4:1f:5a:fe:28:e5:72:14:37:83:13:cd: 24:ad:c9:31:5d:2e:8d:f3:47:18:42:4e:d8:82:b9:51:91:0d: f8:d7:b4:e5:c1:5c:cf:c8:cf:c9:b8:e1:e3:c3:40:bd:f1:e8: 8e:6c:81:3d:50:65:e1:92:19:a0:34:08:c2:f4:4f:39:d7:43: 61:1b:d7:3f:2b:67:c6:08:21:de:fe:ea:9e:db:b8:4f:bc:2f: b6:0f:82:09:2e:95:c2:25:28:86:5c:d8:83:27:b1:06:b1:72: d6:91:5e:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMGmoNGLlDZRZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzQyMTAyMDMtZGE5YS00ZTgwLTg5MzgtNDlmMTAyYmZkN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkcoQKzX5aPILrrBT57kCk9tox8GBW1IaEPN tG56jUBhz0PmzfQwJs884rXclsFMc66SsKShS30kNtMi9weKRp23EQEKt8KauaSk bDEjmXA08iMfWHSyEt0AZu1uORfeSXTJHTHWOdwKWrhZD9FK56QOTvm7e94Aks4d 4aS901OwbXgf4ZqnlXtqneYMnwnGwsBN7dYy0FYyo/ljw0mUS9e6YeGTEgauSvfb bWTARFPX/3ABemh5QCKO6uUUyGhXoA4to73Hyf1Xvbl6euQ0b8Ox4O9AWmzhbYjG 7JsWh1M4g0jGUcbNJBR+NVFRZDHx5ZSZLx93tmsPLmppAyP78wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLkeQ2hFK9eGPxtSehc9aOHdorpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTFjZGQyZTItMzlmZS0z Y2FjLWE3MWItYjY4NDQ0ODZkMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMIV9FuHyvZXk9JiYcsCTO71AN2QsWjtnLZ3VYvHHBP4Ycci2Iu4 VHxHaeM7YT9N5G9E/zbJ63Bgt1Ex3io1dDOKJh1iIcTmCsHrTGInQY/6iwdpB++P qBZMHO1Jml2Qg3a6rK1m+OHnQbvy8OWYCZ0tpTmyz0xpW90McQnPNS8zLHWZZLKa Gs4ZeBryi9l4lsx7rRa2r6QfWv4o5XIUN4MTzSStyTFdLo3zRxhCTtiCuVGRDfjX tOXBXM/Iz8m44ePDQL3x6I5sgT1QZeGSGaA0CML0TznXQ2Eb1z8rZ8YIId7+6p7b uE+8L7YPggkulcIlKIZc2IMnsQaxctaRXg8= -----END CERTIFICATE-----Generated at Thu Aug 7 01:08:02 2025 by rpki-client