$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa File: 1dba6855-d043-3318-9f5b-e0247f7172d4.roa (raw, json) Hash identifier: lr7s5Fx979mxJp/SqCl1Sye9D37PDy/Y7PjUh0vUjAU= Subject key identifier: F1:E9:35:CD:86:3A:79:E3:D3:BA:6F:BE:72:94:9C:51:37:53:76:37 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410B5BA93C6D6E817754580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:b5:ba:93:c6:d6:e8:17:75:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a4edf30e-9269-42d9-ac74-6732b8068ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:f2:10:89:27:7e:be:89:12:28:1b:f5:6c: af:ee:13:66:f2:70:bf:32:b3:fd:a4:80:3a:e6:9b: 57:75:d1:cb:8a:a8:83:09:cc:2e:3d:bb:83:7b:f8: d3:2b:c5:a0:d0:31:07:b5:2a:21:90:5d:7b:c5:6f: 15:88:ce:1b:dd:13:48:83:02:17:3d:a3:ff:49:85: bc:45:af:46:3b:12:d7:58:a9:77:58:1f:5f:f1:71: e6:88:80:06:9f:84:aa:44:14:68:7d:f9:55:34:4a: 4f:af:d2:4d:b2:58:bf:36:6d:18:05:b0:b0:5a:6b: 8f:f7:4e:e7:84:8a:b9:65:37:5b:a7:69:27:88:62: 11:52:6f:ab:50:bc:e5:1f:38:c3:ff:e2:ae:ec:9c: c9:58:71:58:86:44:29:fe:f2:8b:62:82:88:38:51: 01:a9:aa:ce:67:ec:eb:75:38:fc:1b:e3:80:b7:6e: 46:9a:06:fc:73:20:cc:91:fd:b8:5a:61:56:b9:36: f9:cc:1c:2c:d3:4e:7c:6b:85:2c:87:bc:32:3c:20: e9:fa:4f:d5:33:60:17:8a:d6:a7:0c:b9:28:4d:39: b1:b5:7c:b7:4d:e9:39:07:f1:f1:1c:df:59:4d:20: 27:4e:95:85:ba:be:fb:7e:6c:e8:26:27:82:72:c7: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E9:35:CD:86:3A:79:E3:D3:BA:6F:BE:72:94:9C:51:37:53:76:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:2f:a0:06:76:26:38:06:93:ac:5f:a4:91:a0:86:fd:ed:02: 2a:6f:5b:6b:55:52:9f:d8:94:04:61:34:cb:03:90:78:4c:72: 40:c3:46:72:81:58:f9:16:4d:82:55:4a:32:f4:3c:d3:cd:4f: 2b:0f:d7:00:d6:b2:a0:9a:8e:02:d7:6f:48:f6:91:8a:18:ba: d7:b6:54:9b:e5:cf:ec:ad:9e:30:ad:87:13:b3:06:e0:02:d8: 8b:ba:88:3e:5d:f2:43:2d:f1:21:d6:4c:5c:40:59:5b:85:77: ac:4f:cb:e2:7d:5f:bf:a5:65:3b:46:8d:d8:b3:c4:ca:f1:f7: 3c:cd:0e:33:d8:30:d1:bf:5c:d5:3c:88:64:4e:ec:5f:be:8d: 38:c0:9a:5a:2e:db:68:49:08:8e:23:91:33:16:82:70:6a:ac: 76:d5:f0:d5:d6:bb:c1:25:90:be:41:90:b9:d1:d2:a8:5e:00: 8d:28:d7:78:1c:2b:8c:9c:49:c4:2c:fe:a0:83:77:b4:ed:ad: e7:a5:1f:25:bf:72:88:b9:89:e1:9c:bf:c7:67:f8:3c:09:6f: fb:77:6b:ec:32:e2:d4:3e:30:c8:61:bd:f6:54:b0:6b:5a:d7: 5e:31:46:92:50:cd:62:f6:81:57:96:90:c8:dc:a5:fd:ad:69: cb:96:01:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELW6k8bW6Bd1RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTRlZGYzMGUtOTI2OS00MmQ5LWFjNzQtNjczMmI4MDY4ZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9zyEIknfr6JEigb9Wyv7hNm8nC/MrP9pIA6 5ptXddHLiqiDCcwuPbuDe/jTK8Wg0DEHtSohkF17xW8ViM4b3RNIgwIXPaP/SYW8 Ra9GOxLXWKl3WB9f8XHmiIAGn4SqRBRofflVNEpPr9JNsli/Nm0YBbCwWmuP907n hIq5ZTdbp2kniGIRUm+rULzlHzjD/+Ku7JzJWHFYhkQp/vKLYoKIOFEBqarOZ+zr dTj8G+OAt25Gmgb8cyDMkf24WmFWuTb5zBws0058a4Ush7wyPCDp+k/VM2AXitan DLkoTTmxtXy3Tek5B/HxHN9ZTSAnTpWFur77fmzoJieCcseIkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPHpNc2GOnnj07pvvnKUnFE3U3Y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWRiYTY4NTUtZDA0My0z MzE4LTlmNWItZTAyNDdmNzE3MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJgvoAZ2JjgGk6xfpJGghv3tAipvW2tVUp/YlARhNMsDkHhMckDD RnKBWPkWTYJVSjL0PNPNTysP1wDWsqCajgLXb0j2kYoYute2VJvlz+ytnjCthxOz BuAC2Iu6iD5d8kMt8SHWTFxAWVuFd6xPy+J9X7+lZTtGjdizxMrx9zzNDjPYMNG/ XNU8iGRO7F++jTjAmlou22hJCI4jkTMWgnBqrHbV8NXWu8ElkL5BkLnR0qheAI0o 13gcK4ycScQs/qCDd7TtreelHyW/coi5ieGcv8dn+DwJb/t3a+wy4tQ+MMhhvfZU sGta114xRpJQzWL2gVeWkMjcpf2tacuWAWE= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:02 2025 by rpki-client