$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa File: 30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa (raw, json) Hash identifier: f+hxIrQBxAf9ToeaSVbvEbDIH3P96GmX67lpO3ZEG38= Subject key identifier: 60:B3:0D:5B:30:A1:08:B2:E3:42:FD:3F:52:FE:D3:C5:1C:1A:7B:8B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410B5927BE491D92AEB1C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:b5:92:7b:e4:91:d9:2a:eb:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=365954db-38fb-472a-90ae-89be9d3983ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:d3:ce:0a:08:b2:ec:9c:99:ef:66:c3:1f: 8d:41:55:ce:c6:a8:d8:56:64:72:1e:40:de:23:00: 79:ad:48:a3:27:9d:3f:0d:8b:27:fc:d3:08:d1:56: 83:29:18:4c:e9:60:5a:26:82:ce:e0:82:bc:30:0d: b3:06:d1:90:cc:01:7c:c1:4d:eb:32:85:25:e4:4f: 33:d1:32:1a:5f:5d:95:00:dd:63:14:95:0e:33:9d: 41:a0:cb:ed:c3:7d:4e:37:84:d1:dd:58:26:49:42: 55:09:d9:85:0e:ae:80:f9:f8:30:00:50:d9:48:b6: e8:7b:17:02:8b:3d:37:41:f9:ad:ac:9d:e5:76:ac: 3b:51:d1:be:73:58:97:2e:fc:63:5a:9c:1f:45:68: d3:d6:2e:c5:4d:a2:4e:7b:64:1b:8a:ab:ef:5b:c5: d1:91:5a:e1:c4:a0:35:b8:7b:d7:30:24:41:02:c3: 5f:02:f4:7e:0a:b0:ec:3c:c9:f5:03:b4:06:b4:f4: 91:20:31:3b:e1:aa:4e:68:c7:ec:80:4e:2c:92:ac: 23:d9:c0:cb:e0:c8:25:2c:ff:45:1f:db:69:94:13: 10:49:98:4d:3c:fb:ce:fe:71:cb:50:7d:af:ea:54: 24:da:f9:3b:8c:f8:2c:af:eb:df:c9:2e:60:38:17: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B3:0D:5B:30:A1:08:B2:E3:42:FD:3F:52:FE:D3:C5:1C:1A:7B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c2:cb:94:be:50:02:2e:16:94:21:3c:b2:1d:e7:f7:28:3d: df:48:38:f5:50:87:43:52:05:47:33:5d:6b:f8:74:4a:90:80: c0:7a:29:89:da:d3:a8:08:7b:8f:2e:c2:4b:c0:a5:45:22:c3: 78:72:27:a8:91:64:90:b7:8d:33:43:a4:31:89:07:c8:0e:c4: 86:ad:2a:84:5f:6c:67:8b:77:2d:2b:8b:61:fe:7a:91:a0:70: 16:2f:1f:9a:b0:6f:2f:01:d8:c7:4e:4e:9c:f9:1d:84:0d:b8: 67:d5:1e:62:6a:1c:2c:55:d2:f6:a9:a5:95:90:1c:df:4c:e8: 55:9f:8e:91:45:a6:83:77:de:16:4a:3b:16:cc:c8:90:0f:af: 16:a3:08:a1:ba:5e:99:06:19:ff:41:b9:4e:04:8f:bf:7f:c8: 26:e8:48:e3:cd:90:45:40:a2:a0:30:ee:08:b1:56:70:46:a1: 8c:bd:e7:06:7a:3f:7d:4b:06:71:59:97:b4:ec:b3:46:a9:67: 71:6b:0a:80:85:4e:7c:a6:fb:47:ed:2a:7e:1b:49:03:a6:cb: 3d:e7:6e:f2:45:2a:2e:7c:83:fb:0b:65:02:24:2a:5e:38:6d: da:87:b3:66:65:dd:b1:cb:56:e5:82:18:f6:82:1c:72:5c:33: 37:ed:e5:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELWSe+SR2SrrHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzY1OTU0ZGItMzhmYi00NzJhLTkwYWUtODliZTlkMzk4M2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPHTzgoIsuycme9mwx+NQVXOxqjYVmRyHkDe IwB5rUijJ50/DYsn/NMI0VaDKRhM6WBaJoLO4IK8MA2zBtGQzAF8wU3rMoUl5E8z 0TIaX12VAN1jFJUOM51BoMvtw31ON4TR3VgmSUJVCdmFDq6A+fgwAFDZSLboexcC iz03QfmtrJ3ldqw7UdG+c1iXLvxjWpwfRWjT1i7FTaJOe2QbiqvvW8XRkVrhxKA1 uHvXMCRBAsNfAvR+CrDsPMn1A7QGtPSRIDE74apOaMfsgE4skqwj2cDL4MglLP9F H9tplBMQSZhNPPvO/nHLUH2v6lQk2vk7jPgsr+vfyS5gOBeI5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGCzDVswoQiy40L9P1L+08UcGnuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzBmMmU4YzktZDQ0My0z MjJhLWIyZWMtODc4ODQ4YTdjN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB/Cy5S+UAIuFpQhPLId5/coPd9IOPVQh0NSBUczXWv4dEqQgMB6 KYna06gIe48uwkvApUUiw3hyJ6iRZJC3jTNDpDGJB8gOxIatKoRfbGeLdy0ri2H+ epGgcBYvH5qwby8B2MdOTpz5HYQNuGfVHmJqHCxV0vappZWQHN9M6FWfjpFFpoN3 3hZKOxbMyJAPrxajCKG6XpkGGf9BuU4Ej79/yCboSOPNkEVAoqAw7gixVnBGoYy9 5wZ6P31LBnFZl7Tss0apZ3FrCoCFTnym+0ftKn4bSQOmyz3nbvJFKi58g/sLZQIk Kl44bdqHs2Zl3bHLVuWCGPaCHHJcMzft5UY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:20:28 2025 by rpki-client