$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa File: 30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa (raw, json) Hash identifier: IxSUoxURPERmlJ7fozZmrupRZ8ifhUltXtr12LTXlnQ= Subject key identifier: 0E:C4:6C:E3:60:52:2C:02:46:6B:06:91:ED:44:38:49:47:AF:64:D6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CC86D58C1D2A36CBEC0C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:86:d5:8c:1d:2a:36:cb:ec:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=de2aa324-5565-4d8f-80a7-c39d9c6d74f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:51:3a:0d:1d:fa:96:cb:66:d2:8d:31:49: 90:1e:b8:97:1a:86:39:00:08:43:0d:08:8c:e3:12: 39:39:11:50:9a:79:d2:5e:0b:27:92:b0:4f:63:67: 28:68:29:a0:c7:e6:04:b1:1a:78:7f:b5:c8:68:4c: 0e:26:36:17:35:72:4b:d5:97:dd:e9:fb:f1:c2:14: 91:d2:07:52:b3:ae:31:57:91:c5:fb:0c:3b:a2:b2: 0b:16:be:6f:55:26:1a:59:55:63:c9:99:dc:d7:a5: 24:8d:96:dc:ae:76:1f:6c:ca:b6:a6:84:55:99:b7: 6c:d9:89:e7:ca:31:90:57:b1:4b:e7:39:b6:fc:dc: 5d:4f:4c:6a:88:a4:47:63:69:93:b2:87:fb:bf:0e: 62:22:19:99:9d:ea:84:70:c1:45:05:f8:f7:11:f5: 94:50:a9:11:c2:02:c2:13:cb:b9:70:29:7c:66:45: c0:e8:a7:62:f7:63:37:70:8a:2d:24:88:f6:bc:d8: 65:d0:ee:33:84:e7:a7:6e:a5:81:60:57:6e:e5:81: 2e:a9:be:13:85:f8:72:4c:c2:f9:f3:2e:c9:ef:00: 8b:36:22:6d:b0:47:cb:58:91:b6:73:00:bc:ba:37: 11:08:55:a3:cf:b6:d2:2e:dc:7a:25:38:31:1d:12: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C4:6C:E3:60:52:2C:02:46:6B:06:91:ED:44:38:49:47:AF:64:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:93:59:c7:58:a6:8d:c8:b3:f2:75:6b:9a:4e:ef:e7:96:a9: 94:59:5b:c5:57:fa:44:2a:38:18:26:43:a0:b2:4b:13:2c:c7: b6:9f:e7:f4:61:ee:3d:1e:2e:b5:d9:f3:2e:7a:1e:7d:15:d3: fe:01:18:1c:0f:22:9e:06:c0:c2:fc:4a:77:e6:54:44:c2:83: 8a:de:ef:d4:63:3c:e1:67:c3:bd:ce:43:4b:08:5c:d2:92:3f: 15:fe:7b:08:a6:26:ee:61:24:65:94:61:00:1d:d5:e5:0b:66: d1:4f:af:f4:50:ed:fa:e9:2b:7b:97:22:55:44:ba:12:7e:6f: f6:a4:d0:8b:d1:35:5e:2f:f2:a1:84:2e:c3:d4:7f:f0:dc:6b: 8b:2d:70:fd:cd:5a:a5:b8:28:4d:17:2a:af:40:b6:2b:34:0f: 98:29:a6:86:fa:36:f6:e7:11:70:e2:af:c3:6d:6a:f9:e6:73: 0d:d2:e5:e5:9d:d6:ac:43:dd:b2:52:81:f7:b7:26:27:2d:20: 53:38:cf:c2:54:13:a3:0c:43:5d:a4:c6:a5:1b:9e:80:d1:92: 6e:09:a6:13:c3:41:e0:81:24:c1:c5:81:70:57:10:7f:69:57: e8:f6:6e:4c:f3:44:a1:f5:49:7a:64:e7:08:8e:2b:02:5f:44: 96:c5:a2:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzIbVjB0qNsvsDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGUyYWEzMjQtNTU2NS00ZDhmLTgwYTctYzM5ZDljNmQ3NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudBROg0d+pbLZtKNMUmQHriXGoY5AAhDDQiM 4xI5ORFQmnnSXgsnkrBPY2coaCmgx+YEsRp4f7XIaEwOJjYXNXJL1Zfd6fvxwhSR 0gdSs64xV5HF+ww7orILFr5vVSYaWVVjyZnc16UkjZbcrnYfbMq2poRVmbds2Ynn yjGQV7FL5zm2/NxdT0xqiKRHY2mTsof7vw5iIhmZneqEcMFFBfj3EfWUUKkRwgLC E8u5cCl8ZkXA6Kdi92M3cIotJIj2vNhl0O4zhOenbqWBYFdu5YEuqb4ThfhyTML5 8y7J7wCLNiJtsEfLWJG2cwC8ujcRCFWjz7bSLtx6JTgxHRJ6EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA7EbONgUiwCRmsGke1EOElHr2TWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzBmMmU4YzktZDQ0My0z MjJhLWIyZWMtODc4ODQ4YTdjN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADGTWcdYpo3Is/J1a5pO7+eWqZRZW8VX+kQqOBgmQ6CySxMsx7af 5/Rh7j0eLrXZ8y56Hn0V0/4BGBwPIp4GwML8SnfmVETCg4re79RjPOFnw73OQ0sI XNKSPxX+ewimJu5hJGWUYQAd1eULZtFPr/RQ7frpK3uXIlVEuhJ+b/ak0IvRNV4v 8qGELsPUf/Dca4stcP3NWqW4KE0XKq9Atis0D5gppob6NvbnEXDir8Ntavnmcw3S 5eWd1qxD3bJSgfe3JictIFM4z8JUE6MMQ12kxqUbnoDRkm4JphPDQeCBJMHFgXBX EH9pV+j2bkzzRKH1SXpk5wiOKwJfRJbFos8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:39 2025 by rpki-client