$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa File: 3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa (raw, json) Hash identifier: POtokVp7FW+vXuFqGCVNn26uVJtqM4Cme04Yxd4py0w= Subject key identifier: AE:5C:28:25:60:1C:81:AE:6B:5F:9C:79:AA:87:05:4D:E6:B8:49:CD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BCB44137A256D4984140 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:d3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bc:b4:41:37:a2:56:d4:98:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c27a8612-8c5a-416e-8f5b-a82672e4a5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f2:7e:dd:10:7b:1f:1d:1c:07:d3:38:ce:cd: 1f:25:7a:2b:c0:ae:6c:0e:fe:ad:2f:8c:4f:cb:d0: 87:39:e1:47:bf:18:79:77:c0:16:ef:6c:23:f7:00: 46:e9:cc:1b:30:c3:ec:c2:6a:19:13:90:7b:4d:d4: 4e:6f:ec:31:32:02:ff:13:27:d2:c5:f9:a0:44:6c: 78:a7:3d:e8:92:2d:7a:3e:33:6c:4d:5f:4e:15:f7: 08:32:16:eb:10:a0:47:ef:fb:1d:53:fc:a6:f4:99: 94:27:84:a9:fc:56:2b:15:ff:f8:bc:f0:d8:60:d8: b1:ee:2f:57:86:1b:62:e9:7e:16:30:c0:4b:c8:bf: 7b:e1:87:84:d6:ec:83:18:1b:74:6d:f1:e1:98:6a: fc:9a:20:3b:11:a4:a3:fb:29:78:09:6c:54:9c:c0: cc:92:20:8a:23:86:e8:14:b0:81:cf:44:42:38:38: cd:53:25:21:38:ce:c9:b0:4d:f3:b1:80:6a:60:68: 55:42:f8:88:ab:05:67:8b:f6:27:4b:bc:70:72:96: 10:fe:36:2a:ef:39:5f:83:20:20:4b:1f:ea:26:40: 58:57:8c:64:a1:45:6d:e1:9e:5c:08:89:00:39:21: 4f:22:34:01:2b:11:a0:ab:b3:f8:93:f0:ac:42:e2: f0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5C:28:25:60:1C:81:AE:6B:5F:9C:79:AA:87:05:4D:E6:B8:49:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:af:1e:97:f8:a7:94:b9:34:0b:9a:7c:b2:3d:d9:e1:58:67: 41:3e:c1:20:7b:89:cd:6f:81:b8:0e:40:32:fc:c9:8e:0a:e5: be:6d:cd:b1:cb:16:f7:3e:91:cb:3c:fb:3a:e3:79:06:98:14: a0:50:a0:c5:0e:eb:9e:b9:02:1b:e1:7f:81:80:b7:3a:ae:a3: 25:2f:3b:a6:11:cb:b6:61:8b:6d:56:89:4b:ed:d5:41:40:af: f7:24:f3:ae:81:ec:7a:a7:59:e4:f7:a7:78:36:a6:30:bd:cc: 84:c4:b9:0e:3f:24:7e:29:8c:57:fd:88:12:ee:74:43:23:2e: 64:1e:ef:0b:36:d6:ac:61:ba:4e:76:3c:64:ff:eb:ab:59:af: 02:5b:2b:42:ef:02:de:b2:7e:9a:17:72:96:2c:fe:86:93:61: 3c:1a:b1:01:ba:f4:9e:02:f3:24:49:bd:bb:e2:c1:88:1c:73: bb:20:c5:20:a4:8f:ac:e1:89:7b:77:85:e7:d3:e4:2e:a8:18: ff:a8:2a:77:df:13:c6:f3:4d:7d:08:ea:e9:6f:40:5f:6f:57: 0c:23:0f:ca:34:78:77:0a:31:62:f5:4d:67:f1:ec:49:af:cb: 9b:7f:8f:19:bd:26:9b:c9:c5:2a:d0:37:23:cb:11:b3:b8:21: 26:ab:02:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELy0QTeiVtSYQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzI3YTg2MTItOGM1YS00MTZlLThmNWItYTgyNjcyZTRhNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/J+3RB7Hx0cB9M4zs0fJXorwK5sDv6tL4xP y9CHOeFHvxh5d8AW72wj9wBG6cwbMMPswmoZE5B7TdROb+wxMgL/EyfSxfmgRGx4 pz3oki16PjNsTV9OFfcIMhbrEKBH7/sdU/ym9JmUJ4Sp/FYrFf/4vPDYYNix7i9X hhti6X4WMMBLyL974YeE1uyDGBt0bfHhmGr8miA7EaSj+yl4CWxUnMDMkiCKI4bo FLCBz0RCODjNUyUhOM7JsE3zsYBqYGhVQviIqwVni/YnS7xwcpYQ/jYq7zlfgyAg Sx/qJkBYV4xkoUVt4Z5cCIkAOSFPIjQBKxGgq7P4k/CsQuLwfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK5cKCVgHIGua1+ceaqHBU3muEnNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2FjMzQ0YjAtN2JhZi0z YmJhLWIzNGItMmNkZmM2YTBhMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqvHpf4p5S5NAuafLI92eFYZ0E+wSB7ic1vgbgOQDL8yY4K5b5t zbHLFvc+kcs8+zrjeQaYFKBQoMUO6565Ahvhf4GAtzquoyUvO6YRy7Zhi21WiUvt 1UFAr/ck866B7HqnWeT3p3g2pjC9zITEuQ4/JH4pjFf9iBLudEMjLmQe7ws21qxh uk52PGT/66tZrwJbK0LvAt6yfpoXcpYs/oaTYTwasQG69J4C8yRJvbviwYgcc7sg xSCkj6zhiXt3hefT5C6oGP+oKnffE8bzTX0I6ulvQF9vVwwjD8o0eHcKMWL1TWfx 7Emvy5t/jxm9JpvJxSrQNyPLEbO4ISarApU= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:56 2025 by rpki-client