$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd3730f-437a-38b8-b3dd-014d835d2e54.roa File: 3cd3730f-437a-38b8-b3dd-014d835d2e54.roa (raw, json) Hash identifier: eN3PdAcU4ylh9bt/IBIbSpjqKCHedKo2o4Xz2ySGThw= Subject key identifier: EA:03:DA:C8:0B:FE:0B:12:48:23:D3:E4:E4:CA:3C:C8:B7:30:67:BB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674DDFF12787B6F8981100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd3730f-437a-38b8-b3dd-014d835d2e54.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 2001:500:a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4d:df:f1:27:87:b6:f8:98:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=6515b003-05a1-4116-b18a-f33dafd17818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:48:32:68:49:72:56:90:bd:f2:33:51:ae:67: 12:e4:42:53:a0:77:68:2a:5d:95:19:c1:38:8d:4c: 14:d3:f3:43:86:71:29:34:ed:76:48:6f:d8:e7:b0: 9a:4c:db:c0:bc:cb:42:d0:6e:bd:d2:a7:dc:4c:73: dc:b2:f2:a2:6b:31:e7:89:96:b4:1a:23:0a:4e:17: 6b:52:10:9c:fb:8c:eb:b8:60:48:ed:5f:98:c5:95: 46:0e:ed:88:22:13:66:39:72:cd:78:fe:61:8e:73: a6:ae:0d:ad:49:bd:bd:e7:89:14:a4:ec:5b:f8:4f: 84:9a:34:7d:51:0d:22:c8:7e:08:e0:52:5c:cc:40: 07:d8:ae:c7:68:0d:dd:46:4e:9e:41:bc:8e:e9:08: ce:91:f9:5d:80:e5:a9:e2:b4:04:87:98:57:e9:3a: 39:3f:32:55:3c:c8:af:58:f0:c7:5e:f9:0c:40:aa: 04:a1:93:56:5b:fa:a8:ac:98:19:66:d5:86:25:fc: 68:ce:4a:7a:6c:af:f3:95:42:7e:bb:59:ea:ff:46: 4c:50:bb:5d:0c:4a:ae:b1:d5:f2:96:91:69:93:4a: 64:2c:95:e4:f4:61:54:02:ae:7a:75:b3:a2:fa:ce: b9:10:92:59:df:ce:60:8a:48:df:66:76:e4:a4:7b: e2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:03:DA:C8:0B:FE:0B:12:48:23:D3:E4:E4:CA:3C:C8:B7:30:67:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd3730f-437a-38b8-b3dd-014d835d2e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:54:9f:12:8c:c7:e3:bd:86:ad:34:86:1b:ba:a6:18:94:e6: 3c:90:5a:1c:30:f4:67:84:05:9c:69:d0:7b:53:1b:d7:ec:ca: d4:da:3b:2b:8a:f2:49:f9:87:71:f5:19:ab:fe:d6:54:78:44: f2:c8:03:72:03:72:65:34:74:32:71:6f:31:82:11:b0:bf:4f: fe:d1:dc:65:a2:27:fa:a9:c2:45:ea:17:42:e8:25:78:fb:65: 95:b2:8c:58:c8:6c:e0:df:2c:37:d7:72:89:34:79:4d:19:98: 7b:a8:f4:1f:df:43:8a:c7:b1:df:88:85:55:c3:65:93:5a:f3: 04:cb:3f:09:26:0d:be:50:7b:62:26:c8:6f:1a:44:dd:cb:bd: 24:eb:ea:ed:ba:a9:e8:41:46:41:dd:f9:13:7f:bd:e7:09:d8: 77:43:5d:4f:7a:91:7a:b9:cb:89:8f:f0:40:15:f5:9b:16:b2: cc:e2:85:bb:38:6c:93:63:d4:a2:3e:27:06:a3:0f:7f:46:88: ca:8e:ef:78:0d:9b:93:79:6c:50:d4:93:49:a1:80:d0:4c:27: 18:26:0b:2d:a4:e5:9f:71:b1:5a:ae:e5:e2:13:43:62:7a:da: 4d:f1:a5:75:6d:bc:78:fe:4c:0c:2f:98:a5:97:fb:98:25:27: 61:1b:7f:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ03f8SeHtviYEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk NjUxNWIwMDMtMDVhMS00MTE2LWIxOGEtZjMzZGFmZDE3ODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkgyaElyVpC98jNRrmcS5EJToHdoKl2VGcE4 jUwU0/NDhnEpNO12SG/Y57CaTNvAvMtC0G690qfcTHPcsvKiazHniZa0GiMKThdr UhCc+4zruGBI7V+YxZVGDu2IIhNmOXLNeP5hjnOmrg2tSb2954kUpOxb+E+EmjR9 UQ0iyH4I4FJczEAH2K7HaA3dRk6eQbyO6QjOkfldgOWp4rQEh5hX6To5PzJVPMiv WPDHXvkMQKoEoZNWW/qorJgZZtWGJfxozkp6bK/zlUJ+u1nq/0ZMULtdDEqusdXy lpFpk0pkLJXk9GFUAq56dbOi+s65EJJZ385gikjfZnbkpHviMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOoD2sgL/gsSSCPT5OTKPMi3MGe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NkMzczMGYtNDM3YS0z OGI4LWIzZGQtMDE0ZDgzNWQyZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVUnxKMx+O9hq00hhu6phiU5jyQWhww9GeEBZxp0HtTG9fsytTa OyuK8kn5h3H1Gav+1lR4RPLIA3IDcmU0dDJxbzGCEbC/T/7R3GWiJ/qpwkXqF0Lo JXj7ZZWyjFjIbODfLDfXcok0eU0ZmHuo9B/fQ4rHsd+IhVXDZZNa8wTLPwkmDb5Q e2ImyG8aRN3LvSTr6u26qehBRkHd+RN/vecJ2HdDXU96kXq5y4mP8EAV9ZsWsszi hbs4bJNj1KI+JwajD39GiMqO73gNm5N5bFDUk0mhgNBMJxgmCy2k5Z9xsVqu5eIT Q2J62k3xpXVtvHj+TAwvmKWX+5glJ2Ebf0A= -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:40 2025 by rpki-client