$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa File: 3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa (raw, json) Hash identifier: RYmgMi5i71Ku5ngkhyIvwaaLIuqLl+FnBhVuol1tc9E= Subject key identifier: 47:F6:3E:4B:51:57:3C:81:38:71:80:5D:FA:A8:15:84:86:87:40:91 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BEE77C2EB42FD0A43200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:be:e7:7c:2e:b4:2f:d0:a4:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=877bbf55-6578-4de1-8e26-d063a6a74710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b2:3e:b9:a1:16:f1:bf:cf:54:ac:67:c3:31: 18:f6:e0:5c:ad:b1:f9:a6:5d:0a:2a:2b:2f:99:97: b3:fe:ff:22:c5:4c:b5:ac:f0:64:94:50:6e:e5:54: 08:d8:0e:35:56:29:ae:76:a8:15:ac:6c:d5:dd:ca: ac:cb:4c:dc:09:6b:5a:52:5a:4c:45:22:b9:6f:b9: a8:21:1d:8d:4f:14:f0:70:da:30:8d:fe:37:8b:b6: 84:92:03:81:d4:17:67:a8:43:1f:05:28:8f:11:46: f5:68:8c:99:bf:92:32:fa:3e:f1:c7:cd:a9:1e:fa: 20:95:ce:18:cb:61:6a:f5:06:6d:a3:da:a2:9f:50: 75:ae:f8:e6:d4:30:1e:56:63:4b:1f:b5:c9:10:c6: 86:ed:39:ad:6a:69:b8:5f:de:ff:18:c6:22:8b:bd: b3:d8:90:a2:bb:25:fb:39:74:12:ae:0b:12:96:47: 30:7c:4b:ba:dc:41:65:e6:21:76:37:93:4b:6e:15: 49:23:d9:82:39:b9:fd:09:a0:2f:11:2a:18:47:a6: 81:95:e2:b3:1d:c7:e7:6e:c7:fe:c4:6f:18:07:ae: 83:d6:0d:b9:4d:a7:b5:9b:9f:dd:38:f4:36:0a:a8: bd:7c:0c:04:00:c3:08:1b:39:e4:b3:3a:6e:92:2f: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F6:3E:4B:51:57:3C:81:38:71:80:5D:FA:A8:15:84:86:87:40:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:61:f1:d8:9c:f2:a1:01:19:33:b9:65:99:b8:0f:36:b1:12: d4:8e:33:4b:90:2e:9d:2e:33:c9:16:55:a1:5c:39:7b:a2:b6: 3c:8e:ef:4a:88:f4:33:ed:96:2b:e1:19:1b:52:87:ee:aa:da: 0f:b4:90:70:4a:9c:a3:a3:cc:f7:eb:85:d1:c2:33:cb:0e:2a: 7f:be:ea:b9:08:1a:1b:16:4f:7c:e4:f8:4b:ed:ce:e1:4d:8a: a7:e0:7d:ee:48:73:b4:ef:37:3e:e7:ca:30:99:7e:7b:2b:d7: 48:60:5f:14:a9:57:38:ba:9c:26:b1:21:6c:0a:60:88:e8:f6: cd:64:c3:70:ac:70:60:2f:0c:fb:65:0c:4a:23:68:60:eb:b1: 13:6d:e8:0e:f6:29:de:7b:bb:1b:8e:2c:f5:bd:df:4b:52:6b: b0:69:7a:d0:ed:f5:d0:70:9b:d4:15:b0:77:cb:93:89:ad:61: 30:53:a1:28:04:d1:ac:3a:ba:86:51:4d:a2:40:77:3a:85:cf: 42:e9:c8:76:12:a7:18:0d:c1:88:1f:51:5f:41:69:f5:ae:5c: b5:86:05:59:72:7c:aa:71:9c:fd:1e:58:03:21:bd:d6:ed:a3: d2:c8:bb:d8:df:be:c3:5a:2f:ce:9a:19:2c:92:81:ca:f6:60: 2c:1e:1b:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEL7nfC60L9CkMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODc3YmJmNTUtNjU3OC00ZGUxLThlMjYtZDA2M2E2YTc0NzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibI+uaEW8b/PVKxnwzEY9uBcrbH5pl0KKisv mZez/v8ixUy1rPBklFBu5VQI2A41VimudqgVrGzV3cqsy0zcCWtaUlpMRSK5b7mo IR2NTxTwcNowjf43i7aEkgOB1BdnqEMfBSiPEUb1aIyZv5Iy+j7xx82pHvoglc4Y y2Fq9QZto9qin1B1rvjm1DAeVmNLH7XJEMaG7Tmtamm4X97/GMYii72z2JCiuyX7 OXQSrgsSlkcwfEu63EFl5iF2N5NLbhVJI9mCObn9CaAvESoYR6aBleKzHcfnbsf+ xG8YB66D1g25Tae1m5/dOPQ2Cqi9fAwEAMMIGznkszpuki8CIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEf2PktRVzyBOHGAXfqoFYSGh0CRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Q5ZjkyNmItNDNlNi0z YmRhLTg2YTMtYjBjNGUxN2MwYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB5h8dic8qEBGTO5ZZm4DzaxEtSOM0uQLp0uM8kWVaFcOXuitjyO 70qI9DPtlivhGRtSh+6q2g+0kHBKnKOjzPfrhdHCM8sOKn++6rkIGhsWT3zk+Evt zuFNiqfgfe5Ic7TvNz7nyjCZfnsr10hgXxSpVzi6nCaxIWwKYIjo9s1kw3CscGAv DPtlDEojaGDrsRNt6A72Kd57uxuOLPW930tSa7BpetDt9dBwm9QVsHfLk4mtYTBT oSgE0aw6uoZRTaJAdzqFz0LpyHYSpxgNwYgfUV9BafWuXLWGBVlyfKpxnP0eWAMh vdbto9LIu9jfvsNaL86aGSySgcr2YCweGyQ= -----END CERTIFICATE-----Generated at Thu Aug 7 01:03:56 2025 by rpki-client