$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/43117425-905b-3355-9503-e90e2655c0b0.roa File: 43117425-905b-3355-9503-e90e2655c0b0.roa (raw, json) Hash identifier: 4xnSgDfibfKXYol/LYIRyXJ/3/SJnjId/11S2Z/rdJY= Subject key identifier: F8:5F:E3:F4:39:95:CE:B2:9A:35:CF:95:C3:11:29:39:A5:9F:3F:78 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C2DC21B4C1F738F63F40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/43117425-905b-3355-9503-e90e2655c0b0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c2:dc:21:b4:c1:f7:38:f6:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bfb8128c-b54e-4973-bbb0-68a17b191910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:f6:d4:b3:e5:78:1b:17:fc:a5:b7:30:cb: b8:1f:5a:c6:fc:46:71:ea:7a:6d:42:f3:56:e2:78: b2:6a:e7:ed:4d:4e:03:ec:ee:a0:31:d5:d4:b2:c9: c0:ac:05:a5:7a:f9:9b:92:c3:25:e6:5e:50:50:2d: ae:b9:ce:48:f0:c4:2c:a4:f8:09:55:07:19:c6:14: 47:b7:e8:cd:5b:b5:ac:fc:ef:f9:75:50:ee:1a:b6: 76:c2:67:9f:5f:20:22:8f:f0:1b:f5:05:6b:1d:88: 9d:f1:94:3d:70:db:3c:7b:bd:e5:92:40:f6:36:1e: e9:e9:04:fa:3e:f7:a4:a4:a3:7f:d4:da:c7:13:22: 9e:80:65:54:07:cd:ea:f0:12:20:89:93:24:d1:af: 46:ea:3e:c7:8d:95:e0:69:ac:9f:ce:f4:90:2b:48: b0:16:42:9c:a7:99:f9:b6:5b:2c:92:dd:b3:42:e7: 16:e0:e0:4a:68:6b:33:1f:36:4f:af:53:43:ae:24: 86:60:70:20:f2:da:73:a4:0d:2d:37:0e:4b:64:af: ea:f3:cd:b8:4e:0c:d1:a1:7a:a5:6f:8c:1d:14:b9: e6:f9:8d:f1:e3:cd:87:45:45:aa:d9:12:bb:e3:4f: 22:ec:32:e1:59:97:11:5e:92:0d:88:1b:44:64:d6: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5F:E3:F4:39:95:CE:B2:9A:35:CF:95:C3:11:29:39:A5:9F:3F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/43117425-905b-3355-9503-e90e2655c0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:56::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ac:b4:2f:24:4d:2a:04:13:52:36:4f:74:ae:a9:dc:05:fa: 31:5e:af:6e:28:82:75:41:ef:96:79:2d:8b:a9:8c:3c:1d:d3: 15:64:31:54:07:87:68:8f:d4:35:09:af:f8:e6:b4:08:40:87: 10:70:8e:2d:4d:08:ff:dd:8c:a6:b9:fd:51:99:32:9d:ec:1f: a2:de:7f:90:15:be:4b:84:c3:ce:86:e6:4e:bf:44:95:f7:9a: 39:e1:7b:2c:fb:84:69:3a:92:61:c9:31:a3:8a:25:14:d2:dd: 82:35:af:0f:63:21:f7:ae:ae:7f:3b:14:94:b9:e7:bb:49:3f: 38:40:6b:18:6c:23:fa:ab:c7:16:4e:bb:a5:54:e8:30:0c:e3: 2c:fd:b4:e6:cc:fc:5d:14:f9:fc:b1:4a:66:d4:6f:7b:fd:20: 4f:c1:d5:90:ae:d7:18:4a:25:86:50:b4:e1:6f:78:34:25:47: 71:a0:be:2d:ec:1d:86:ae:b2:8b:aa:4a:64:a0:e3:cf:e8:e5: ea:8c:86:ac:70:1e:d0:0f:dc:95:eb:2a:96:0c:c1:36:d3:b1: 53:68:42:63:74:00:47:8c:06:1f:1a:ee:11:31:28:47:b4:cd: f7:f8:c5:9d:78:da:d3:db:df:74:5c:4f:3e:25:8f:1c:90:31: 64:9f:9d:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMLcIbTB9zj2P0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmZiODEyOGMtYjU0ZS00OTczLWJiYjAtNjhhMTdiMTkxOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLv21LPleBsX/KW3MMu4H1rG/EZx6nptQvNW 4niyauftTU4D7O6gMdXUssnArAWlevmbksMl5l5QUC2uuc5I8MQspPgJVQcZxhRH t+jNW7Ws/O/5dVDuGrZ2wmefXyAij/Ab9QVrHYid8ZQ9cNs8e73lkkD2Nh7p6QT6 PvekpKN/1NrHEyKegGVUB83q8BIgiZMk0a9G6j7HjZXgaayfzvSQK0iwFkKcp5n5 tlsskt2zQucW4OBKaGszHzZPr1NDriSGYHAg8tpzpA0tNw5LZK/q8824TgzRoXql b4wdFLnm+Y3x482HRUWq2RK7408i7DLhWZcRXpINiBtEZNbF8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhf4/Q5lc6ymjXPlcMRKTmlnz94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDMxMTc0MjUtOTA1Yi0z MzU1LTk1MDMtZTkwZTI2NTVjMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADOstC8kTSoEE1I2T3SuqdwF+jFer24ognVB75Z5LYupjDwd0xVk MVQHh2iP1DUJr/jmtAhAhxBwji1NCP/djKa5/VGZMp3sH6Lef5AVvkuEw86G5k6/ RJX3mjnheyz7hGk6kmHJMaOKJRTS3YI1rw9jIfeurn87FJS557tJPzhAaxhsI/qr xxZOu6VU6DAM4yz9tObM/F0U+fyxSmbUb3v9IE/B1ZCu1xhKJYZQtOFveDQlR3Gg vi3sHYausouqSmSg48/o5eqMhqxwHtAP3JXrKpYMwTbTsVNoQmN0AEeMBh8a7hEx KEe0zff4xZ142tPb33RcTz4ljxyQMWSfnSg= -----END CERTIFICATE-----Generated at Thu Aug 7 03:55:13 2025 by rpki-client