$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa File: 4546c97d-ce09-36b4-ab62-95f581ad6db4.roa (raw, json) Hash identifier: m3nrolVbCI+NX1PquekDPb5hirdvBrOqI8fjmk0km0s= Subject key identifier: 6A:67:BF:CE:B6:B9:CF:B8:AE:B3:51:57:AA:15:B2:B5:1C:A9:4A:17 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C17A24864AD75D9BCC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c1:7a:24:86:4a:d7:5d:9b:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2242d7ad-63d8-445c-8694-34c72a35dc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:36:17:41:44:eb:6f:4b:1b:85:35:51:0d: 44:bb:cb:69:7c:6e:61:35:bc:93:1c:be:7b:ad:bd: 98:90:3a:69:1e:79:3c:25:4d:c3:27:7b:bd:47:36: a6:d7:25:3f:65:24:6f:48:2f:97:43:7f:20:bf:f1: 85:a1:cd:a3:4a:55:66:02:26:9f:9a:cc:e6:a0:c3: a8:67:3a:70:f6:10:bb:d5:20:b8:81:6e:6e:d4:3e: f4:1f:da:fc:65:4d:4f:d9:95:45:d7:ee:64:10:b7: 46:c5:6b:59:6c:00:62:7b:74:d3:86:11:ae:56:46: 32:99:ad:e2:ef:83:22:93:d0:4c:02:77:cf:9c:e1: 2e:67:0e:61:21:5c:28:cd:b1:75:54:30:f0:6d:27: 00:93:f4:45:3f:f8:5b:f7:86:d4:59:dd:c4:5b:ba: 48:7e:56:e3:ab:f5:e8:42:19:e6:dd:fe:2e:a2:5d: 64:8d:1f:c3:2d:17:87:de:4e:35:25:f5:1a:b7:a9: 8c:f9:84:c9:1c:a8:1a:79:93:c4:bb:2b:c4:b0:f3: 84:38:9a:b6:0d:60:98:f7:ac:33:b6:c4:a8:91:84: 6f:c2:97:19:e1:5c:c9:fc:29:1f:95:ca:73:a0:a8: 3a:bd:df:9e:9a:88:10:ee:cf:ac:23:da:5b:23:56: b8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:67:BF:CE:B6:B9:CF:B8:AE:B3:51:57:AA:15:B2:B5:1C:A9:4A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:26::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:dc:07:26:df:9d:87:0c:35:66:19:7d:52:39:b9:e1:b5:9a: c3:12:98:b2:61:08:2f:0e:ba:95:e4:a6:b7:7d:92:66:70:e6: df:33:e7:de:c5:d6:c1:f5:ab:55:89:33:88:57:66:78:20:00: ec:e5:d4:08:28:91:90:52:51:d2:ee:b0:6e:98:b0:e8:00:09: 2d:7e:93:d2:d7:89:18:e3:07:93:9d:35:99:e5:0f:62:9c:e5: eb:c2:d6:72:16:e4:6b:a8:69:d3:03:93:f7:82:7e:2c:06:36: b8:f5:a2:f0:f7:69:72:82:fb:19:75:a2:bc:10:b8:06:9b:4f: 40:14:db:0c:f6:99:29:a9:d1:8f:f0:fc:6d:49:8e:ad:f6:e1: c4:61:df:2a:c5:f1:77:1c:44:4a:23:50:0e:70:5e:91:35:4e: 51:48:5b:bd:d6:0a:19:37:18:cd:16:1f:ee:a0:77:62:78:ad: 1b:b3:30:61:d3:b4:19:20:d6:ab:68:6b:48:09:30:53:3d:01: 95:de:ec:72:9f:0a:16:78:93:9b:99:2f:ac:a6:fb:e7:cf:88: cd:73:af:b1:16:3c:95:a0:91:4b:5a:8f:cc:4b:ae:1e:5f:6f: f9:53:6e:a4:15:15:b3:a0:24:69:5f:53:c7:e3:42:c4:91:fd: dc:6d:f8:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMF6JIZK112bzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjI0MmQ3YWQtNjNkOC00NDVjLTg2OTQtMzRjNzJhMzVkYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSM2F0FE629LG4U1UQ1Eu8tpfG5hNbyTHL57 rb2YkDppHnk8JU3DJ3u9Rzam1yU/ZSRvSC+XQ38gv/GFoc2jSlVmAiafmszmoMOo Zzpw9hC71SC4gW5u1D70H9r8ZU1P2ZVF1+5kELdGxWtZbABie3TThhGuVkYyma3i 74Mik9BMAnfPnOEuZw5hIVwozbF1VDDwbScAk/RFP/hb94bUWd3EW7pIflbjq/Xo Qhnm3f4uol1kjR/DLReH3k41JfUat6mM+YTJHKgaeZPEuyvEsPOEOJq2DWCY96wz tsSokYRvwpcZ4VzJ/CkflcpzoKg6vd+emogQ7s+sI9pbI1a4vQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGpnv862uc+4rrNRV6oVsrUcqUoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDU0NmM5N2QtY2UwOS0z NmI0LWFiNjItOTVmNTgxYWQ2ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACrcBybfnYcMNWYZfVI5ueG1msMSmLJhCC8OupXkprd9kmZw5t8z 597F1sH1q1WJM4hXZnggAOzl1AgokZBSUdLusG6YsOgACS1+k9LXiRjjB5OdNZnl D2Kc5evC1nIW5GuoadMDk/eCfiwGNrj1ovD3aXKC+xl1orwQuAabT0AU2wz2mSmp 0Y/w/G1Jjq324cRh3yrF8XccREojUA5wXpE1TlFIW73WChk3GM0WH+6gd2J4rRuz MGHTtBkg1qtoa0gJMFM9AZXe7HKfChZ4k5uZL6ym++fPiM1zr7EWPJWgkUtaj8xL rh5fb/lTbqQVFbOgJGlfU8fjQsSR/dxt+CI= -----END CERTIFICATE-----Generated at Thu Aug 7 12:57:51 2025 by rpki-client