$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa File: 4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa (raw, json) Hash identifier: c/M/HONJ0Hq2sqHqIUJVXJ8N+ZrWLQPKvveoWnFBizI= Subject key identifier: A8:E4:7A:94:1A:11:65:79:BE:A4:2B:67:69:CF:05:BF:1A:EE:5B:AF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C1DAAA7077E5AAF58F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c1:da:aa:70:77:e5:aa:f5:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ad143d1b-03c3-446c-bcfd-e2501e74a1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:85:7a:b7:7b:2c:d6:6e:ad:c7:fe:48:cc: 40:20:1b:f3:91:d7:14:96:3e:a2:33:af:19:08:a0: c7:fd:bc:b7:b0:4a:5f:2e:96:ef:f3:6c:8f:d0:28: 91:48:de:e6:03:0f:42:60:f1:c0:57:2b:43:ea:bf: e7:19:ae:b2:2e:c0:e2:6e:9f:9b:fc:cf:e3:2b:a3: d7:dc:38:65:07:8a:40:f2:0b:ae:10:75:84:e5:32: a7:94:f6:fb:23:78:8d:47:02:f1:bd:a5:99:b7:97: f5:11:c3:72:bc:f3:30:b7:fe:b1:33:9d:a1:8d:ac: 7e:e9:e0:61:a4:f6:56:5c:f3:73:3c:b7:18:86:7c: b4:d2:46:ba:87:63:39:05:17:75:c1:43:fd:ea:dc: d4:7c:0b:2f:9e:96:a6:b5:f9:e9:3e:56:69:d8:e5: 9c:69:45:62:c3:91:f4:9d:c6:61:96:73:11:f6:ec: 31:14:a0:e8:02:52:0b:b6:0e:ec:e3:fb:da:ac:c2: 0d:15:34:a3:f4:02:b6:f5:8a:61:35:c5:ae:8e:67: c9:e0:9a:d2:2b:00:d8:dc:f4:70:5b:09:5e:16:7e: 98:3a:e6:0b:f9:25:e3:98:d9:e2:a2:13:f4:05:61: fa:5a:07:a0:a0:c4:58:a7:a7:df:d8:e5:29:47:86: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E4:7A:94:1A:11:65:79:BE:A4:2B:67:69:CF:05:BF:1A:EE:5B:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:db:c1:d9:73:9f:db:7e:4f:92:62:1f:f4:09:17:99:8b:4b: 01:20:7c:84:44:74:c9:64:ca:3b:3f:ec:72:3f:6c:7c:5b:cb: 39:a9:3e:59:13:75:23:47:e4:c4:2e:c2:be:bf:f9:e4:37:0d: 83:ee:e4:21:bb:33:15:e8:6d:49:59:06:82:09:4d:1d:82:7f: 08:39:ee:f8:eb:fe:1d:11:d4:cd:38:bd:57:46:eb:60:64:1c: 36:de:84:2b:1f:f6:2c:fd:82:8d:7c:85:29:fc:0d:5f:6d:11: 3d:e6:66:5f:8b:dc:4c:85:c4:da:ac:e1:54:01:95:be:0d:9a: 37:63:97:db:21:7f:f2:63:bb:0b:16:93:8a:c0:4a:1c:ce:d0: dc:b4:c9:75:a4:28:65:3c:a6:97:f0:59:30:4e:c7:b7:92:27: 49:c3:9c:78:62:5c:e2:db:2f:cf:ec:a2:6d:33:cf:83:88:54: 02:64:b9:ae:d5:9e:4c:c8:b2:57:78:d6:54:6c:17:af:1c:0d: 40:f5:39:4f:0e:85:5c:5f:05:1a:31:8f:4f:dc:57:d5:45:51: 1e:f2:5e:5a:a7:15:92:c6:a4:cc:62:59:07:9f:69:05:f0:87: 8f:b3:ac:91:df:83:75:1a:0d:4a:7a:bf:80:02:d9:18:69:20: 45:2e:c9:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMHaqnB35ar1jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWQxNDNkMWItMDNjMy00NDZjLWJjZmQtZTI1MDFlNzRhMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog+Ferd7LNZurcf+SMxAIBvzkdcUlj6iM68Z CKDH/by3sEpfLpbv82yP0CiRSN7mAw9CYPHAVytD6r/nGa6yLsDibp+b/M/jK6PX 3DhlB4pA8guuEHWE5TKnlPb7I3iNRwLxvaWZt5f1EcNyvPMwt/6xM52hjax+6eBh pPZWXPNzPLcYhny00ka6h2M5BRd1wUP96tzUfAsvnpamtfnpPlZp2OWcaUViw5H0 ncZhlnMR9uwxFKDoAlILtg7s4/varMINFTSj9AK29YphNcWujmfJ4JrSKwDY3PRw WwleFn6YOuYL+SXjmNniohP0BWH6WgegoMRYp6ff2OUpR4bfnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKjkepQaEWV5vqQrZ2nPBb8a7luvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGIxZmZlNWYtNGY2OS0z OTJmLWExYzgtZDk3ZGRhNDY3MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAALbwdlzn9t+T5JiH/QJF5mLSwEgfIREdMlkyjs/7HI/bHxbyzmp PlkTdSNH5MQuwr6/+eQ3DYPu5CG7MxXobUlZBoIJTR2Cfwg57vjr/h0R1M04vVdG 62BkHDbehCsf9iz9go18hSn8DV9tET3mZl+L3EyFxNqs4VQBlb4Nmjdjl9shf/Jj uwsWk4rAShzO0Ny0yXWkKGU8ppfwWTBOx7eSJ0nDnHhiXOLbL8/som0zz4OIVAJk ua7VnkzIsld41lRsF68cDUD1OU8OhVxfBRoxj0/cV9VFUR7yXlqnFZLGpMxiWQef aQXwh4+zrJHfg3UaDUp6v4AC2RhpIEUuybM= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:18 2025 by rpki-client