$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa File: 501986f1-6af8-32f5-b7de-589152f724d2.roa (raw, json) Hash identifier: bqjM4DEVA8nmpvq66qfoHo59fFHT6j1laqOpWER//PM= Subject key identifier: B4:5B:45:E7:3F:C8:A4:9F:5D:99:45:DA:E7:75:BF:B9:30:27:5D:9F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410B519068C3F68F7AF9840 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:b5:19:06:8c:3f:68:f7:af:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b04ceb07-e158-40f6-9be8-6922a4ca5bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2d:0e:72:9d:52:f3:1e:4d:49:f2:b6:fa:45: 27:ec:a7:1e:3e:55:a2:75:08:3f:77:e7:b1:74:3c: 0e:a4:83:10:55:21:ba:38:ff:12:c6:a1:51:79:e3: 46:24:52:e9:ef:9e:ac:ad:7f:7c:05:0a:cb:10:f9: 46:89:f7:19:54:96:48:c2:77:ce:10:c6:cd:d4:73: 1c:c5:8b:34:77:cc:80:13:ad:dc:6e:19:21:aa:67: df:76:29:43:cf:f9:10:ff:5f:20:03:23:f2:93:0c: 5e:8a:46:23:fd:9b:b2:de:11:ec:06:44:05:87:d8: be:18:25:13:92:51:8b:06:0f:44:37:be:65:a8:e5: 63:de:58:5e:ba:5a:fe:fd:2f:22:6d:9b:48:1c:f1: 55:f8:74:c4:ed:4e:13:ad:cb:19:e5:7a:ec:92:8f: 8c:40:c4:bd:30:5b:50:0f:90:ee:06:48:d3:e1:17: a9:1c:2e:c2:af:26:47:d2:15:d1:6a:cf:b7:f7:1e: 71:2a:9b:cf:46:94:72:ad:94:7e:d5:f6:30:84:c5: 41:bd:68:f9:2f:7c:1f:1b:13:95:b8:ea:10:cf:aa: e9:e0:a2:a9:13:88:e8:bd:ce:1b:13:c7:be:32:68: cc:86:6b:da:3d:ba:b9:3c:f2:51:5d:0b:1f:14:7c: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5B:45:E7:3F:C8:A4:9F:5D:99:45:DA:E7:75:BF:B9:30:27:5D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:52:72:0d:ee:3b:26:cd:01:e5:d9:e7:1b:43:0c:00:a3:f2: b3:d0:de:9f:e9:f6:fa:b5:07:dc:68:72:6d:f3:79:32:13:c3: 05:70:7c:02:3c:58:9a:fc:e7:40:b0:6e:66:50:2e:93:05:74: 3f:06:12:01:f2:d9:ae:ae:17:fe:b1:f1:b3:00:85:72:a9:ab: 48:ed:a9:11:0b:41:bd:cb:ea:5f:cb:12:cf:ce:84:6d:5c:65: 70:30:2b:3a:10:32:75:3d:0d:4a:70:db:95:0a:d3:48:a3:54: 25:4c:61:be:32:29:0a:c2:e6:eb:75:4a:10:42:3b:47:2d:1e: a3:94:22:dc:0d:5d:34:2e:9c:1b:2a:94:27:3e:ba:99:c7:97: 96:e6:a4:d9:d1:2d:92:df:a9:6e:e9:c1:a6:94:65:2a:1c:71: 5a:5e:87:8d:05:49:ff:80:55:da:8f:3c:8c:37:ef:38:2d:c7: 27:c1:4a:cf:0d:99:92:7a:16:f3:bd:85:18:95:0b:a6:ae:44: 8f:3d:69:1f:10:63:cc:63:9c:d9:14:23:ae:b2:3c:89:d5:f2: 86:49:62:6c:c0:fe:b8:7e:75:e1:24:34:fe:fc:1c:fa:2d:c4: 0c:e4:e5:43:5f:1f:8b:bb:77:42:cc:78:b3:91:3e:d3:37:bc: 06:3c:82:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELUZBow/aPevmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjA0Y2ViMDctZTE1OC00MGY2LTliZTgtNjkyMmE0Y2E1YmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy0Ocp1S8x5NSfK2+kUn7KcePlWidQg/d+ex dDwOpIMQVSG6OP8SxqFReeNGJFLp756srX98BQrLEPlGifcZVJZIwnfOEMbN1HMc xYs0d8yAE63cbhkhqmffdilDz/kQ/18gAyPykwxeikYj/Zuy3hHsBkQFh9i+GCUT klGLBg9EN75lqOVj3lheulr+/S8ibZtIHPFV+HTE7U4TrcsZ5Xrsko+MQMS9MFtQ D5DuBkjT4RepHC7CryZH0hXRas+39x5xKpvPRpRyrZR+1fYwhMVBvWj5L3wfGxOV uOoQz6rp4KKpE4jovc4bE8e+MmjMhmvaPbq5PPJRXQsfFHysWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLRbRec/yKSfXZlF2ud1v7kwJ12fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTAxOTg2ZjEtNmFmOC0z MmY1LWI3ZGUtNTg5MTUyZjcyNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKpScg3uOybNAeXZ5xtDDACj8rPQ3p/p9vq1B9xocm3zeTITwwVw fAI8WJr850CwbmZQLpMFdD8GEgHy2a6uF/6x8bMAhXKpq0jtqRELQb3L6l/LEs/O hG1cZXAwKzoQMnU9DUpw25UK00ijVCVMYb4yKQrC5ut1ShBCO0ctHqOUItwNXTQu nBsqlCc+upnHl5bmpNnRLZLfqW7pwaaUZSoccVpeh40FSf+AVdqPPIw37zgtxyfB Ss8NmZJ6FvO9hRiVC6auRI89aR8QY8xjnNkUI66yPInV8oZJYmzA/rh+deEkNP78 HPotxAzk5UNfH4u7d0LMeLORPtM3vAY8gmo= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:08 2025 by rpki-client