$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53130a6c-6f38-30f2-b274-5578ac5dab55.roa File: 53130a6c-6f38-30f2-b274-5578ac5dab55.roa (raw, json) Hash identifier: oB1JPtHSh1Lgh5jBx0Ud9V+bkUNP49JHJSc6kt3j5ZE= Subject key identifier: 37:EE:8C:6D:34:D4:0B:89:D6:3F:57:D9:B8:D2:DA:E0:72:88:77:C0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BCA2E99BC74090CC3480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53130a6c-6f38-30f2-b274-5578ac5dab55.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:d2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bc:a2:e9:9b:c7:40:90:cc:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8d86e812-7cd3-43b5-a6f3-5107312982a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:94:24:ba:d3:ad:8a:b2:8c:8f:b4:df:2c: 02:3f:03:f2:02:95:85:3c:f7:57:a5:12:1e:e4:98: da:2f:ed:82:1b:c1:52:2e:5b:7a:08:22:e1:69:b9: 6d:df:c6:0b:f6:55:50:14:f6:c5:42:5b:c0:a9:8d: 1a:f9:68:ee:cc:22:87:08:f6:cd:ef:66:6f:96:01: af:38:e4:c6:4a:85:53:c9:db:dc:20:85:3a:76:0d: b9:fa:7e:34:53:65:8e:ec:0b:b3:67:18:65:a7:21: f5:58:31:a4:73:a3:19:b6:b4:09:a8:d5:d4:85:49: a4:f0:30:8f:f7:03:e8:61:69:eb:36:d0:54:50:31: e4:20:d9:55:da:72:d0:bb:02:bd:04:b2:bf:7e:87: 96:0e:b6:d7:e3:e6:8b:d1:99:1f:a5:98:5a:7f:72: e1:f2:50:26:45:3b:22:6a:ea:c0:99:1e:36:ee:60: 85:5f:49:74:dd:94:48:d8:c6:15:b7:92:4a:8c:c7: ed:8a:66:34:38:43:07:0b:7d:0d:b1:f7:a1:c3:03: a9:24:86:d3:10:da:9b:bd:84:5b:6b:2c:77:cf:f8: ec:38:b1:62:9a:9f:e9:40:00:73:dc:4c:14:0d:c0: f7:8b:23:8c:1b:e1:ac:4b:68:bd:19:16:ff:21:f6: 10:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EE:8C:6D:34:D4:0B:89:D6:3F:57:D9:B8:D2:DA:E0:72:88:77:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53130a6c-6f38-30f2-b274-5578ac5dab55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:30:45:7c:1a:f5:b9:de:22:61:f8:53:d8:13:57:78:82:c4: 15:44:12:ea:3e:20:1d:f2:5d:7f:bd:bd:7a:b7:47:3b:ed:a2: 05:78:ad:ee:78:a4:35:49:42:fc:97:b5:cd:4a:18:e3:0c:21: 0e:29:f3:aa:c5:b3:8b:73:7e:83:67:bc:8b:69:cc:ae:69:eb: 95:ce:16:57:4b:d0:d2:0b:0b:64:45:f0:61:0e:24:ae:a5:eb: 5d:71:d2:e3:1b:4b:d5:99:a9:14:1f:8e:8f:f3:d6:0c:fa:b4: 00:67:e8:1c:12:4e:38:98:69:e2:e2:c0:29:9c:99:65:e8:78: fc:5a:ad:cf:a3:71:c3:ab:1f:b5:62:ce:51:8c:bb:30:2a:72: 28:82:87:b7:c8:9f:f8:1a:0f:15:c8:93:12:f6:10:56:79:09: 22:93:df:63:2c:d7:41:15:8a:f8:8f:e5:db:9b:14:da:0a:ba: 1f:27:ca:1e:86:5d:b4:82:4e:f5:0f:ce:e4:93:a7:6f:00:a6: 71:a1:2f:4e:a1:89:a2:8f:fc:aa:b5:c1:f9:63:e6:12:56:92: 35:61:2d:23:84:ce:b7:9d:e8:01:12:ce:fc:77:f1:17:38:3e: 48:1a:47:a5:71:df:24:14:4f:c3:e5:b2:93:c6:a3:c7:bb:71: 2f:11:54:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELyi6ZvHQJDMNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGQ4NmU4MTItN2NkMy00M2I1LWE2ZjMtNTEwNzMxMjk4MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSyUJLrTrYqyjI+03ywCPwPyApWFPPdXpRIe 5JjaL+2CG8FSLlt6CCLhablt38YL9lVQFPbFQlvAqY0a+WjuzCKHCPbN72ZvlgGv OOTGSoVTydvcIIU6dg25+n40U2WO7AuzZxhlpyH1WDGkc6MZtrQJqNXUhUmk8DCP 9wPoYWnrNtBUUDHkINlV2nLQuwK9BLK/foeWDrbX4+aL0ZkfpZhaf3Lh8lAmRTsi aurAmR427mCFX0l03ZRI2MYVt5JKjMftimY0OEMHC30NsfehwwOpJIbTENqbvYRb ayx3z/jsOLFimp/pQABz3EwUDcD3iyOMG+GsS2i9GRb/IfYQ/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDfujG001AuJ1j9X2bjS2uByiHfAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTMxMzBhNmMtNmYzOC0z MGYyLWIyNzQtNTU3OGFjNWRhYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4wRXwa9bneImH4U9gTV3iCxBVEEuo+IB3yXX+9vXq3RzvtogV4 re54pDVJQvyXtc1KGOMMIQ4p86rFs4tzfoNnvItpzK5p65XOFldL0NILC2RF8GEO JK6l611x0uMbS9WZqRQfjo/z1gz6tABn6BwSTjiYaeLiwCmcmWXoePxarc+jccOr H7VizlGMuzAqciiCh7fIn/gaDxXIkxL2EFZ5CSKT32Ms10EViviP5dubFNoKuh8n yh6GXbSCTvUPzuSTp28ApnGhL06hiaKP/Kq1wflj5hJWkjVhLSOEzred6AESzvx3 8Rc4PkgaR6Vx3yQUT8PlspPGo8e7cS8RVGQ= -----END CERTIFICATE-----Generated at Thu Aug 7 01:23:10 2025 by rpki-client