$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa File: 5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa (raw, json) Hash identifier: KbOxo6KK41f5r7ThJrf+3EUIMijk3wk7BgpoSp3YX5I= Subject key identifier: 5B:93:B0:A5:33:8E:5D:D1:76:0F:AD:80:BA:A3:E1:C6:3B:1C:92:9C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BF454AC72D67A37BC880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bf:45:4a:c7:2d:67:a3:7b:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=17046c0e-457c-4ec3-aa1d-3b49b148ed2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:15:de:99:be:f6:5f:9a:40:24:12:17:4a: 81:07:e8:3b:2e:9f:cb:7e:ad:58:41:73:2f:30:f6: 29:d8:c7:fe:2d:d5:3b:87:d7:aa:99:00:f5:50:c1: b0:01:68:ce:1f:80:e1:45:28:87:d4:02:c5:e7:af: c8:81:33:24:c0:23:55:ef:ef:a6:60:2a:9d:f3:69: fd:3e:99:2e:19:f4:61:20:74:2f:f6:bc:3d:af:86: 68:89:d2:28:f6:01:b7:f7:6e:87:20:0a:36:3b:5e: ac:de:57:b7:13:bd:6a:3c:37:f4:64:c5:ec:a6:22: dd:66:73:2c:a7:5a:8f:9f:8e:95:1a:c8:d4:db:7a: 42:f3:01:fc:3d:c0:f4:e8:62:fc:88:db:0e:0a:f3: 8c:f7:35:a9:1f:71:44:7e:69:6a:37:72:ee:41:6a: e2:24:5a:56:1d:71:19:16:01:70:51:c8:43:50:e0: 9e:f3:db:ab:cf:64:f1:cb:59:bb:d3:19:26:3b:20: 74:3e:e9:3e:23:72:45:f8:06:f3:54:66:a1:03:02: 44:ea:1d:c2:ce:0b:b8:74:69:c3:0b:ab:4b:dc:5d: 8d:89:6c:78:33:10:05:8c:db:4a:1f:8b:5a:96:93: 02:36:d5:db:5e:8e:9a:ab:1d:9d:f1:e8:22:4f:da: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:93:B0:A5:33:8E:5D:D1:76:0F:AD:80:BA:A3:E1:C6:3B:1C:92:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c4:da:f0:7e:c5:49:ea:7e:0f:7c:9f:53:32:72:33:0c:f1: 0e:7e:1c:3c:c3:eb:0d:78:28:49:ba:c8:4c:e4:10:22:83:9a: d6:8b:c1:35:37:45:78:0b:ad:0c:3c:7a:90:d3:bc:4c:d3:8f: ad:c2:cb:11:f4:2f:1a:17:d7:d2:11:0b:77:8d:da:f5:ad:be: 56:4f:f4:91:16:6b:f8:e7:7c:99:d1:2e:b0:2d:77:d4:38:37: e1:90:e3:99:89:40:65:aa:06:aa:95:76:88:f9:9d:de:1b:57: 74:45:8c:3b:4d:2b:4a:95:8c:ba:99:1a:26:ac:ff:4d:5a:11: fe:8f:78:38:45:9f:91:52:a4:00:63:68:0f:c1:32:8e:1c:ef: 3d:1f:06:ab:65:8d:70:e9:78:27:93:69:f2:f4:f8:ae:5d:16: da:69:21:b4:bd:9d:f8:f5:f5:7a:85:78:0e:fe:3b:ec:f2:d3: 75:9f:fa:b2:84:67:aa:f3:ec:ae:84:8f:2f:58:f4:44:79:5e: f0:3a:49:ae:e9:9c:6c:44:ef:33:2a:07:7f:29:cb:12:a1:46: 53:84:4f:ee:ed:ed:14:97:f0:95:09:39:b1:70:cb:84:b0:bc: b5:4f:ff:89:75:f0:93:85:40:b0:26:43:61:9c:69:c9:30:d1: 07:61:d4:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEL9FSsctZ6N7yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTcwNDZjMGUtNDU3Yy00ZWMzLWFhMWQtM2I0OWIxNDhlZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqAV3pm+9l+aQCQSF0qBB+g7Lp/Lfq1YQXMv MPYp2Mf+LdU7h9eqmQD1UMGwAWjOH4DhRSiH1ALF56/IgTMkwCNV7++mYCqd82n9 PpkuGfRhIHQv9rw9r4ZoidIo9gG3926HIAo2O16s3le3E71qPDf0ZMXspiLdZnMs p1qPn46VGsjU23pC8wH8PcD06GL8iNsOCvOM9zWpH3FEfmlqN3LuQWriJFpWHXEZ FgFwUchDUOCe89urz2Txy1m70xkmOyB0Puk+I3JF+AbzVGahAwJE6h3Czgu4dGnD C6tL3F2NiWx4MxAFjNtKH4talpMCNtXbXo6aqx2d8egiT9qnPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFuTsKUzjl3Rdg+tgLqj4cY7HJKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWJmZmFlNWYtNWNmNi0z YWQ5LThkMDQtNjdiZWY4MTNkMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHfE2vB+xUnqfg98n1MycjMM8Q5+HDzD6w14KEm6yEzkECKDmtaL wTU3RXgLrQw8epDTvEzTj63CyxH0LxoX19IRC3eN2vWtvlZP9JEWa/jnfJnRLrAt d9Q4N+GQ45mJQGWqBqqVdoj5nd4bV3RFjDtNK0qVjLqZGias/01aEf6PeDhFn5FS pABjaA/BMo4c7z0fBqtljXDpeCeTafL0+K5dFtppIbS9nfj19XqFeA7+O+zy03Wf +rKEZ6rz7K6Ejy9Y9ER5XvA6Sa7pnGxE7zMqB38pyxKhRlOET+7t7RSX8JUJObFw y4SwvLVP/4l18JOFQLAmQ2Gcackw0Qdh1B4= -----END CERTIFICATE-----Generated at Thu Aug 7 01:06:41 2025 by rpki-client