
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/649c4ce9-6864-3d0d-a382-012bb0ccb7fd.roa
File: 649c4ce9-6864-3d0d-a382-012bb0ccb7fd.roa (raw, json)
Hash identifier: mjs6mlctwobgVspfkoZNfX7rBUCWCJaZkuvT7qWlOxs=
Subject key identifier: FE:50:3D:BD:77:D5:E6:C0:75:84:23:BA:45:89:9B:99:86:39:FA:2B
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584B64CCB72620C1160EA821DA80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/649c4ce9-6864-3d0d-a382-012bb0ccb7fd.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 12041
IP address blocks: 2001:500:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cc:b7:26:20:c1:16:0e:a8:21:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=128eb1b5-2df8-40da-892f-d5c71f01000c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:48:45:4d:fd:f5:c2:ea:7b:87:84:c3:80:
62:0f:59:73:8a:7b:5d:52:b6:4c:21:d4:c4:78:11:
7c:9a:9c:e6:ab:14:af:47:f5:a1:63:1f:db:b1:4e:
4d:6d:00:85:a7:04:e7:97:e4:5f:72:e0:be:86:a1:
b1:4d:84:be:1b:cc:9a:63:1f:83:6d:b0:65:1b:16:
44:d1:2f:bb:a8:8d:62:2b:a0:39:d2:85:58:d0:68:
fc:7d:39:a4:98:39:9f:f7:13:56:03:23:f4:d9:d0:
c6:3a:29:94:3f:cb:76:a8:91:f2:6a:41:eb:d7:27:
15:7f:1e:3a:a3:a2:7a:78:91:db:e3:1a:b7:f6:bb:
5d:4b:c5:64:77:70:3e:a5:be:08:09:20:9f:a0:c0:
5d:0f:bf:f0:67:71:c0:3a:72:47:58:0a:9c:8f:8a:
ff:43:aa:1b:d8:e2:41:2e:84:74:fd:cd:9c:28:0d:
ce:45:ac:ec:7a:70:0d:81:9c:a7:6c:14:83:05:b5:
52:88:c9:5d:d1:fb:de:d8:7b:e1:19:c8:98:8a:ee:
bb:4a:82:3a:3d:92:7a:1e:06:ae:0b:01:b1:84:9a:
00:f2:dc:4e:51:f5:0f:cd:48:12:00:a4:92:e3:59:
34:ac:f9:99:c4:1a:76:34:db:6c:03:d0:2a:21:9d:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:3D:BD:77:D5:E6:C0:75:84:23:BA:45:89:9B:99:86:39:FA:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/649c4ce9-6864-3d0d-a382-012bb0ccb7fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:50::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:49:f8:cf:f2:0d:a5:5e:d8:73:cc:96:cd:3e:d7:1a:08:72:
60:32:fb:3d:89:22:06:9c:21:2f:e0:4a:49:c2:6f:19:8b:20:
60:30:ce:62:46:33:28:cb:c4:d2:68:9e:66:b9:4c:ee:07:6f:
ba:f6:58:17:8f:94:3d:ce:f2:18:44:e9:4e:f0:e4:ee:70:93:
57:9f:81:02:f5:d5:8f:ea:e0:7e:0b:1e:5a:75:f7:5c:03:e0:
3b:fc:55:d2:23:42:bb:27:1d:de:08:2e:1c:d9:bc:02:7e:60:
cc:78:f7:e9:f0:8d:a5:32:7f:fa:c9:60:c4:ce:27:58:60:bd:
bd:89:b4:53:ca:cf:32:92:19:4f:ca:9a:5d:6c:52:93:a6:d7:
56:ef:26:33:9a:2e:db:49:45:34:c3:35:6d:7a:78:e7:d8:a3:
2b:6f:a1:0a:d0:72:54:c5:9d:18:13:0c:ee:e9:c0:db:b5:b1:
32:c3:39:9b:26:17:56:a9:fc:01:0a:6c:77:8f:8e:d2:8e:18:
2f:27:d8:63:d3:0e:4c:4b:54:f0:9c:f1:19:f7:0c:c5:a6:fd:
f7:92:8c:82:92:07:63:7d:66:8e:50:b4:60:ce:5e:09:3d:d7:
be:48:f3:cd:11:96:12:a9:b3:d5:ab:cb:e4:82:66:0e:9d:84:
5a:c6:2a:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzLcmIMEWDqgh2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MTI4ZWIxYjUtMmRmOC00MGRhLTg5MmYtZDVjNzFmMDEwMDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RVIRU399cLqe4eEw4BiD1lzintdUrZMIdTE
eBF8mpzmqxSvR/WhYx/bsU5NbQCFpwTnl+RfcuC+hqGxTYS+G8yaYx+DbbBlGxZE
0S+7qI1iK6A50oVY0Gj8fTmkmDmf9xNWAyP02dDGOimUP8t2qJHyakHr1ycVfx46
o6J6eJHb4xq39rtdS8Vkd3A+pb4ICSCfoMBdD7/wZ3HAOnJHWAqcj4r/Q6ob2OJB
LoR0/c2cKA3ORazsenANgZynbBSDBbVSiMld0fve2HvhGciYiu67SoI6PZJ6Hgau
CwGxhJoA8txOUfUPzUgSAKSS41k0rPmZxBp2NNtsA9AqIZ045QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP5QPb131ebAdYQjukWJm5mGOforMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjQ5YzRjZTktNjg2NC0z
ZDBkLWEzODItMDEyYmIwY2NiN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEtJ+M/yDaVe2HPMls0+1xoIcmAy+z2JIgacIS/gSknCbxmLIGAw
zmJGMyjLxNJonma5TO4Hb7r2WBePlD3O8hhE6U7w5O5wk1efgQL11Y/q4H4LHlp1
91wD4Dv8VdIjQrsnHd4ILhzZvAJ+YMx49+nwjaUyf/rJYMTOJ1hgvb2JtFPKzzKS
GU/Kml1sUpOm11bvJjOaLttJRTTDNW16eOfYoytvoQrQclTFnRgTDO7pwNu1sTLD
OZsmF1ap/AEKbHePjtKOGC8n2GPTDkxLVPCc8Rn3DMWm/feSjIKSB2N9Zo5QtGDO
Xgk9175I880RlhKps9Wry+SCZg6dhFrGKnM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:54:29 2025 by rpki-client