$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d398d98-047f-372e-b6b6-421a60b9bc4a.roa File: 7d398d98-047f-372e-b6b6-421a60b9bc4a.roa (raw, json) Hash identifier: 7330+8xfA95i2xf9I916qnSq1Dya8BOJz+jcJouJKVg= Subject key identifier: C0:13:0A:9B:8C:16:55:C3:94:64:CD:53:4D:66:96:A6:F5:F8:5A:DF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410B60A432B64065C7376C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d398d98-047f-372e-b6b6-421a60b9bc4a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:b6:0a:43:2b:64:06:5c:73:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=142ee7b5-ff25-40d4-82b4-33b1711060e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:06:ce:d2:02:4a:17:fd:f1:a3:28:1c:70: 68:54:9f:e7:2c:e7:05:91:53:6c:20:2c:a1:11:09: 34:19:75:3c:17:c1:ae:16:f9:c6:f3:4c:c2:e3:98: e4:2b:a4:9a:61:7a:0c:b3:2b:2e:05:45:9f:db:25: 75:7c:6b:83:29:f1:b5:42:52:dc:3c:1a:62:68:77: 37:04:52:94:93:41:52:89:72:a2:4b:55:ae:c8:19: d1:af:3c:b2:12:23:89:6e:bc:c4:c4:9c:93:7d:6f: 65:a8:2a:51:57:b9:87:c2:c1:2c:21:46:27:86:98: a9:91:eb:a8:5e:63:06:f2:f3:16:61:bb:1c:53:f2: 80:92:54:a1:70:ca:92:61:56:db:5c:a9:c7:54:8d: 82:59:21:e9:ad:66:fa:f7:37:4e:36:e4:29:62:3d: d5:da:d8:5b:8a:ea:a5:d1:e8:25:ad:b8:89:63:d9: 81:81:ab:e8:3a:74:3e:a4:5d:fc:1f:b2:2f:4d:2a: 75:b8:23:40:ce:6e:86:46:6f:85:f0:3a:25:3e:fa: eb:a2:69:fe:73:93:ba:8f:3c:b0:a1:af:96:aa:37: d2:ce:a1:95:eb:83:f5:ea:c3:aa:28:5f:f8:78:39: 9a:60:67:9b:19:af:8c:ea:28:c6:fa:a9:49:47:87: 53:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:13:0A:9B:8C:16:55:C3:94:64:CD:53:4D:66:96:A6:F5:F8:5A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d398d98-047f-372e-b6b6-421a60b9bc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:47:2c:b9:a0:09:26:45:a9:85:e5:34:2b:12:43:99:8b:fc: eb:b1:9d:9e:07:2c:d0:cb:03:b7:ef:aa:53:c0:b7:ff:07:71: 74:08:88:c8:e1:00:ed:53:03:26:58:2d:31:05:b0:a0:1b:31: 3c:ec:81:a1:70:80:36:7e:a2:e6:e5:70:a4:da:87:b2:fd:67: 5e:46:90:dc:c4:e8:84:0a:00:dd:cb:89:82:8c:f2:41:ac:b3: 78:6b:ea:93:db:4c:22:1a:1e:c4:20:25:39:c1:2b:49:72:04: 56:b4:c2:4b:7f:6a:76:89:93:37:c8:7b:69:3c:69:42:ce:89: 0d:9e:b4:df:cf:61:52:c8:15:e3:4b:f3:fb:5f:85:ee:ac:e1: b4:08:99:68:f4:4c:27:d0:37:3e:e3:56:cd:c6:20:68:9c:62: db:4c:de:91:89:0e:3d:75:cd:91:14:38:74:9f:0c:a2:f7:6e: b2:2d:ae:bd:f1:ee:e1:e6:ce:ab:e5:9c:da:88:f2:68:8e:06: 1a:5b:a8:fc:c4:1c:ee:ee:f6:71:6b:2b:1a:8e:3e:6d:5e:b5: 3e:1d:81:09:d4:7d:9a:f2:c8:d1:5d:60:37:a2:c7:e5:e7:a7: f0:b1:f1:e1:e0:a9:a3:16:88:b9:94:b4:0e:7b:0c:9b:a7:0f: 2a:4a:fd:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELYKQytkBlxzdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTQyZWU3YjUtZmYyNS00MGQ0LTgyYjQtMzNiMTcxMTA2MGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMUGztICShf98aMoHHBoVJ/nLOcFkVNsICyh EQk0GXU8F8GuFvnG80zC45jkK6SaYXoMsysuBUWf2yV1fGuDKfG1QlLcPBpiaHc3 BFKUk0FSiXKiS1WuyBnRrzyyEiOJbrzExJyTfW9lqCpRV7mHwsEsIUYnhpipkeuo XmMG8vMWYbscU/KAklShcMqSYVbbXKnHVI2CWSHprWb69zdONuQpYj3V2thbiuql 0eglrbiJY9mBgavoOnQ+pF38H7IvTSp1uCNAzm6GRm+F8DolPvrromn+c5O6jzyw oa+WqjfSzqGV64P16sOqKF/4eDmaYGebGa+M6ijG+qlJR4dTsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMATCpuMFlXDlGTNU01mlqb1+FrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2QzOThkOTgtMDQ3Zi0z NzJlLWI2YjYtNDIxYTYwYjliYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGhHLLmgCSZFqYXlNCsSQ5mL/OuxnZ4HLNDLA7fvqlPAt/8HcXQI iMjhAO1TAyZYLTEFsKAbMTzsgaFwgDZ+oublcKTah7L9Z15GkNzE6IQKAN3LiYKM 8kGss3hr6pPbTCIaHsQgJTnBK0lyBFa0wkt/anaJkzfIe2k8aULOiQ2etN/PYVLI FeNL8/tfhe6s4bQImWj0TCfQNz7jVs3GIGicYttM3pGJDj11zZEUOHSfDKL3brIt rr3x7uHmzqvlnNqI8miOBhpbqPzEHO7u9nFrKxqOPm1etT4dgQnUfZryyNFdYDei x+Xnp/Cx8eHgqaMWiLmUtA57DJunDypK/UM= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:48 2025 by rpki-client