$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa File: 88e2c01c-1673-3937-8a2e-6b1b9270b195.roa (raw, json) Hash identifier: W7yz/wK9lt+1VAGDHvT3RK9aqrR8kN6ajhDmSmyjsX8= Subject key identifier: 65:FE:08:78:42:BF:DB:D9:BB:F2:F6:1E:72:8E:E7:98:58:0B:0C:DF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BFF1AC144AD1E0455200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bf:f1:ac:14:4a:d1:e0:45:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9ec623c3-3c86-4f3a-8249-0b04b2fe5b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:54:ff:ad:33:cc:83:7c:34:e4:36:0e:e9: a7:32:d5:bd:f9:30:d7:68:55:63:91:3c:c1:2c:ca: 73:17:2c:0d:d7:88:71:af:e4:94:42:8b:00:99:6a: 23:77:26:03:17:54:3f:23:fb:e3:f6:f7:0b:b3:8d: 6a:28:db:d6:b1:2f:ce:25:74:1d:0c:1a:af:34:2c: dc:ab:59:32:f5:35:bf:e4:20:c5:6e:b5:c7:1d:a9: 21:6b:d2:93:1e:6d:03:26:8c:86:40:0c:23:f6:12: 68:b3:ff:52:45:f2:e6:4d:e2:f3:7e:1c:c4:6a:8d: 8a:ba:f6:da:40:6a:b5:0e:d4:6d:a8:de:38:83:21: cf:79:c8:da:63:32:05:42:1f:18:ac:e8:3f:76:df: 01:cd:7b:4f:d3:5f:57:78:8b:16:c8:e8:23:c1:a1: d1:50:dd:28:ff:f9:8d:33:f3:63:fa:5d:69:6a:5f: 6c:19:be:14:8a:65:37:4a:98:98:1c:e5:7c:12:0d: 39:1b:d5:5a:97:ae:d2:63:c3:4f:c6:32:ec:c6:23: 6c:87:28:24:37:c7:04:01:de:65:c6:16:8d:3c:78: 2e:1c:5f:c0:c0:76:91:e8:67:86:ea:0a:89:5a:e8: f8:b9:de:74:54:e9:79:38:6b:8f:97:30:ca:a8:01: 9f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FE:08:78:42:BF:DB:D9:BB:F2:F6:1E:72:8E:E7:98:58:0B:0C:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:55:e8:bc:ae:ad:98:dc:b0:7f:8f:75:22:ae:a4:9f:d7:f1: 24:be:32:c4:04:77:1f:3a:4d:35:0e:c8:0c:8a:01:19:22:7f: 35:84:96:d5:ae:34:fb:51:32:c2:e7:df:95:f4:53:b4:6a:c4: a5:cd:d9:d2:94:7c:8c:f2:39:c6:29:69:12:a8:47:09:77:c7: 5d:cc:79:1a:bf:f3:c9:69:34:4a:91:47:f5:e5:71:ce:79:7c: 1b:99:84:d9:4e:fb:ae:77:55:26:01:d8:c1:df:a9:61:28:9f: aa:4d:30:83:f4:1a:52:83:a6:0e:2e:31:fa:56:ee:4e:92:b9: 6b:e5:08:da:28:4a:44:5a:0a:aa:e4:61:0d:b3:9a:cb:1a:15: 49:66:96:36:1c:f1:7a:75:84:dd:eb:c1:73:f8:19:fc:44:03: 72:35:e6:31:90:24:cb:bd:d8:f1:0e:39:6a:c5:ee:52:e5:9f: cc:f3:31:2a:f6:40:56:a7:d8:9d:9a:0b:f8:00:83:70:04:32: 96:ff:28:a1:ad:dc:4e:5b:38:dd:ea:28:68:c3:76:f9:91:f9: 19:d5:5d:1f:55:78:b2:80:fb:fe:b3:35:5d:19:62:8e:7d:d8: 18:f8:da:4c:a5:30:99:e5:bf:61:3a:ef:44:ae:a2:cc:fe:67: 27:4d:93:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEL/xrBRK0eBFUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OWVjNjIzYzMtM2M4Ni00ZjNhLTgyNDktMGIwNGIyZmU1YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZlU/60zzIN8NOQ2DumnMtW9+TDXaFVjkTzB LMpzFywN14hxr+SUQosAmWojdyYDF1Q/I/vj9vcLs41qKNvWsS/OJXQdDBqvNCzc q1ky9TW/5CDFbrXHHakha9KTHm0DJoyGQAwj9hJos/9SRfLmTeLzfhzEao2Kuvba QGq1DtRtqN44gyHPecjaYzIFQh8YrOg/dt8BzXtP019XeIsWyOgjwaHRUN0o//mN M/Nj+l1pal9sGb4UimU3SpiYHOV8Eg05G9Val67SY8NPxjLsxiNshygkN8cEAd5l xhaNPHguHF/AwHaR6GeG6gqJWuj4ud50VOl5OGuPlzDKqAGfUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGX+CHhCv9vZu/L2HnKO55hYCwzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODhlMmMwMWMtMTY3My0z OTM3LThhMmUtNmIxYjkyNzBiMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFhV6LyurZjcsH+PdSKupJ/X8SS+MsQEdx86TTUOyAyKARkifzWE ltWuNPtRMsLn35X0U7RqxKXN2dKUfIzyOcYpaRKoRwl3x13MeRq/88lpNEqRR/Xl cc55fBuZhNlO+653VSYB2MHfqWEon6pNMIP0GlKDpg4uMfpW7k6SuWvlCNooSkRa CqrkYQ2zmssaFUlmljYc8Xp1hN3rwXP4GfxEA3I15jGQJMu92PEOOWrF7lLln8zz MSr2QFan2J2aC/gAg3AEMpb/KKGt3E5bON3qKGjDdvmR+RnVXR9VeLKA+/6zNV0Z Yo592Bj42kylMJnlv2E670Suosz+ZydNk0c= -----END CERTIFICATE-----Generated at Thu Aug 7 03:20:32 2025 by rpki-client