$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8bdce9cf-a386-3032-8c97-a8eaf6b98e0e.roa File: 8bdce9cf-a386-3032-8c97-a8eaf6b98e0e.roa (raw, json) Hash identifier: wYuA5cJX4XG7t2O+/dRorkO1OG9/emDwM+mmmbUs7QU= Subject key identifier: 13:E7:FA:D2:78:BC:27:88:8A:16:FA:74:F6:8E:85:D3:19:0B:E5:68 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BD9AA14A581BDC443220 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8bdce9cf-a386-3032-8c97-a8eaf6b98e0e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:dd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bd:9a:a1:4a:58:1b:dc:44:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2e92d7c7-3422-4863-95ee-0b4d771d63ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ca:b2:b9:9d:b3:20:80:7e:09:d3:1f:83:35: 00:08:ca:ec:35:ec:8c:ab:9a:4d:1d:02:e1:54:c8: 53:3e:18:cd:0f:ed:b8:42:e7:8a:bf:12:99:a1:f1: 7e:c0:46:89:1a:29:06:27:92:bb:92:45:34:4c:e7: 26:bd:36:86:32:4b:46:e0:fc:d0:7d:32:b8:b7:7a: ba:f6:8c:f2:a8:56:1d:37:a7:5c:f9:6e:b1:01:2e: 70:8c:20:94:65:dc:cb:05:36:98:99:6b:4f:eb:2c: 6a:cd:1a:f1:1d:2d:96:e8:38:6a:b3:3c:3e:64:65: 38:51:eb:a3:2a:8f:f0:5f:65:8a:0b:79:a0:fb:5d: 72:fd:1b:24:b8:3c:eb:f1:8e:5d:3c:b5:23:b6:b2: 7a:91:59:06:35:9b:00:cb:1f:71:6f:51:b5:fe:9c: 64:7f:d4:ff:e8:47:18:17:6f:d9:2a:84:63:79:7f: 17:2e:8d:33:ce:55:99:5a:fc:5c:8e:df:2c:b4:af: b0:51:82:47:bb:92:b9:54:b1:92:61:19:11:2c:89: 29:cf:98:c8:e6:fe:fc:ca:09:f1:4a:2a:3d:c0:84: ef:e9:e2:d7:8b:5e:d4:3a:d5:15:1f:5d:85:b2:e2: 9c:65:66:9f:c9:e4:6b:d0:12:bf:dd:d6:3a:f9:a9: 0f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E7:FA:D2:78:BC:27:88:8A:16:FA:74:F6:8E:85:D3:19:0B:E5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8bdce9cf-a386-3032-8c97-a8eaf6b98e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:dd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:54:6c:60:79:57:79:a2:de:b4:b2:46:d2:ea:c2:e5:a2:44: 57:3d:e0:b0:6c:83:cf:18:10:62:b0:c1:a2:1a:be:5d:eb:f0: 16:5d:75:3f:37:7b:19:ef:1d:8c:2b:9a:4a:e3:8b:f0:c9:0c: d6:66:75:cd:8e:9e:a2:4d:bb:3c:1d:7e:ba:2a:cb:77:80:05: c1:c3:08:24:ed:11:ae:79:1d:bc:c3:71:b9:36:56:28:d6:6e: ef:1f:86:d5:13:e7:65:f2:a1:e0:3b:fb:6a:5e:ec:27:1a:32: fb:3d:d3:81:dc:aa:40:d0:20:c6:d7:5b:b9:60:f0:84:cb:21: e3:b1:85:b9:eb:fd:26:7b:f4:59:65:de:2d:e3:df:ef:03:f1: 73:d0:a8:8b:e6:1f:0a:1f:8f:ce:f8:a7:d3:c4:9c:4c:46:91: 92:b6:ed:63:6e:3a:1a:f7:aa:f3:5b:76:d0:4f:bb:1d:9b:09: a7:83:e2:cd:43:f5:8d:61:a4:68:bf:46:6d:c7:2b:6f:a2:0e: 51:0f:f7:f9:81:3f:5d:c2:f0:f3:fb:a9:54:db:1b:de:80:e6: 3f:0a:30:0c:a0:2a:77:ae:f5:b5:08:c8:b8:1d:34:68:5c:4f: 09:e0:30:4d:db:49:24:d8:85:ab:8f:30:7d:04:07:f6:d3:3d: b5:0c:2b:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEL2aoUpYG9xEMiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmU5MmQ3YzctMzQyMi00ODYzLTk1ZWUtMGI0ZDc3MWQ2M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMqyuZ2zIIB+CdMfgzUACMrsNeyMq5pNHQLh VMhTPhjND+24QueKvxKZofF+wEaJGikGJ5K7kkU0TOcmvTaGMktG4PzQfTK4t3q6 9ozyqFYdN6dc+W6xAS5wjCCUZdzLBTaYmWtP6yxqzRrxHS2W6Dhqszw+ZGU4Ueuj Ko/wX2WKC3mg+11y/RskuDzr8Y5dPLUjtrJ6kVkGNZsAyx9xb1G1/pxkf9T/6EcY F2/ZKoRjeX8XLo0zzlWZWvxcjt8stK+wUYJHu5K5VLGSYRkRLIkpz5jI5v78ygnx Sio9wITv6eLXi17UOtUVH12FsuKcZWafyeRr0BK/3dY6+akPKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPn+tJ4vCeIihb6dPaOhdMZC+VoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGJkY2U5Y2YtYTM4Ni0z MDMyLThjOTctYThlYWY2Yjk4ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHpUbGB5V3mi3rSyRtLqwuWiRFc94LBsg88YEGKwwaIavl3r8BZd dT83exnvHYwrmkrji/DJDNZmdc2OnqJNuzwdfroqy3eABcHDCCTtEa55HbzDcbk2 VijWbu8fhtUT52XyoeA7+2pe7CcaMvs904HcqkDQIMbXW7lg8ITLIeOxhbnr/SZ7 9Fll3i3j3+8D8XPQqIvmHwofj874p9PEnExGkZK27WNuOhr3qvNbdtBPux2bCaeD 4s1D9Y1hpGi/Rm3HK2+iDlEP9/mBP13C8PP7qVTbG96A5j8KMAygKneu9bUIyLgd NGhcTwngME3bSSTYhauPMH0EB/bTPbUMK88= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:08 2025 by rpki-client