$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa File: 8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa (raw, json) Hash identifier: A0pCQkaiMbXsa6Ua/jpjxtcyS2j9tI+3znFG2xFIkZw= Subject key identifier: F1:42:5B:D6:35:44:A4:5B:C7:99:84:1E:BB:DB:73:F3:97:8F:E9:BC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C2B74716140FC223F900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c2:b7:47:16:14:0f:c2:23:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=052b855b-b51b-4d8c-8a6d-f36e95e14294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3f:37:38:04:7c:10:2a:7f:2d:c7:56:b0:16: 1a:17:82:0d:36:f3:95:1e:d1:ec:c1:a8:b7:51:4e: 60:9a:37:aa:3b:7f:a4:c4:5f:0b:5a:7f:07:ef:de: 9c:93:0d:87:b5:5e:6e:47:c7:2f:53:5a:d3:69:5d: d3:a8:c7:15:17:76:12:0f:ef:e1:64:ed:87:ba:7a: 48:57:4b:1a:b3:85:ed:de:45:e8:04:54:c8:3e:69: 2b:cc:31:c9:ff:a2:9c:24:6e:75:57:b1:f1:a7:21: 92:11:92:59:9a:42:13:2a:15:dd:c0:bb:71:36:1f: ca:28:89:8b:a0:db:89:d8:3e:53:02:a7:f3:01:16: 69:57:69:f4:a4:29:c2:7f:39:e4:7a:a5:d8:10:3d: 2a:55:53:b8:e1:07:c3:97:46:de:6a:4f:b5:2b:16: f6:71:d8:1a:2c:04:e1:ac:bf:d7:b2:01:c3:c2:d2: 39:bd:68:37:32:03:ed:34:b8:55:5e:8c:32:de:19: 8e:d3:8f:74:e3:85:d5:7e:3a:43:e9:60:24:3a:ca: 97:f7:82:18:9f:86:e0:01:6c:c9:fd:bd:1e:6d:e5: 16:d0:b3:d9:15:5f:68:1b:01:3f:0e:64:82:bc:f7: 98:c5:21:0c:b3:b2:b0:d8:16:e0:f1:29:4a:04:52: 69:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:5B:D6:35:44:A4:5B:C7:99:84:1E:BB:DB:73:F3:97:8F:E9:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:54::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:38:9e:f9:61:95:ec:12:60:df:86:fe:db:81:44:02:d2:81: 60:39:54:ca:7f:55:c3:93:00:69:1e:43:09:e9:c0:75:f3:f6: 91:81:55:4a:3e:58:ba:79:1b:77:76:4a:c3:49:c8:3c:c3:5c: 7e:f4:0b:eb:13:3c:dc:9b:f1:f5:05:b5:f2:51:12:8d:54:77: 61:2d:f0:3e:2b:17:0e:97:c0:b0:64:6e:72:45:6a:82:89:c6: 1d:a1:3d:dc:ae:9d:09:46:ac:da:75:b8:3f:56:2e:a3:08:69: 6e:f4:b8:63:6b:5a:a3:4b:96:99:73:76:0a:61:06:e0:61:00: 79:1c:87:f4:1b:ab:dc:79:6b:85:5b:a4:48:60:c8:04:e5:c6: 12:e1:f1:ec:f1:04:c8:27:e6:c8:8c:4a:38:a2:45:a2:89:77: e5:75:4c:24:9b:c0:9e:20:35:63:b5:92:17:f8:38:65:fb:7d: 7b:b1:9d:17:fb:15:ce:20:31:38:3c:f0:4c:a7:df:69:96:5f: ef:e8:0c:33:0a:c6:8e:f2:22:ff:22:2a:e1:83:63:53:b4:5a: ce:75:b9:8a:33:7b:60:b9:03:43:0b:c1:04:ed:1e:6d:5d:53: 2b:f0:f2:f8:31:91:e8:15:52:ba:f0:8d:9a:83:be:61:b4:4f: 85:97:02:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMK3RxYUD8Ij+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDUyYjg1NWItYjUxYi00ZDhjLThhNmQtZjM2ZTk1ZTE0Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D83OAR8ECp/LcdWsBYaF4INNvOVHtHswai3 UU5gmjeqO3+kxF8LWn8H796ckw2HtV5uR8cvU1rTaV3TqMcVF3YSD+/hZO2HunpI V0sas4Xt3kXoBFTIPmkrzDHJ/6KcJG51V7HxpyGSEZJZmkITKhXdwLtxNh/KKImL oNuJ2D5TAqfzARZpV2n0pCnCfznkeqXYED0qVVO44QfDl0beak+1Kxb2cdgaLATh rL/XsgHDwtI5vWg3MgPtNLhVXowy3hmO049044XVfjpD6WAkOsqX94IYn4bgAWzJ /b0ebeUW0LPZFV9oGwE/DmSCvPeYxSEMs7Kw2Bbg8SlKBFJpGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPFCW9Y1RKRbx5mEHrvbc/OXj+m8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGU5ZmRjMDQtNmQyOS0z NjAwLWE5OGItYTg0OWZmNmQxZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEg4nvlhlewSYN+G/tuBRALSgWA5VMp/VcOTAGkeQwnpwHXz9pGB VUo+WLp5G3d2SsNJyDzDXH70C+sTPNyb8fUFtfJREo1Ud2Et8D4rFw6XwLBkbnJF aoKJxh2hPdyunQlGrNp1uD9WLqMIaW70uGNrWqNLlplzdgphBuBhAHkch/Qbq9x5 a4VbpEhgyATlxhLh8ezxBMgn5siMSjiiRaKJd+V1TCSbwJ4gNWO1khf4OGX7fXux nRf7Fc4gMTg88Eyn32mWX+/oDDMKxo7yIv8iKuGDY1O0Ws51uYoze2C5A0MLwQTt Hm1dUyvw8vgxkegVUrrwjZqDvmG0T4WXAqk= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:29 2025 by rpki-client