$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa File: 8f25252a-c003-3570-b9c6-4bc221214d3a.roa (raw, json) Hash identifier: T7v9SDRGrHNVSUIMfYCXR7Cy7dXCzhDnw3Z6rfbe1Iw= Subject key identifier: B5:73:9A:9C:00:01:41:54:C9:76:EC:FE:07:AD:FD:10:1F:C6:6F:D9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE53FFC20E6B9E189F9440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:53:ff:c2:0e:6b:9e:18:9f:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=af821af2-1c52-4b01-a1a1-d4c23a6f37cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:da:b2:55:76:11:8b:22:c6:bb:b4:27:e1: 97:1f:b2:6e:ac:bc:ca:0e:bd:43:21:15:6d:57:91: 03:a2:e7:49:d6:e5:cc:12:ab:40:b2:48:45:06:ac: 7a:e3:cf:1f:d8:18:43:64:cc:87:48:50:32:c7:bb: 3a:de:de:ca:5e:60:b4:67:18:ee:63:19:2b:0f:1d: 1d:08:96:69:aa:46:05:c5:16:ac:fa:79:81:37:99: ed:3b:26:76:b0:f3:a5:55:b2:24:dc:8f:67:35:83: ac:a3:ef:f5:33:bb:1f:ba:6a:76:c9:ff:11:7c:31: 44:a8:e9:c3:3e:4e:87:de:85:17:c8:b1:b7:80:73: b3:a0:f0:b2:44:23:30:fa:1d:01:d0:d6:cc:a5:07: ef:07:ff:25:e7:dd:a8:48:3f:e0:62:20:b3:4f:ee: 57:f6:ee:cf:b5:59:1d:ee:b4:8e:aa:5a:88:41:0a: 0b:ab:64:f7:06:0e:67:e1:fc:5b:54:04:43:d2:81: 9c:5a:81:1f:e3:ba:6e:4f:60:cf:ab:0f:01:be:6c: 52:e1:a7:43:50:ee:73:ce:66:b2:6b:af:60:b5:71: 55:b0:13:03:8a:98:6a:76:39:fb:51:60:5f:2f:9a: 06:25:5e:8c:78:ca:2c:83:aa:6a:1a:d0:40:3a:dd: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:73:9A:9C:00:01:41:54:C9:76:EC:FE:07:AD:FD:10:1F:C6:6F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:3a:e8:9b:e6:ff:4f:c0:04:4d:4e:a0:f9:86:3c:89:d4:19: ce:b3:fb:ca:ef:59:f9:4e:af:d9:01:9b:75:72:04:0a:52:5b: 5f:35:aa:33:66:e8:6c:bb:25:c9:e2:ea:1c:84:34:88:a1:b9: 03:3f:6d:68:72:6f:8a:21:a0:d6:08:67:56:d6:c6:da:e5:1f: 84:53:c2:66:70:b3:4c:af:9e:19:93:3c:3d:c0:f1:73:5c:aa: db:2f:8f:b1:ab:d6:f6:4f:72:ae:92:21:64:13:c7:6a:59:44: 8f:bd:80:03:bd:af:0d:11:58:20:fd:b1:e1:da:03:31:35:a7: 89:2c:51:1b:d0:d5:98:83:bf:f4:a7:1b:94:d6:c5:fd:7a:86: ea:08:a1:c9:67:24:17:4b:25:b3:5b:7c:60:09:d3:dd:be:1c: ac:5b:59:ff:07:ec:b5:99:69:2f:33:5a:ea:c5:22:c2:c2:3c: 63:cf:b0:c2:37:b2:69:51:6f:e6:b5:e0:14:f7:49:97:b6:20: 24:86:30:13:58:f7:99:63:e5:e1:00:18:e2:4a:6b:21:50:7e: a1:d8:73:5f:8f:5c:20:4e:5b:0b:f9:9c:4f:64:1d:b2:84:57: e1:da:2a:fd:62:32:83:60:5a:7d:23:4c:d2:74:4b:b1:bb:fd: a3:3c:7f:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzlP/wg5rnhiflEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWY4MjFhZjItMWM1Mi00YjAxLWExYTEtZDRjMjNhNmYzN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTXaslV2EYsixru0J+GXH7JurLzKDr1DIRVt V5EDoudJ1uXMEqtAskhFBqx6488f2BhDZMyHSFAyx7s63t7KXmC0ZxjuYxkrDx0d CJZpqkYFxRas+nmBN5ntOyZ2sPOlVbIk3I9nNYOso+/1M7sfump2yf8RfDFEqOnD Pk6H3oUXyLG3gHOzoPCyRCMw+h0B0NbMpQfvB/8l592oSD/gYiCzT+5X9u7PtVkd 7rSOqlqIQQoLq2T3Bg5n4fxbVARD0oGcWoEf47puT2DPqw8BvmxS4adDUO5zzmay a69gtXFVsBMDiphqdjn7UWBfL5oGJV6MeMosg6pqGtBAOt15IQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLVzmpwAAUFUyXbs/get/RAfxm/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGYyNTI1MmEtYzAwMy0z NTcwLWI5YzYtNGJjMjIxMjE0ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALA66Jvm/0/ABE1OoPmGPInUGc6z+8rvWflOr9kBm3VyBApSW181 qjNm6Gy7Jcni6hyENIihuQM/bWhyb4ohoNYIZ1bWxtrlH4RTwmZws0yvnhmTPD3A 8XNcqtsvj7Gr1vZPcq6SIWQTx2pZRI+9gAO9rw0RWCD9seHaAzE1p4ksURvQ1ZiD v/SnG5TWxf16huoIoclnJBdLJbNbfGAJ092+HKxbWf8H7LWZaS8zWurFIsLCPGPP sMI3smlRb+a14BT3SZe2ICSGMBNY95lj5eEAGOJKayFQfqHYc1+PXCBOWwv5nE9k HbKEV+HaKv1iMoNgWn0jTNJ0S7G7/aM8f10= -----END CERTIFICATE-----Generated at Wed Nov 5 15:14:01 2025 by rpki-client