$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa File: 8f25252a-c003-3570-b9c6-4bc221214d3a.roa (raw, json) Hash identifier: Jtl6duLzPqtLDkZJX28I53kJ5Ly00oU9XSxG4+8q60E= Subject key identifier: 30:4B:6F:55:8A:85:F0:EF:49:BB:D5:47:0A:10:9D:38:4E:A6:0A:DF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410B63626C8FAEBABEB5C20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:b6:36:26:c8:fa:eb:ab:eb:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f2175204-dd09-4790-a319-46ee2941d8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:91:1b:ab:f5:a6:2b:fb:98:c5:64:6a:d1:c7: 4a:96:34:a2:77:62:04:74:d3:11:d3:e9:92:ff:2e: 95:2c:a1:3f:1a:15:02:e1:ed:db:e1:7c:e8:2d:52: 3a:3d:cf:60:1c:0a:2e:db:0f:b6:c1:36:4a:5b:81: 73:38:8b:3d:ec:c7:61:6d:fa:06:e3:80:a5:75:13: 52:64:ed:90:dc:54:2c:7d:08:ca:4c:f1:73:46:92: 7b:ea:9e:ee:12:bb:ac:91:7e:f5:25:52:75:eb:25: fe:08:0a:c7:33:66:7d:a3:7b:54:54:8a:c2:65:7b: 9d:99:de:a0:2f:c3:4f:47:c0:64:82:11:88:1d:de: ba:fd:15:2d:cf:31:fa:cc:09:5e:a4:7d:20:01:8f: 59:04:79:6f:a0:5f:2c:3f:04:b7:ab:50:a4:d0:aa: cc:9a:42:b6:4c:6c:45:1b:0f:d4:50:dc:21:e5:22: b0:67:98:d1:99:d2:95:5b:22:06:1f:cb:c0:ef:fc: da:95:14:92:49:d8:d7:56:82:b4:cb:8a:bc:d1:1b: f4:c3:9e:51:b8:c4:f2:8a:e3:21:66:95:58:f3:7b: e2:4b:9f:a4:1a:4b:78:2e:5a:0b:02:b8:2d:55:d8: 0b:6e:7a:ff:2f:42:07:56:fd:fb:26:b1:b1:02:a6: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4B:6F:55:8A:85:F0:EF:49:BB:D5:47:0A:10:9D:38:4E:A6:0A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:f6:ae:02:09:5e:4b:48:4e:ad:6d:d9:da:eb:af:5c:57:25: 25:75:5e:90:ff:84:f3:7c:3b:d3:41:8f:99:bd:04:97:a8:dd: 53:18:f9:b4:4f:dc:fb:00:ec:7d:68:f9:6c:3f:c8:a5:8a:d9: 26:9e:a3:b8:c9:3d:dd:d7:4f:3b:e0:fa:63:94:66:02:ee:94: 8c:33:09:8d:74:3d:2d:23:c0:04:1d:a2:d6:cd:fa:d9:9e:5e: 43:17:ed:cc:f2:83:46:dd:78:9b:d8:00:da:88:a9:e1:63:c0: 16:37:dd:6f:24:85:a2:70:6a:57:25:0b:11:3d:45:cf:1c:32: 0c:df:68:5a:4b:d7:10:aa:e6:4a:8e:45:54:17:c4:8d:56:3a: c2:98:9d:96:7b:bf:47:cb:55:90:14:4c:0d:c5:16:09:cd:44: a2:05:76:6c:aa:fa:85:e1:64:2c:92:24:90:ef:14:3d:2c:8d: 9a:e0:f9:8e:53:e4:fa:ed:97:f5:a4:a3:17:31:f9:92:38:0a: 46:b4:9e:ce:78:ce:30:38:dc:b7:dd:4f:ef:95:ae:e2:24:9a: 89:7d:f7:c8:ba:01:4d:34:20:47:21:00:69:1d:03:45:e6:fd: b8:97:2c:52:64:1f:d9:66:58:43:0f:43:d8:32:4e:5d:1d:76: eb:52:76:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELY2Jsj666vrXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjIxNzUyMDQtZGQwOS00NzkwLWEzMTktNDZlZTI5NDFkOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5Ebq/WmK/uYxWRq0cdKljSid2IEdNMR0+mS /y6VLKE/GhUC4e3b4XzoLVI6Pc9gHAou2w+2wTZKW4FzOIs97MdhbfoG44CldRNS ZO2Q3FQsfQjKTPFzRpJ76p7uEruskX71JVJ16yX+CArHM2Z9o3tUVIrCZXudmd6g L8NPR8BkghGIHd66/RUtzzH6zAlepH0gAY9ZBHlvoF8sPwS3q1Ck0KrMmkK2TGxF Gw/UUNwh5SKwZ5jRmdKVWyIGH8vA7/zalRSSSdjXVoK0y4q80Rv0w55RuMTyiuMh ZpVY83viS5+kGkt4LloLArgtVdgLbnr/L0IHVv37JrGxAqa/PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDBLb1WKhfDvSbvVRwoQnThOpgrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGYyNTI1MmEtYzAwMy0z NTcwLWI5YzYtNGJjMjIxMjE0ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMP2rgIJXktITq1t2drrr1xXJSV1XpD/hPN8O9NBj5m9BJeo3VMY +bRP3PsA7H1o+Ww/yKWK2Saeo7jJPd3XTzvg+mOUZgLulIwzCY10PS0jwAQdotbN +tmeXkMX7czyg0bdeJvYANqIqeFjwBY33W8khaJwalclCxE9Rc8cMgzfaFpL1xCq 5kqORVQXxI1WOsKYnZZ7v0fLVZAUTA3FFgnNRKIFdmyq+oXhZCySJJDvFD0sjZrg +Y5T5Prtl/Wkoxcx+ZI4Cka0ns54zjA43LfdT++VruIkmol998i6AU00IEchAGkd A0Xm/biXLFJkH9lmWEMPQ9gyTl0ddutSdsI= -----END CERTIFICATE-----Generated at Thu Aug 7 03:24:52 2025 by rpki-client