$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa File: 91a41c4e-b0c0-3279-9cb1-3434d5687478.roa (raw, json) Hash identifier: j3Is2ATDIHe2kLOcNN+mEy6OGUQai0HcTv6mnmbvNEw= Subject key identifier: DE:B7:5A:0E:37:87:9F:91:41:35:8E:F4:BF:81:44:69:6A:1B:E6:A2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BD88309E69E532DA88FC Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bd:88:30:9e:69:e5:32:da:88:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a35efd9b-c634-4144-9c64-434bba6d32aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:b6:84:d0:c3:2e:3a:c3:b1:c2:09:bd:27: 15:1b:16:4b:d3:fc:30:b6:6a:94:62:a3:fd:08:49: 59:c1:58:c8:99:92:68:60:e1:47:ab:05:bd:24:c7: 4b:0b:dc:26:3e:c3:07:e9:9a:8e:f8:03:6f:d0:94: 6b:27:32:2a:2e:77:78:e5:2d:d4:b8:22:a5:48:94: b6:0e:27:0a:df:cc:16:5c:24:a3:da:a1:c2:6a:df: 8c:83:db:bf:20:5b:57:43:b6:78:9c:39:5f:63:a3: 12:62:9c:00:36:b5:f7:fc:80:10:08:10:8c:72:09: ff:6a:19:1a:4d:d1:76:ab:8b:43:b5:a5:04:29:6a: 02:4e:11:a8:0f:98:80:82:c2:87:f0:5d:2c:5a:19: ab:7a:52:19:9b:cf:e6:9a:46:28:3b:b0:8d:eb:53: 60:4c:8a:bd:ef:0a:d8:ce:d1:7d:5b:e6:c1:e3:d4: 7b:08:40:c6:e8:98:23:b3:e1:92:ed:5e:41:c7:e6: 12:52:13:84:92:04:0d:70:3a:af:ec:21:6a:3c:f2: 11:00:a8:22:01:af:43:4a:fa:65:1f:ab:dd:27:cb: 43:19:69:4d:02:f0:ea:84:e7:60:16:6b:fc:b5:f5: 03:97:84:61:4e:01:ed:6a:55:1f:98:e3:c0:0a:0a: f1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B7:5A:0E:37:87:9F:91:41:35:8E:F4:BF:81:44:69:6A:1B:E6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:dc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:35:2c:13:9e:1c:8b:0c:4f:ec:35:d2:d9:23:ad:29:17:eb: 46:78:d6:6f:3a:ab:7e:6b:64:9f:d7:3d:94:60:40:b4:0b:4d: 76:21:98:76:8b:ff:26:20:f7:b6:32:39:84:59:03:e8:6a:0b: 6e:dc:e9:07:8b:a3:ae:59:94:63:a5:d5:57:5c:c9:50:5e:9d: 2e:89:56:92:2f:14:c8:11:a3:92:cb:87:17:c8:2f:8b:3a:4b: f4:90:22:a5:45:e0:7a:fb:12:12:11:0a:e7:4d:2b:00:99:11: ce:7f:5f:91:40:52:85:67:03:40:b6:e7:3a:d9:fd:b2:23:94: cf:b0:ff:b2:f9:c5:10:7b:f1:ae:24:ca:16:19:1c:a1:79:66: ad:c8:fc:8a:06:a6:ea:82:c7:eb:d4:fb:df:7e:9f:6b:58:73: 58:ea:84:5c:ef:87:ad:87:ce:2b:6c:0b:00:64:1d:57:5d:0d: e2:55:fe:6b:00:89:9a:4e:c3:e9:82:f5:30:59:02:ad:12:46: f2:62:1a:ee:23:5b:60:ea:2c:ca:90:c3:cb:88:29:ae:a3:06: 8d:b9:6b:cc:b1:4a:f4:6e:97:1f:dc:0c:58:b8:af:8e:6c:96: fa:95:d5:29:cd:f2:0a:67:d1:e4:18:83:1b:de:f7:a9:bd:3f: e3:ca:33:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEL2IMJ5p5TLaiPwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTM1ZWZkOWItYzYzNC00MTQ0LTljNjQtNDM0YmJhNmQzMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNa2hNDDLjrDscIJvScVGxZL0/wwtmqUYqP9 CElZwVjImZJoYOFHqwW9JMdLC9wmPsMH6ZqO+ANv0JRrJzIqLnd45S3UuCKlSJS2 DicK38wWXCSj2qHCat+Mg9u/IFtXQ7Z4nDlfY6MSYpwANrX3/IAQCBCMcgn/ahka TdF2q4tDtaUEKWoCThGoD5iAgsKH8F0sWhmrelIZm8/mmkYoO7CN61NgTIq97wrY ztF9W+bB49R7CEDG6Jgjs+GS7V5Bx+YSUhOEkgQNcDqv7CFqPPIRAKgiAa9DSvpl H6vdJ8tDGWlNAvDqhOdgFmv8tfUDl4RhTgHtalUfmOPACgrx5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN63Wg43h5+RQTWO9L+BRGlqG+aiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTFhNDFjNGUtYjBjMC0z Mjc5LTljYjEtMzQzNGQ1Njg3NDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ81LBOeHIsMT+w10tkjrSkX60Z41m86q35rZJ/XPZRgQLQLTXYh mHaL/yYg97YyOYRZA+hqC27c6QeLo65ZlGOl1VdcyVBenS6JVpIvFMgRo5LLhxfI L4s6S/SQIqVF4Hr7EhIRCudNKwCZEc5/X5FAUoVnA0C25zrZ/bIjlM+w/7L5xRB7 8a4kyhYZHKF5Zq3I/IoGpuqCx+vU+99+n2tYc1jqhFzvh62HzitsCwBkHVddDeJV /msAiZpOw+mC9TBZAq0SRvJiGu4jW2DqLMqQw8uIKa6jBo25a8yxSvRulx/cDFi4 r45slvqV1SnN8gpn0eQYgxve96m9P+PKM9U= -----END CERTIFICATE-----Generated at Thu Aug 7 01:10:48 2025 by rpki-client