$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa File: 95be4890-2931-3ddc-9628-15449cfd5f27.roa (raw, json) Hash identifier: JM/iUyfMWUjJiMExRbSXQYhmpLfXUAr2C8vumUzTSAk= Subject key identifier: A3:CA:68:62:23:24:59:EB:DE:9A:67:1E:12:1D:48:9F:4B:47:73:5A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE5A8D04024224D801FF80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:5a:8d:04:02:42:24:d8:01:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a4f1a020-f23d-4b3a-a27a-889511ec2046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:88:27:01:a8:a2:a0:60:6c:08:b1:af:c6: 54:f8:2a:67:fd:ce:db:0f:ec:ef:00:f8:b8:d7:02: c5:7d:4b:d4:af:0a:c7:2c:68:e9:99:af:ed:6c:ca: 69:29:e2:ff:03:54:b5:a9:48:95:1e:f8:fb:79:01: 24:ff:48:80:79:01:b8:d7:e4:c8:7e:7b:33:a1:5b: 99:57:6e:91:8e:95:be:24:78:48:19:b1:a3:f4:2c: 8a:3f:00:aa:ce:ea:cc:28:8b:b5:92:9f:43:12:fe: 0f:02:d5:9e:66:bf:97:c8:09:94:df:fa:a5:1d:92: c6:e7:81:83:3f:e3:6c:49:75:37:17:b0:c9:2d:3e: 0d:62:94:2a:d3:79:6c:b6:de:5b:5c:70:5e:96:0e: a4:82:4d:20:59:36:39:d2:00:5b:08:98:ec:9f:fb: 2d:6b:c5:01:86:d1:92:de:06:cc:c8:16:53:94:c5: 1c:ea:df:84:70:d5:5f:83:20:2e:b8:f7:69:b0:ba: a3:26:c4:eb:68:b9:1d:77:d0:41:c7:d6:f4:61:df: b7:da:5b:e0:9f:cb:df:73:e7:51:50:79:1d:09:9d: 06:ab:f8:76:a4:ef:86:99:5b:00:cc:aa:57:78:c7: 42:fb:99:44:26:44:83:a2:71:af:8a:a6:be:7a:6e: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CA:68:62:23:24:59:EB:DE:9A:67:1E:12:1D:48:9F:4B:47:73:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:40:2c:d8:c0:bf:86:9c:f0:49:1d:5d:e6:29:3d:8b:43:d2: 3a:46:23:5a:54:66:a5:ae:3c:7d:02:14:57:29:7e:1a:e0:9a: 1d:01:23:96:d8:3d:04:c8:5d:84:e8:73:7d:ab:47:d9:34:94: 04:1a:93:23:a5:f6:1d:ff:d4:04:09:ba:54:6a:b4:6a:de:f7: a1:3b:52:f3:53:b6:eb:5a:2c:63:38:df:c2:4e:0f:01:d5:aa: 08:0a:02:b7:5d:47:98:d1:b0:50:43:95:f5:f3:0d:85:c9:af: 71:9c:1d:5b:12:66:9b:14:04:c7:e0:e9:f7:91:0b:8a:1b:c2: 0a:f5:8c:5f:07:dd:ab:4b:86:d1:fc:83:13:35:fc:19:7e:56: 80:cd:89:d7:65:a0:c3:e4:94:d3:f8:59:76:43:25:9a:62:99: 17:54:98:82:4a:c3:4d:4a:8e:e0:89:37:45:ab:83:df:d5:54: 3c:0a:d0:3d:b6:36:d9:4f:78:fd:05:44:f8:cf:03:9c:de:19: 83:ae:69:ac:50:f6:f7:0c:91:4c:51:b3:a9:1a:d6:b5:e3:e6: 51:26:d1:4d:54:50:26:53:83:eb:14:6b:71:41:17:c8:0e:7f: 61:0d:cb:b9:91:99:4d:98:b1:99:b0:91:9d:1e:52:79:b5:48: a5:e8:65:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzlqNBAJCJNgB/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTRmMWEwMjAtZjIzZC00YjNhLWEyN2EtODg5NTExZWMyMDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSKIJwGooqBgbAixr8ZU+Cpn/c7bD+zvAPi4 1wLFfUvUrwrHLGjpma/tbMppKeL/A1S1qUiVHvj7eQEk/0iAeQG41+TIfnszoVuZ V26RjpW+JHhIGbGj9CyKPwCqzurMKIu1kp9DEv4PAtWeZr+XyAmU3/qlHZLG54GD P+NsSXU3F7DJLT4NYpQq03lstt5bXHBelg6kgk0gWTY50gBbCJjsn/sta8UBhtGS 3gbMyBZTlMUc6t+EcNVfgyAuuPdpsLqjJsTraLkdd9BBx9b0Yd+32lvgn8vfc+dR UHkdCZ0Gq/h2pO+GmVsAzKpXeMdC+5lEJkSDonGviqa+em4E+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKPKaGIjJFnr3ppnHhIdSJ9LR3NaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTViZTQ4OTAtMjkzMS0z ZGRjLTk2MjgtMTU0NDljZmQ1ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJFALNjAv4ac8EkdXeYpPYtD0jpGI1pUZqWuPH0CFFcpfhrgmh0B I5bYPQTIXYToc32rR9k0lAQakyOl9h3/1AQJulRqtGre96E7UvNTtutaLGM438JO DwHVqggKArddR5jRsFBDlfXzDYXJr3GcHVsSZpsUBMfg6feRC4obwgr1jF8H3atL htH8gxM1/Bl+VoDNiddloMPklNP4WXZDJZpimRdUmIJKw01KjuCJN0Wrg9/VVDwK 0D22NtlPeP0FRPjPA5zeGYOuaaxQ9vcMkUxRs6ka1rXj5lEm0U1UUCZTg+sUa3FB F8gOf2ENy7mRmU2YsZmwkZ0eUnm1SKXoZSU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:58:42 2025 by rpki-client