$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa File: a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa (raw, json) Hash identifier: elql4Qoo2dkpgTF7J1myRdTZdNrhidZDReUjbGbdaQQ= Subject key identifier: E4:3F:56:E6:CF:32:71:C1:3A:46:4F:34:DC:15:50:1A:78:F5:A9:F9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CCAC10BDAB7788725D2DC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:ac:10:bd:ab:77:88:72:5d:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3b8a5802-00f0-4053-8c0b-2ca69ba7311f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:94:2c:c7:b4:ee:e9:98:44:d7:a1:4c:01: 10:24:98:0a:d1:56:73:6b:7c:74:fc:ed:c8:b0:3a: dc:67:95:eb:bf:b7:18:b7:82:79:32:29:a2:25:e2: 5a:bc:80:a3:3d:dc:99:fc:bc:e7:2a:39:b6:ad:49: 96:df:b6:5c:dd:50:9c:7b:f6:d4:38:d0:21:3c:67: 5d:a4:ea:3d:cc:c6:4b:87:e9:f9:16:ac:24:d4:5a: a5:9a:95:0a:92:b5:5d:f6:7e:9f:95:ac:6c:69:94: 02:80:e9:ab:7c:eb:b3:2e:ff:d8:71:3f:46:b2:df: 33:92:68:f1:c2:87:1c:a9:83:4c:30:e8:12:b5:02: 0b:28:6a:bc:b4:79:62:de:e4:2e:6c:ce:48:a8:07: 81:7e:67:14:8d:f0:a3:78:aa:82:8b:d0:13:bd:60: 61:ab:95:88:bd:8f:f5:c7:0f:fd:0f:b3:8a:b8:c7: 6a:4f:85:ae:b6:22:ab:22:d3:45:f8:94:c2:ac:1e: 75:20:d0:0b:0d:2b:16:2a:54:d4:39:5d:70:00:3a: 63:6b:f5:54:c4:bb:f8:bf:09:24:56:a3:81:8b:b6: 49:6b:a7:61:5a:c6:16:4f:cb:7b:0f:62:9c:cb:e8: 04:7a:53:46:32:8b:0c:05:f7:2f:b8:1a:6b:f4:81: 3a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3F:56:E6:CF:32:71:C1:3A:46:4F:34:DC:15:50:1A:78:F5:A9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:11:4a:5c:64:73:97:ab:f3:29:cf:90:e9:67:3e:63:6e:84: be:12:aa:c4:97:34:a6:ae:4f:c8:a9:a3:3e:21:07:d3:7c:d7: 3f:b1:e8:2d:09:61:cb:17:57:a1:8d:1f:60:4f:35:e8:12:e1: e9:cf:9d:d2:89:9e:43:3c:6b:c2:02:b7:49:0c:5d:96:50:07: fa:8d:69:8f:17:31:7c:e2:20:82:9b:e1:d5:1d:4e:d9:5c:fe: 93:23:a0:00:3d:2c:ff:86:f6:e5:65:1c:54:d9:76:cf:c2:c8: 80:de:d6:ee:c1:8c:f0:77:e0:ce:9f:f4:fb:02:ef:ad:fa:9c: 2c:8e:8c:2a:01:6a:ad:67:25:89:0b:bb:f0:83:4a:04:a2:71: e6:f5:80:d0:17:01:4b:f5:eb:b2:8c:78:69:b5:07:1c:24:b0: e2:d2:b8:69:db:d0:b5:c0:e4:c8:66:9e:10:e1:1d:b6:c9:ee: a6:ba:9b:44:99:73:17:04:f5:e3:00:92:1d:4d:ca:23:04:c0: bd:87:11:c6:f9:78:92:09:5c:69:f2:36:89:2a:06:88:b0:f7: da:9d:a7:e0:55:33:12:65:5f:57:b3:6c:e1:ed:03:06:ee:75: fa:15:b9:9d:94:da:ad:89:09:58:4c:5a:43:98:89:97:1b:eb: 23:5b:a2:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzKwQvat3iHJdLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2I4YTU4MDItMDBmMC00MDUzLThjMGItMmNhNjliYTczMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDyULMe07umYRNehTAEQJJgK0VZza3x0/O3I sDrcZ5Xrv7cYt4J5MimiJeJavICjPdyZ/LznKjm2rUmW37Zc3VCce/bUONAhPGdd pOo9zMZLh+n5Fqwk1FqlmpUKkrVd9n6flaxsaZQCgOmrfOuzLv/YcT9Gst8zkmjx woccqYNMMOgStQILKGq8tHli3uQubM5IqAeBfmcUjfCjeKqCi9ATvWBhq5WIvY/1 xw/9D7OKuMdqT4WutiKrItNF+JTCrB51INALDSsWKlTUOV1wADpja/VUxLv4vwkk VqOBi7ZJa6dhWsYWT8t7D2Kcy+gEelNGMosMBfcvuBpr9IE6HwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOQ/VubPMnHBOkZPNNwVUBp49an5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTBjYzg0MWUtYWE2ZS0z NDMyLWFmMjYtNjE2MjFmOGFiM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACgRSlxkc5er8ynPkOlnPmNuhL4SqsSXNKauT8ipoz4hB9N81z+x 6C0JYcsXV6GNH2BPNegS4enPndKJnkM8a8ICt0kMXZZQB/qNaY8XMXziIIKb4dUd Ttlc/pMjoAA9LP+G9uVlHFTZds/CyIDe1u7BjPB34M6f9PsC7636nCyOjCoBaq1n JYkLu/CDSgSiceb1gNAXAUv167KMeGm1BxwksOLSuGnb0LXA5MhmnhDhHbbJ7qa6 m0SZcxcE9eMAkh1NyiMEwL2HEcb5eJIJXGnyNokqBoiw99qdp+BVMxJlX1ezbOHt AwbudfoVuZ2U2q2JCVhMWkOYiZcb6yNbonM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:45:51 2025 by rpki-client