$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa File: a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa (raw, json) Hash identifier: cWgaMRoU+/pKZIBM1nuPisH/hCGFeOfMbB5PkslcXAQ= Subject key identifier: FE:36:77:11:43:FF:C0:61:38:3D:42:EF:51:5F:9B:03:A1:AD:AA:86 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BDCF3F443B9F2B0C0380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bd:cf:3f:44:3b:9f:2b:0c:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f1983cdc-a59f-4477-993f-10d33fb95f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:2e:88:24:08:97:42:c7:e2:42:05:0e:5d: 77:2a:51:1b:e4:99:50:12:42:e3:a9:6f:d3:9d:22: 47:88:a5:76:1c:a3:de:23:39:ad:be:a8:60:86:59: 0b:88:cc:3c:8d:56:e1:04:53:eb:2e:1a:e7:27:5a: 7c:d9:d5:f1:52:61:8b:94:98:ac:2d:ae:e9:5e:ec: 10:de:eb:c8:69:97:6c:5b:cf:c5:22:33:48:13:35: 5d:bd:33:ce:cc:d8:1f:1e:dd:5b:64:06:59:a6:ca: a8:3b:18:1d:99:d9:62:e5:57:db:3b:3a:82:ef:b8: 24:71:f5:c8:6c:df:ca:79:b3:5f:37:e8:db:33:2f: f0:a8:f9:78:62:14:64:b8:39:44:5a:f4:7b:88:b8: 88:4b:b3:70:1c:3f:ce:fe:64:1a:64:21:98:d5:d3: 71:94:49:6b:1e:47:39:8b:25:57:1b:f9:24:c3:22: 59:8a:af:ab:6a:52:cc:13:04:78:73:ee:e4:c7:cc: 45:33:83:15:d0:ac:f6:23:52:41:03:48:52:ca:4c: 77:20:2d:39:e3:99:e5:c3:a1:3e:97:6e:37:2d:30: 96:73:1b:2e:4f:8b:70:0c:e9:73:f1:eb:bc:74:e1: c6:be:a6:d0:a4:52:ff:d0:09:53:20:37:b0:54:d4: 4b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:36:77:11:43:FF:C0:61:38:3D:42:EF:51:5F:9B:03:A1:AD:AA:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:10:ce:70:62:44:ea:d1:b8:fe:59:9e:c9:5b:1f:e2:d6:f1: bc:51:d9:1d:dc:5b:45:ff:e4:37:5e:67:fa:5e:73:a7:df:48: 2f:16:78:17:e5:78:e3:05:a8:61:19:29:59:e5:b9:b6:2c:90: 16:d9:31:34:e6:f9:cd:11:83:a2:dc:d9:71:c5:e6:1f:62:ed: 5c:9c:f6:01:52:0d:86:ed:23:9e:18:5d:46:4a:f4:bd:be:da: d4:4f:de:82:55:db:95:b7:58:eb:a9:08:c7:07:79:60:fc:af: ea:42:d1:20:28:a7:50:ca:b8:b8:c2:27:2f:c6:3e:66:ca:7d: bc:b3:97:2f:2c:5a:53:ed:89:ed:a0:49:3c:61:18:cb:06:45: c4:e9:f3:38:22:6b:9e:18:a1:e1:33:12:eb:26:26:ac:5a:6f: bd:16:21:84:d6:7c:40:0b:5b:b0:0b:76:38:c4:d0:a3:a6:81: 61:a0:79:1a:f1:73:e5:88:68:8a:ff:7a:a7:03:a5:7d:70:57: 24:9f:59:09:02:ae:f4:6c:01:22:cb:78:83:ef:31:22:66:6d: 9b:d7:04:f6:5d:0c:3e:3f:ca:68:de:e0:a7:6c:8f:0a:25:12: cf:0a:24:0c:f7:96:b2:47:a3:73:9c:35:23:ba:a6:6e:82:6e: 12:f9:33:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEL3PP0Q7nysMA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjE5ODNjZGMtYTU5Zi00NDc3LTk5M2YtMTBkMzNmYjk1ZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfEuiCQIl0LH4kIFDl13KlEb5JlQEkLjqW/T nSJHiKV2HKPeIzmtvqhghlkLiMw8jVbhBFPrLhrnJ1p82dXxUmGLlJisLa7pXuwQ 3uvIaZdsW8/FIjNIEzVdvTPOzNgfHt1bZAZZpsqoOxgdmdli5VfbOzqC77gkcfXI bN/KebNfN+jbMy/wqPl4YhRkuDlEWvR7iLiIS7NwHD/O/mQaZCGY1dNxlElrHkc5 iyVXG/kkwyJZiq+ralLMEwR4c+7kx8xFM4MV0Kz2I1JBA0hSykx3IC0545nlw6E+ l243LTCWcxsuT4twDOlz8eu8dOHGvqbQpFL/0AlTIDewVNRLywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP42dxFD/8BhOD1C71FfmwOhraqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTBjYzg0MWUtYWE2ZS0z NDMyLWFmMjYtNjE2MjFmOGFiM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKgQznBiROrRuP5ZnslbH+LW8bxR2R3cW0X/5DdeZ/pec6ffSC8W eBfleOMFqGEZKVnlubYskBbZMTTm+c0Rg6Lc2XHF5h9i7Vyc9gFSDYbtI54YXUZK 9L2+2tRP3oJV25W3WOupCMcHeWD8r+pC0SAop1DKuLjCJy/GPmbKfbyzly8sWlPt ie2gSTxhGMsGRcTp8zgia54YoeEzEusmJqxab70WIYTWfEALW7ALdjjE0KOmgWGg eRrxc+WIaIr/eqcDpX1wVySfWQkCrvRsASLLeIPvMSJmbZvXBPZdDD4/ymje4Kds jwolEs8KJAz3lrJHo3OcNSO6pm6CbhL5M0A= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:53 2025 by rpki-client