$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa File: a5e600de-f326-3392-a8c2-4489902db132.roa (raw, json) Hash identifier: x8xco8QYBEQZzm8TiV1LD9Q7vqgZG1UagUtVUAl5jcw= Subject key identifier: 93:A2:B5:88:DC:2A:97:5D:77:23:E7:95:0B:9E:3F:F4:1A:E5:35:D3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674AAC52D0CA03AB933C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 2001:500:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4a:ac:52:d0:ca:03:ab:93:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=5740b3a3-57b2-4fc2-b953-404ccd0d25c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:e8:1c:4d:c8:e9:33:cb:7c:76:6b:92:3e: 28:3c:e9:b9:ad:2f:b6:2e:72:72:04:ba:eb:ee:bd: 2b:4e:c9:cf:fb:52:f9:8d:52:48:cc:f2:d0:49:f6: 90:7f:4e:35:fd:02:f4:a8:22:d1:3c:cc:38:87:04: 7c:f4:50:20:da:9d:32:d8:a3:79:61:83:08:38:aa: 21:70:d0:46:b0:af:21:f8:db:e2:ce:78:7e:c0:37: ec:21:22:17:e8:f5:83:8f:fc:f5:71:45:63:e0:4f: 07:da:07:1e:5b:27:b5:eb:f3:2e:21:46:2d:cf:8a: 43:8e:01:59:8e:21:25:3a:a8:a3:41:38:64:bf:4e: 55:56:5d:4a:f8:76:df:92:cc:74:48:f0:e7:6b:80: 3e:ee:71:c2:f6:4a:04:9a:ed:75:2c:4d:5f:b5:38: a7:ce:13:01:85:50:a7:21:7d:3e:3e:77:60:ea:f5: 56:07:3c:63:39:4d:b2:a5:4a:e3:ed:3c:55:46:d9: 50:72:a9:c3:73:3b:e7:33:a4:61:bf:4b:8f:c2:f5: 2b:97:18:3f:73:4d:6a:f8:5a:3a:e4:f9:51:04:52: 3e:61:ad:5d:20:ee:c1:8b:38:c8:25:3f:0a:f8:b5: 76:e6:98:ac:7b:de:df:eb:ab:fd:5d:67:0b:66:0e: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A2:B5:88:DC:2A:97:5D:77:23:E7:95:0B:9E:3F:F4:1A:E5:35:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3e:b8:51:2a:5b:46:06:e3:15:66:7b:85:f0:54:42:15:39: fc:25:f9:63:64:db:95:2e:38:63:67:3b:47:bf:a3:8b:d5:78: 31:95:2a:e7:c8:11:0d:e9:f1:03:54:4e:77:43:b6:6e:ad:de: 73:a8:e9:e5:53:90:fe:bf:c9:51:65:3b:4e:18:a7:16:5a:dc: 62:8a:0d:6f:9f:06:ab:2a:fb:35:03:17:95:16:dd:be:b6:0f: 45:ba:d1:ae:ff:b0:f2:f8:13:d8:ff:e3:07:f0:68:87:2b:33: ef:b4:52:97:32:73:05:5f:7c:40:dd:d2:c8:da:a1:25:b1:2f: 48:b2:5c:6e:20:be:c9:bb:7d:f2:74:6e:68:b5:b2:3e:89:05: 1c:8d:55:d3:07:50:f7:67:bc:e8:63:f6:e0:6d:fa:47:b9:a2: be:01:93:f3:1e:fe:37:e5:fd:d9:0c:44:3b:57:4f:29:01:63: e7:26:c5:1f:19:80:11:da:45:02:01:85:a4:88:17:85:7e:66: b9:db:b6:cd:10:6a:15:39:9d:18:92:fa:cc:97:02:00:6c:f2: 4d:d4:22:ed:d9:72:79:cf:1b:a3:5f:7d:37:a5:cb:e5:b1:e0: 01:2f:9f:4d:f0:e1:69:ab:6c:4f:90:1e:d7:e0:e1:ef:5e:7b: eb:83:30:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ0qsUtDKA6uTPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk NTc0MGIzYTMtNTdiMi00ZmMyLWI5NTMtNDA0Y2NkMGQyNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1XoHE3I6TPLfHZrkj4oPOm5rS+2LnJyBLrr 7r0rTsnP+1L5jVJIzPLQSfaQf041/QL0qCLRPMw4hwR89FAg2p0y2KN5YYMIOKoh cNBGsK8h+Nviznh+wDfsISIX6PWDj/z1cUVj4E8H2gceWye16/MuIUYtz4pDjgFZ jiElOqijQThkv05VVl1K+Hbfksx0SPDna4A+7nHC9koEmu11LE1ftTinzhMBhVCn IX0+Pndg6vVWBzxjOU2ypUrj7TxVRtlQcqnDczvnM6Rhv0uPwvUrlxg/c01q+Fo6 5PlRBFI+Ya1dIO7BizjIJT8K+LV25pise97f66v9XWcLZg5+fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJOitYjcKpdddyPnlQueP/Qa5TXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTVlNjAwZGUtZjMyNi0z MzkyLWE4YzItNDQ4OTkwMmRiMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACw+uFEqW0YG4xVme4XwVEIVOfwl+WNk25UuOGNnO0e/o4vVeDGV KufIEQ3p8QNUTndDtm6t3nOo6eVTkP6/yVFlO04YpxZa3GKKDW+fBqsq+zUDF5UW 3b62D0W60a7/sPL4E9j/4wfwaIcrM++0UpcycwVffEDd0sjaoSWxL0iyXG4gvsm7 ffJ0bmi1sj6JBRyNVdMHUPdnvOhj9uBt+ke5or4Bk/Me/jfl/dkMRDtXTykBY+cm xR8ZgBHaRQIBhaSIF4V+Zrnbts0QahU5nRiS+syXAgBs8k3UIu3ZcnnPG6NffTel y+Wx4AEvn03w4WmrbE+QHtfg4e9ee+uDMG0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:02:51 2025 by rpki-client