$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a715ae04-027d-33a5-a29e-1a770fb32675.roa File: a715ae04-027d-33a5-a29e-1a770fb32675.roa (raw, json) Hash identifier: kr+augfcIvxEmluNh6qjK88M/agOAil/UMUmrSg9upA= Subject key identifier: 0F:65:6B:DE:98:53:4E:1E:16:D9:7E:EA:4C:E7:54:1A:D5:33:6E:64 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674DAA4DC3C39BFD923080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a715ae04-027d-33a5-a29e-1a770fb32675.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 2001:500:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4d:aa:4d:c3:c3:9b:fd:92:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=f53fdace-dde4-4864-84d0-706550112474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:90:9e:9a:13:37:f3:39:76:85:37:3e:fc: c3:43:af:00:a4:70:9d:e8:3f:95:51:2a:8b:e6:91: 61:41:cc:b9:57:b0:d2:11:6d:79:f2:5e:f2:7e:fb: d4:2e:d0:e9:7c:30:03:cc:6f:1c:91:86:6e:fb:3a: 8d:50:b6:11:bf:d5:2c:b1:80:16:d0:57:96:85:4e: 40:3d:db:f1:d3:7e:0a:c6:ae:96:36:5a:14:1d:1e: f5:ba:ae:ad:42:dd:e0:44:07:9f:42:53:38:18:b2: 78:2a:7b:6e:44:f1:73:15:5a:4e:55:64:7c:3e:43: 7d:3a:7f:48:4b:65:97:d2:86:37:7f:ae:7d:43:b1: 12:42:52:9c:69:68:6a:62:0a:e4:ea:83:31:28:5d: af:e8:ff:7e:63:a6:2d:14:62:6f:41:a3:85:9c:5c: 5e:ef:ca:5d:25:1b:54:c5:ef:5c:3f:16:62:c8:bc: f6:06:dd:69:49:97:00:c2:f3:8d:65:86:2a:96:5f: 6b:09:65:46:9e:f3:28:a1:b4:e1:6f:43:1d:68:df: c9:14:5c:6c:77:67:9b:99:88:83:28:81:da:c4:58: c0:1f:8e:f2:41:2e:8e:a6:94:47:2e:d7:45:ca:41: 66:08:77:d6:0e:d3:d7:34:77:6e:3e:0a:61:c1:2d: 78:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:65:6B:DE:98:53:4E:1E:16:D9:7E:EA:4C:E7:54:1A:D5:33:6E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a715ae04-027d-33a5-a29e-1a770fb32675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:44::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2c:25:da:66:d7:12:66:c4:1b:83:62:ab:2c:36:c9:82:e5: 56:91:6d:8e:d2:14:c2:65:ba:2d:00:f3:38:70:e0:68:12:03: c4:3b:7c:be:b7:35:fa:3b:0e:db:3b:41:96:5d:85:a1:40:c7: f5:e2:b0:20:88:23:15:3a:8a:9f:a7:fe:58:f1:4f:cc:c9:f7: f6:e5:6d:2c:bb:1b:0a:9e:dc:8e:8f:39:c8:0f:0a:fa:d0:95: 64:ab:af:6d:b9:47:3d:60:23:35:ae:64:09:ab:ce:83:c2:41: a9:b6:67:3f:11:0f:55:a3:0d:8e:6d:0d:ca:b0:ef:c7:19:d9: 2d:55:3e:e1:9b:cb:f2:e5:b5:c3:6a:d8:c0:95:26:18:78:9e: 2d:2a:58:7b:38:cd:11:6b:73:5f:ef:c3:93:18:7f:0d:b1:7a: 44:05:52:83:2f:01:5c:44:16:e1:96:5c:93:1a:3e:56:c9:ae: d6:8f:40:4b:9f:ae:92:c4:83:a6:9f:4d:ba:6e:7b:28:75:fd: 17:19:9c:b0:aa:12:ec:60:ee:ff:75:42:3f:5a:0e:63:b9:88: a6:d0:ac:6e:bc:a9:9d:44:fd:6e:e9:48:7f:47:4e:92:a3:14: c4:75:a6:ab:2d:59:5e:c6:b4:01:7d:36:81:7e:6c:ed:3c:5b: 2d:c6:29:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ02qTcPDm/2SMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZjUzZmRhY2UtZGRlNC00ODY0LTg0ZDAtNzA2NTUwMTEyNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNGQnpoTN/M5doU3PvzDQ68ApHCd6D+VUSqL 5pFhQcy5V7DSEW158l7yfvvULtDpfDADzG8ckYZu+zqNULYRv9UssYAW0FeWhU5A Pdvx034Kxq6WNloUHR71uq6tQt3gRAefQlM4GLJ4KntuRPFzFVpOVWR8PkN9On9I S2WX0oY3f659Q7ESQlKcaWhqYgrk6oMxKF2v6P9+Y6YtFGJvQaOFnFxe78pdJRtU xe9cPxZiyLz2Bt1pSZcAwvONZYYqll9rCWVGnvMoobThb0MdaN/JFFxsd2ebmYiD KIHaxFjAH47yQS6OppRHLtdFykFmCHfWDtPXNHduPgphwS146QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA9la96YU04eFtl+6kznVBrVM25kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTcxNWFlMDQtMDI3ZC0z M2E1LWEyOWUtMWE3NzBmYjMyNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwsJdpm1xJmxBuDYqssNsmC5VaRbY7SFMJlui0A8zhw4GgSA8Q7 fL63Nfo7Dts7QZZdhaFAx/XisCCIIxU6ip+n/ljxT8zJ9/blbSy7Gwqe3I6POcgP CvrQlWSrr225Rz1gIzWuZAmrzoPCQam2Zz8RD1WjDY5tDcqw78cZ2S1VPuGby/Ll tcNq2MCVJhh4ni0qWHs4zRFrc1/vw5MYfw2xekQFUoMvAVxEFuGWXJMaPlbJrtaP QEufrpLEg6afTbpueyh1/RcZnLCqEuxg7v91Qj9aDmO5iKbQrG68qZ1E/W7pSH9H TpKjFMR1pqstWV7GtAF9NoF+bO08Wy3GKeU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:25 2025 by rpki-client