$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8486756-ed27-31b8-a48e-88678765349b.roa File: a8486756-ed27-31b8-a48e-88678765349b.roa (raw, json) Hash identifier: R/D/s5kmUtXPpdezANvVqGZ27VRj+AUvhk2+WFJ5RyE= Subject key identifier: 8B:A5:E5:F3:D8:14:2D:66:C7:20:45:BB:A0:3A:2C:71:D6:6C:4C:CA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE56D968AA0341CD251200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8486756-ed27-31b8-a48e-88678765349b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:56:d9:68:aa:03:41:cd:25:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=5b18e5b8-3d4c-488a-945d-c687fe5a935d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:de:c4:20:3e:97:1f:c6:bc:fb:09:cf:c3: 12:7c:9e:1e:2a:e3:30:ca:77:b5:59:b6:a2:bb:50: 9c:82:32:e4:89:01:a5:b2:2e:18:6d:67:f9:37:22: 2b:02:24:72:74:4d:1b:2f:53:6c:c7:52:71:a9:02: 15:c2:02:80:9a:21:b8:c5:f6:c6:65:9f:0c:79:47: 82:f3:9b:de:d1:87:b3:91:e8:f6:ce:58:76:25:be: 6a:84:25:18:73:4a:d6:dc:3f:93:5c:cb:6f:db:b1: 89:1c:c5:55:f5:0a:c4:d0:81:9e:5f:1b:48:77:6f: 6e:cc:5a:ee:11:59:fe:66:0d:21:5b:90:a0:60:16: 3a:4f:36:12:69:40:c5:50:c9:05:ee:f1:dd:f7:96: 68:4e:67:e7:13:f5:f3:11:2f:ac:7e:fc:80:35:a6: bd:86:e4:22:cb:20:72:3b:98:a1:48:6c:5b:a5:84: a8:10:55:1c:3c:e1:9e:86:a5:db:91:45:ef:28:e0: c2:ca:38:fd:6f:30:6e:0a:af:db:b7:40:90:f5:ad: 77:db:ca:12:57:f4:57:1c:8a:14:43:9c:53:25:49: 28:34:cb:bb:23:e4:75:52:77:96:d0:b1:21:5f:34: c7:08:82:8f:21:28:14:c1:b9:c7:88:46:01:b9:83: 13:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A5:E5:F3:D8:14:2D:66:C7:20:45:BB:A0:3A:2C:71:D6:6C:4C:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8486756-ed27-31b8-a48e-88678765349b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:6d:69:73:f3:49:db:fc:c7:45:a8:b5:80:52:6c:ea:22:6c: c2:4c:47:2b:77:f4:5f:a9:43:48:00:af:64:1f:77:a3:81:be: 97:57:e3:2d:41:c1:fa:1a:b5:49:08:50:27:c0:94:8a:97:c0: de:68:0f:9a:9a:52:8a:f7:18:30:f6:35:ed:4c:0e:f3:fb:32: 93:8f:4c:af:41:b6:4f:82:85:9c:c7:45:70:19:e7:84:af:e2: c9:c0:78:21:f1:2a:24:a1:a9:38:1c:11:37:14:be:98:c6:fc: 29:3c:45:0f:99:3f:cf:4b:21:8f:aa:fe:c7:ab:9b:a3:aa:f9: 98:f5:44:26:9f:c6:83:6b:f4:a5:94:b7:d5:fe:6e:ec:47:a3: ce:bd:8f:4d:7f:89:ca:71:ce:a4:ae:3b:a9:ce:89:63:8e:03: ae:69:24:a8:67:cf:ba:4d:2e:fe:e9:10:34:6a:b4:e1:10:8e: 20:af:c0:8e:ff:13:c2:41:8b:1a:c1:36:e2:ff:f5:61:7e:29: 61:5c:93:51:d9:79:88:68:21:fc:e6:19:1b:0b:80:56:ab:86: 39:4e:f9:28:5e:a7:ac:14:86:cd:32:6e:27:9c:cd:34:8d:73: 4a:c6:52:14:fc:77:bb:c5:76:e1:68:49:22:12:97:71:db:07: 6b:3e:18:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzlbZaKoDQc0lEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NWIxOGU1YjgtM2Q0Yy00ODhhLTk0NWQtYzY4N2ZlNWE5MzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyzexCA+lx/GvPsJz8MSfJ4eKuMwyne1Wbai u1CcgjLkiQGlsi4YbWf5NyIrAiRydE0bL1Nsx1JxqQIVwgKAmiG4xfbGZZ8MeUeC 85ve0Yezkej2zlh2Jb5qhCUYc0rW3D+TXMtv27GJHMVV9QrE0IGeXxtId29uzFru EVn+Zg0hW5CgYBY6TzYSaUDFUMkF7vHd95ZoTmfnE/XzES+sfvyANaa9huQiyyBy O5ihSGxbpYSoEFUcPOGehqXbkUXvKODCyjj9bzBuCq/bt0CQ9a1328oSV/RXHIoU Q5xTJUkoNMu7I+R1UneW0LEhXzTHCIKPISgUwbnHiEYBuYMTkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIul5fPYFC1mxyBFu6A6LHHWbEzKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTg0ODY3NTYtZWQyNy0z MWI4LWE0OGUtODg2Nzg3NjUzNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI5taXPzSdv8x0WotYBSbOoibMJMRyt39F+pQ0gAr2Qfd6OBvpdX 4y1BwfoatUkIUCfAlIqXwN5oD5qaUor3GDD2Ne1MDvP7MpOPTK9Btk+ChZzHRXAZ 54Sv4snAeCHxKiShqTgcETcUvpjG/Ck8RQ+ZP89LIY+q/serm6Oq+Zj1RCafxoNr 9KWUt9X+buxHo869j01/icpxzqSuO6nOiWOOA65pJKhnz7pNLv7pEDRqtOEQjiCv wI7/E8JBixrBNuL/9WF+KWFck1HZeYhoIfzmGRsLgFarhjlO+Shep6wUhs0ybiec zTSNc0rGUhT8d7vFduFoSSISl3HbB2s+GKM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:57 2025 by rpki-client