$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa File: ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa (raw, json) Hash identifier: GQqYcUvINVQNECBQp36jbbBTN3XgJjXgsO9g9ryxN9c= Subject key identifier: B0:6C:C9:DA:22:6E:B8:D9:82:1E:ED:C9:35:8F:89:32:01:34:35:D0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C1450019A4D5212468D0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c1:45:00:19:a4:d5:21:24:68:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c90e6d25-dc7d-4d3c-8ba0-9ea091a10370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:6d:15:f4:ea:d3:05:a3:a9:d5:48:4d:b1: 2d:1b:a4:59:2a:47:15:aa:29:6a:1c:5e:20:1d:b2: ed:04:b6:19:c0:da:bd:c5:6a:f3:da:2e:83:21:46: 10:cd:bc:78:17:d8:25:28:e6:a4:bc:07:37:1c:09: a4:c1:8d:91:f3:d4:b2:f8:02:5f:87:37:3d:df:0d: c8:3f:02:65:d5:55:18:38:e6:fe:b3:45:9f:bc:64: 86:00:c4:44:37:a4:21:8c:af:ce:08:e0:3f:05:4c: 7e:e9:86:54:a7:d6:78:7b:71:83:61:ce:b0:71:50: 88:95:ea:04:d0:93:c8:d6:98:4f:29:dd:b4:19:e6: 93:3c:9e:e4:dc:98:e0:0b:31:6a:04:b6:1e:dc:5c: d1:35:15:2a:50:a3:9f:cb:da:32:3d:72:13:7b:d0: 51:60:94:4f:ad:d1:b5:c8:c5:25:5f:f7:01:00:74: 90:de:c8:44:9d:2d:6e:d6:38:01:eb:1e:5c:31:48: d4:25:6d:54:14:26:5e:f8:87:69:de:34:ee:01:ec: 1a:b9:2a:cb:1b:84:aa:6a:15:20:1b:2a:12:c8:66: e1:75:c0:6e:7d:2d:61:b9:22:39:87:a1:0d:fb:8b: 45:78:c8:e6:ad:af:76:6e:65:28:1d:27:3f:e1:66: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6C:C9:DA:22:6E:B8:D9:82:1E:ED:C9:35:8F:89:32:01:34:35:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:59:6f:f0:20:97:01:6f:3e:35:9d:1d:de:37:56:0c:40:63: b3:3c:03:51:83:58:a1:6e:fd:32:fb:1c:c6:5e:7c:e1:7d:1b: 0a:96:67:c2:ad:a6:a9:6b:e7:c8:bd:d2:02:02:41:eb:eb:38: 0e:4c:a0:f6:2b:71:39:7d:f7:cf:40:9d:1a:53:b4:02:86:55: b0:b9:86:3e:2b:1f:e6:6e:5a:7c:8e:e7:6b:e2:5b:e7:3a:84: 43:68:4a:15:76:60:2d:ab:11:c2:3e:61:16:6b:fa:7e:cc:80: f0:00:3e:50:30:b0:f7:a0:69:f9:8e:22:62:da:b4:0d:6a:78: 0e:e4:95:72:d5:37:67:2d:21:64:65:44:ba:59:fc:0f:0a:d1: 61:d6:6d:9f:8e:a7:a2:e7:89:91:c2:99:8a:d8:8d:3f:53:1c: ac:53:65:e4:d9:09:a9:aa:91:e5:21:68:2f:7a:60:ad:fa:df: 1a:ee:c1:43:99:76:20:e6:b8:7e:cc:d5:d6:82:1b:cc:60:87: 26:47:1d:33:11:e5:7f:6b:1b:46:87:cc:84:05:32:f7:7b:d1: 84:cb:da:e7:2f:6b:9e:3f:b9:50:be:b5:25:fc:d3:a9:2a:a0: 87:3d:28:a1:c3:b9:c4:3e:2f:f7:92:39:01:4e:1f:f8:ab:c1: 17:21:d6:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMFFABmk1SEkaNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzkwZTZkMjUtZGM3ZC00ZDNjLThiYTAtOWVhMDkxYTEwMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGBtFfTq0wWjqdVITbEtG6RZKkcVqilqHF4g HbLtBLYZwNq9xWrz2i6DIUYQzbx4F9glKOakvAc3HAmkwY2R89Sy+AJfhzc93w3I PwJl1VUYOOb+s0WfvGSGAMREN6QhjK/OCOA/BUx+6YZUp9Z4e3GDYc6wcVCIleoE 0JPI1phPKd20GeaTPJ7k3JjgCzFqBLYe3FzRNRUqUKOfy9oyPXITe9BRYJRPrdG1 yMUlX/cBAHSQ3shEnS1u1jgB6x5cMUjUJW1UFCZe+Idp3jTuAewauSrLG4SqahUg GyoSyGbhdcBufS1huSI5h6EN+4tFeMjmra92bmUoHSc/4WZKdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLBsydoibrjZgh7tyTWPiTIBNDXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWIyNjc3ZWMtZDE3Zi0z YzVhLWI3Y2ItMGI5MmZlYWY5YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJZb/AglwFvPjWdHd43VgxAY7M8A1GDWKFu/TL7HMZefOF9GwqW Z8Ktpqlr58i90gICQevrOA5MoPYrcTl9989AnRpTtAKGVbC5hj4rH+ZuWnyO52vi W+c6hENoShV2YC2rEcI+YRZr+n7MgPAAPlAwsPegafmOImLatA1qeA7klXLVN2ct IWRlRLpZ/A8K0WHWbZ+Op6LniZHCmYrYjT9THKxTZeTZCamqkeUhaC96YK363xru wUOZdiDmuH7M1daCG8xghyZHHTMR5X9rG0aHzIQFMvd70YTL2ucva54/uVC+tSX8 06kqoIc9KKHDucQ+L/eSOQFOH/irwRch1gQ= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:23 2025 by rpki-client