$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/be73092b-99c5-3625-9088-bb6e8d14cf0c.roa File: be73092b-99c5-3625-9088-bb6e8d14cf0c.roa (raw, json) Hash identifier: jJhrgXpJpDrAAs99y9vGH6PYm7GDLeVyvJrSvut0OcI= Subject key identifier: D6:59:25:63:37:ED:02:2D:CF:0F:70:76:11:39:78:D6:41:00:E6:29 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C0C1DB2CDAF5DEC9E200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/be73092b-99c5-3625-9088-bb6e8d14cf0c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c0:c1:db:2c:da:f5:de:c9:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=505bbe17-36ed-47b5-9b54-7068327fbb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:d5:27:e4:1e:b0:57:67:da:64:80:80:64: 98:55:be:d2:46:41:42:b7:ac:a2:50:33:24:cb:05: eb:ca:85:77:b8:4a:41:97:b3:88:11:71:66:17:d3: 97:37:c2:11:f0:e0:da:a2:1c:c0:75:06:07:24:7b: 25:d2:fd:57:c1:f5:e2:42:91:3c:8f:6b:98:b6:23: 1f:25:6e:38:e5:3c:b3:ca:5d:2a:64:ab:08:9b:69: 87:07:19:83:0f:aa:bc:4e:3e:67:f0:ef:83:1e:f8: e1:46:eb:40:98:74:54:1d:0c:67:dd:13:de:c8:6f: f7:53:59:7b:59:03:6c:f1:70:1c:7a:7e:6b:c9:0e: a0:1f:fd:5e:42:35:52:f3:e2:c6:e8:f2:70:0d:de: e1:ba:65:0f:92:5e:96:7d:6f:40:cf:2e:df:89:cb: e8:38:2c:88:b8:a8:e7:9c:b6:86:fd:a2:3f:16:a3: 68:30:67:80:68:93:0d:79:b8:b2:86:fb:8d:94:95: b4:bc:75:69:8b:11:29:5f:91:79:d0:8b:1e:de:78: 02:b0:f5:79:b0:7a:b0:26:93:6d:96:da:5d:4f:d0: b9:1b:40:12:80:04:b0:f8:8c:57:74:85:7b:ee:09: aa:c6:bc:b2:58:06:d2:79:5e:39:87:d3:5a:80:f5: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:59:25:63:37:ED:02:2D:CF:0F:70:76:11:39:78:D6:41:00:E6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/be73092b-99c5-3625-9088-bb6e8d14cf0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:5c:2e:6d:45:28:16:7a:29:a3:29:9a:8e:37:91:7c:01:6e: 94:b0:cd:4b:3d:5e:70:92:1e:29:0c:8c:a0:c6:ea:9b:7b:35: 22:49:4b:10:46:2f:28:fa:6a:2e:97:09:e8:77:35:48:22:ba: c5:09:fb:62:f2:4d:a3:f9:02:3f:63:07:ba:73:4a:d9:b2:ab: 80:ed:c0:fc:4b:51:16:d7:55:50:6c:2b:ad:cf:1e:b4:1d:7b: 19:55:fe:e1:f9:51:81:96:e7:0b:4e:01:66:82:62:36:57:5c: af:2c:9b:d3:94:43:04:34:3f:f6:a2:b7:bc:73:c0:67:a7:39: 1f:99:b0:ac:61:8d:0d:52:06:cf:55:34:8a:e1:eb:3b:a9:92: d0:42:89:b7:42:2f:fd:fa:9d:dd:da:47:d7:29:4d:be:e7:4c: ba:92:db:56:6a:07:9e:37:ed:65:6d:38:59:07:b2:fc:00:a3: 49:81:50:68:2b:4a:81:08:f2:29:06:47:58:0b:c4:92:57:20: 39:bf:94:fa:7c:95:a0:a7:9c:0e:2c:d6:50:f0:3d:9b:05:5e: 9e:af:8f:06:5b:0d:a1:be:d1:21:2d:b9:60:01:c3:93:68:c7: 32:21:8e:03:16:49:44:04:09:95:7b:6a:62:37:0b:2d:75:43: 42:38:dc:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMDB2yza9d7J4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTA1YmJlMTctMzZlZC00N2I1LTliNTQtNzA2ODMyN2ZiYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QXVJ+QesFdn2mSAgGSYVb7SRkFCt6yiUDMk ywXryoV3uEpBl7OIEXFmF9OXN8IR8ODaohzAdQYHJHsl0v1XwfXiQpE8j2uYtiMf JW445Tyzyl0qZKsIm2mHBxmDD6q8Tj5n8O+DHvjhRutAmHRUHQxn3RPeyG/3U1l7 WQNs8XAcen5ryQ6gH/1eQjVS8+LG6PJwDd7humUPkl6WfW9Azy7ficvoOCyIuKjn nLaG/aI/FqNoMGeAaJMNebiyhvuNlJW0vHVpixEpX5F50Ise3ngCsPV5sHqwJpNt ltpdT9C5G0ASgASw+IxXdIV77gmqxryyWAbSeV45h9NagPUT8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZZJWM37QItzw9wdhE5eNZBAOYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmU3MzA5MmItOTljNS0z NjI1LTkwODgtYmI2ZThkMTRjZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ9cLm1FKBZ6KaMpmo43kXwBbpSwzUs9XnCSHikMjKDG6pt7NSJJ SxBGLyj6ai6XCeh3NUgiusUJ+2LyTaP5Aj9jB7pzStmyq4DtwPxLURbXVVBsK63P HrQdexlV/uH5UYGW5wtOAWaCYjZXXK8sm9OUQwQ0P/ait7xzwGenOR+ZsKxhjQ1S Bs9VNIrh6zupktBCibdCL/36nd3aR9cpTb7nTLqS21ZqB5437WVtOFkHsvwAo0mB UGgrSoEI8ikGR1gLxJJXIDm/lPp8laCnnA4s1lDwPZsFXp6vjwZbDaG+0SEtuWAB w5NoxzIhjgMWSUQECZV7amI3Cy11Q0I43JE= -----END CERTIFICATE-----Generated at Thu Aug 7 01:23:22 2025 by rpki-client