$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa File: ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa (raw, json) Hash identifier: +qJQ8NT/Nr+9BXrdIi+zScnAzGGvsJztW48l1ERPqXg= Subject key identifier: 6A:E5:39:CE:33:E3:39:D0:B6:45:84:8B:26:48:4C:84:25:AB:F3:22 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410B4B06772A1411F726600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:b4:b0:67:72:a1:41:1f:72:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=426785d9-f78f-43bb-9fbc-984fb4130084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:9d:6c:99:2c:a1:7d:7f:46:9a:a9:86:3b: 14:18:25:95:c1:25:6c:b9:e4:b5:b3:87:ab:aa:21: 78:68:da:91:c2:76:f0:47:de:b3:c3:33:1a:b7:9e: 30:93:18:4e:38:a5:61:fe:a7:04:4e:34:bf:37:da: bd:45:44:31:ad:01:4b:b1:6b:e3:a7:0c:ae:b1:34: d2:43:6f:ce:8e:bc:09:ec:4b:fc:46:c2:c8:03:9f: 03:ac:cf:14:07:ab:53:eb:29:d4:06:ea:25:30:8b: 4e:95:49:2a:fa:1f:a0:d8:26:47:66:12:30:1f:11: a5:70:9c:dd:41:7a:de:6c:d1:fa:8f:7c:1d:00:b6: 7a:a9:2e:ca:33:fc:91:f4:a3:78:c4:e8:d2:20:41: f6:c9:e7:c8:23:5c:63:af:28:b9:71:b7:9b:c1:61: 2d:38:b0:bf:d0:f0:10:a8:bf:b1:94:0e:4f:9a:58: 7d:63:db:51:61:26:6e:b8:37:93:06:46:ac:39:60: c5:da:a1:f5:2f:60:69:ba:0a:bb:0c:ba:98:7f:95: a6:97:ac:8c:ba:ba:bb:bd:f9:ae:a0:53:48:0f:07: 53:7d:8d:c4:13:ee:cc:08:12:14:bc:9d:13:9e:eb: e1:07:fb:77:a9:c1:20:a9:61:da:0e:b8:aa:7b:78: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E5:39:CE:33:E3:39:D0:B6:45:84:8B:26:48:4C:84:25:AB:F3:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f3:ae:70:79:d2:09:60:9c:e4:5a:08:74:66:f0:ca:83:ff: 8c:c1:cc:ee:3e:2d:57:55:03:3a:5c:d8:8d:06:06:0e:a2:7d: 21:91:7f:89:94:98:59:02:61:ef:f5:af:8a:66:2d:e1:48:4a: cf:39:c0:7e:46:67:fc:3f:3d:c3:3b:16:4b:a8:6d:fa:81:bc: de:6a:fe:46:51:4e:af:a4:99:d5:61:10:67:72:ba:f4:d1:3b: 4d:da:ad:6a:f5:d9:07:a5:df:8a:55:2c:77:0e:5e:09:8b:83: 00:c7:e6:d1:d1:af:84:26:41:4e:f5:5d:5a:22:ee:db:b1:7f: d5:e0:8a:22:8d:0f:94:f0:92:88:4f:7f:29:f9:81:78:35:4e: f4:6f:cd:15:3c:0b:76:d1:a4:f1:6f:11:cf:31:a3:10:42:7d: 9b:d9:f4:d1:46:77:f9:a1:f9:84:f5:aa:fd:94:00:7c:11:e0: 6b:a6:2f:34:07:4d:c5:7e:8a:2b:1b:b4:00:26:c7:8e:1d:64: 93:d4:f0:b0:94:7d:92:2a:b5:da:1a:9a:80:d4:0e:6c:95:3d: 24:00:07:d9:e7:73:70:96:07:d7:37:35:70:6e:b2:2a:0e:86: 7c:bf:88:12:0b:bb:e2:21:40:22:48:5b:64:67:14:7f:9d:bb: 2f:5f:bd:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELSwZ3KhQR9yZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDI2Nzg1ZDktZjc4Zi00M2JiLTlmYmMtOTg0ZmI0MTMwMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb6dbJksoX1/RpqphjsUGCWVwSVsueS1s4er qiF4aNqRwnbwR96zwzMat54wkxhOOKVh/qcETjS/N9q9RUQxrQFLsWvjpwyusTTS Q2/OjrwJ7Ev8RsLIA58DrM8UB6tT6ynUBuolMItOlUkq+h+g2CZHZhIwHxGlcJzd QXrebNH6j3wdALZ6qS7KM/yR9KN4xOjSIEH2yefII1xjryi5cbebwWEtOLC/0PAQ qL+xlA5Pmlh9Y9tRYSZuuDeTBkasOWDF2qH1L2Bpugq7DLqYf5Wml6yMurq7vfmu oFNIDwdTfY3EE+7MCBIUvJ0TnuvhB/t3qcEgqWHaDriqe3j4IQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGrlOc4z4znQtkWEiyZITIQlq/MiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2E1N2Y4YWUtMzc4Ny0z OTgyLWI0MjMtZWEzNWJiZjQyYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHzzrnB50glgnORaCHRm8MqD/4zBzO4+LVdVAzpc2I0GBg6ifSGR f4mUmFkCYe/1r4pmLeFISs85wH5GZ/w/PcM7FkuobfqBvN5q/kZRTq+kmdVhEGdy uvTRO03arWr12Qel34pVLHcOXgmLgwDH5tHRr4QmQU71XVoi7tuxf9XgiiKND5Tw kohPfyn5gXg1TvRvzRU8C3bRpPFvEc8xoxBCfZvZ9NFGd/mh+YT1qv2UAHwR4Gum LzQHTcV+iisbtAAmx44dZJPU8LCUfZIqtdoamoDUDmyVPSQAB9nnc3CWB9c3NXBu sioOhny/iBILu+IhQCJIW2RnFH+duy9fvdM= -----END CERTIFICATE-----Generated at Thu Aug 7 03:24:58 2025 by rpki-client