$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa File: cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa (raw, json) Hash identifier: wcC7eCruWdrAsZROGNsjLGphuQSSCtm1BwGh0lK1s0c= Subject key identifier: AC:E7:2F:59:4C:12:70:4B:4E:CA:7F:D4:DA:31:36:09:B0:9B:D5:B7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410B5A708B7713BFB83EAC8 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:b5:a7:08:b7:71:3b:fb:83:ea:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=60b19f95-4fed-4320-95a1-9eeec2490b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:b1:c5:6d:ef:8f:56:e5:f7:9b:d4:51:7f: f0:01:c1:d2:cd:0a:4b:aa:40:ea:1b:ef:eb:53:72: 74:e0:0c:15:47:48:9d:67:a9:c9:65:72:41:37:91: 78:15:57:4b:a0:b2:47:c6:0d:fa:23:57:04:19:fc: 7e:e9:5f:68:21:83:af:d1:10:83:17:c7:2b:c5:2d: 33:e7:f7:d3:97:ab:ff:63:f6:0a:a7:29:01:4a:e2: 67:71:42:01:19:55:39:b4:7b:98:48:d0:b4:b7:f9: db:3a:d4:ca:a2:7e:fc:47:b1:3f:a5:c4:8e:df:e3: 58:dc:fa:93:3b:e7:f6:3d:4f:ed:5b:bf:7f:c7:10: e4:c6:59:f4:88:5b:5d:22:06:f4:67:e5:c9:51:bf: bd:f4:ce:1d:f8:78:22:e1:f7:c2:78:cc:68:a7:35: 0f:32:81:a9:88:ad:10:1a:17:5c:3b:89:84:2d:67: 98:8d:1b:4d:92:50:88:48:1d:61:3e:0d:4f:cd:ce: 84:60:9b:6c:d5:4f:37:b2:b0:2e:3b:e2:b6:75:fc: 0f:74:4e:84:74:6f:25:71:81:0d:ff:e3:7e:f1:e4: e9:95:10:e9:e4:dd:99:95:85:f0:cf:99:8e:c7:fd: e9:1a:78:32:17:f2:a4:99:40:96:01:3a:7f:23:20: d9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E7:2F:59:4C:12:70:4B:4E:CA:7F:D4:DA:31:36:09:B0:9B:D5:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:0f:27:06:24:cc:d6:b2:7c:8b:2a:74:7a:9e:4f:7d:f2:50: d8:56:1a:0f:4c:4e:e1:e2:d2:af:cd:1b:36:68:2f:b1:d1:65: f9:dc:fa:06:b3:6b:ea:6d:43:09:50:de:0c:83:af:6e:20:89: 23:f8:3b:42:57:57:c9:c7:b2:4c:85:b3:14:87:c6:a0:35:bf: bf:79:d2:bb:31:08:51:04:9d:4b:44:6c:a5:c7:56:a6:f9:cf: 11:cd:c3:ac:4d:01:2a:6c:39:d4:7e:fb:b8:2a:43:9f:aa:2b: 66:67:8e:92:e1:26:08:10:51:13:f3:31:7c:3a:89:7b:19:11: 77:18:b0:a3:05:9b:5b:12:cf:b5:07:ad:13:e7:e2:5d:13:6e: 09:2d:b0:41:c8:3f:68:e3:77:70:0b:00:a7:5d:b2:75:d8:89: b2:42:4a:ff:50:5b:81:bb:24:13:70:88:7f:e9:1c:65:15:55: 1d:fd:ed:b5:6a:20:71:6e:91:77:7f:01:15:3d:9c:fd:17:c7: eb:ea:53:9b:25:f3:72:48:14:13:53:d7:0f:b5:c3:c2:2e:69: 47:46:f1:dd:23:e5:de:61:9a:2e:55:cc:9d:72:56:75:14:2a: 0d:3e:e9:1b:bd:b9:c8:89:2e:2c:71:e7:eb:58:3e:6c:f7:79: de:cf:06:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELWnCLdxO/uD6sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjBiMTlmOTUtNGZlZC00MzIwLTk1YTEtOWVlZWMyNDkwYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUexxW3vj1bl95vUUX/wAcHSzQpLqkDqG+/r U3J04AwVR0idZ6nJZXJBN5F4FVdLoLJHxg36I1cEGfx+6V9oIYOv0RCDF8crxS0z 5/fTl6v/Y/YKpykBSuJncUIBGVU5tHuYSNC0t/nbOtTKon78R7E/pcSO3+NY3PqT O+f2PU/tW79/xxDkxln0iFtdIgb0Z+XJUb+99M4d+Hgi4ffCeMxopzUPMoGpiK0Q GhdcO4mELWeYjRtNklCISB1hPg1Pzc6EYJts1U83srAuO+K2dfwPdE6EdG8lcYEN /+N+8eTplRDp5N2ZlYXwz5mOx/3pGngyF/KkmUCWATp/IyDZKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKznL1lMEnBLTsp/1NoxNgmwm9W3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2Y5M2JjNzgtNDhjMy0z YzY2LWI4ZjktNjMyZWMyOTExNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI4PJwYkzNayfIsqdHqeT33yUNhWGg9MTuHi0q/NGzZoL7HRZfnc +gaza+ptQwlQ3gyDr24giSP4O0JXV8nHskyFsxSHxqA1v7950rsxCFEEnUtEbKXH Vqb5zxHNw6xNASpsOdR++7gqQ5+qK2ZnjpLhJggQURPzMXw6iXsZEXcYsKMFm1sS z7UHrRPn4l0TbgktsEHIP2jjd3ALAKddsnXYibJCSv9QW4G7JBNwiH/pHGUVVR39 7bVqIHFukXd/ARU9nP0Xx+vqU5sl83JIFBNT1w+1w8IuaUdG8d0j5d5hmi5VzJ1y VnUUKg0+6Ru9uciJLixx5+tYPmz3ed7PBhM= -----END CERTIFICATE-----Generated at Thu Aug 7 01:06:55 2025 by rpki-client