$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d19b102e-d2c8-3e72-afff-f16e0e8702c0.roa File: d19b102e-d2c8-3e72-afff-f16e0e8702c0.roa (raw, json) Hash identifier: OacnAcUaMTCUmkwJiUzcbU7kZcM8q6jkBB3TFxcaLR8= Subject key identifier: AA:6D:37:98:D8:AA:36:A9:63:85:ED:61:55:09:6C:A0:FC:DB:60:11 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C1C8BADE2C25328409B8 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d19b102e-d2c8-3e72-afff-f16e0e8702c0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c1:c8:ba:de:2c:25:32:84:09:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c323b14e-cd0f-47ac-beae-197594a6fed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:aa:66:f9:a3:15:5d:93:86:35:21:39:0c:08: 05:22:3d:77:c2:0c:55:2b:52:88:b1:80:c0:6c:da: 2e:86:02:e3:a6:59:2a:1c:ae:88:97:aa:aa:75:7f: e2:24:20:bc:63:56:63:ce:f8:b0:9d:f4:2b:93:34: d8:38:43:f8:80:28:4c:a9:50:59:d7:25:10:73:32: e8:2b:94:4b:09:52:9b:20:a7:17:87:75:ba:d5:5d: 00:6c:1e:16:af:ee:65:5f:f4:a2:77:05:38:56:19: 0b:e3:51:c8:87:3d:c9:18:15:ec:79:aa:e5:58:86: 11:90:c5:b0:8b:6c:dd:ac:c2:4a:97:be:fd:f9:ed: 27:6e:97:c9:1b:31:b5:3b:4b:73:d2:e9:3f:da:77: 7a:31:aa:9b:97:18:79:69:dc:ac:05:e2:93:b6:76: 24:20:0c:df:6d:8a:77:62:4f:e1:3a:0c:32:f7:bd: 55:40:ca:8a:50:5f:60:16:11:19:17:25:36:dc:12: b5:a5:a1:8f:0b:5b:7a:9a:ae:98:bb:d6:d4:13:d7: cb:9f:54:a1:d7:9b:5b:a2:f8:0e:ca:64:a3:bb:cc: 15:cc:77:5f:46:d0:b3:0e:d1:c8:8d:6e:b5:5a:1c: 65:20:cc:bc:0d:8e:ac:18:a9:8b:c5:c2:28:8a:a2: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6D:37:98:D8:AA:36:A9:63:85:ED:61:55:09:6C:A0:FC:DB:60:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d19b102e-d2c8-3e72-afff-f16e0e8702c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9b:ab:10:c5:70:f2:cc:47:81:48:de:35:bd:ce:c0:23:b8: 2e:a5:5b:4c:86:91:41:30:ec:37:01:da:7b:8f:9e:6b:ad:f4: 22:f1:39:0c:7e:5a:be:ba:c7:f2:0e:17:b6:2c:40:fa:b1:bb: 92:a6:19:8a:8f:d8:f2:01:50:a8:c2:25:b8:0f:28:42:4b:39: 5d:70:1a:24:c3:2b:14:e3:72:c7:12:48:79:bc:c4:4e:9b:a8: 01:dc:40:c9:d0:da:3b:c3:4b:e4:a4:27:45:5a:d9:0d:67:96: 51:d0:0a:e4:63:4a:a2:0b:3b:a8:d0:e0:3c:f8:62:c6:b9:e0: c5:39:1a:39:fd:3b:93:c3:98:12:db:ea:e2:b0:c4:98:6b:be: 53:e3:27:84:91:72:e4:5c:71:29:77:24:d1:a7:e7:e3:b6:cc: c6:20:fa:11:61:0f:eb:52:f4:3f:42:4f:c0:3f:39:3f:d5:df: db:4d:94:25:6b:30:5b:4c:f2:0d:08:d6:ff:19:b6:51:ce:59: ed:29:75:d8:a2:05:6b:32:52:3c:db:c7:60:aa:38:e3:5b:23: 01:86:0a:1d:4d:d4:41:79:ab:bc:bf:6e:00:8d:af:28:33:45: cb:97:aa:d0:c8:e3:f1:6a:00:cb:7d:5c:9d:de:d0:eb:6c:0b: f6:d6:18:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMHIut4sJTKECbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzMyM2IxNGUtY2QwZi00N2FjLWJlYWUtMTk3NTk0YTZmZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKpm+aMVXZOGNSE5DAgFIj13wgxVK1KIsYDA bNouhgLjplkqHK6Il6qqdX/iJCC8Y1ZjzviwnfQrkzTYOEP4gChMqVBZ1yUQczLo K5RLCVKbIKcXh3W61V0AbB4Wr+5lX/SidwU4VhkL41HIhz3JGBXsearlWIYRkMWw i2zdrMJKl779+e0nbpfJGzG1O0tz0uk/2nd6Maqblxh5adysBeKTtnYkIAzfbYp3 Yk/hOgwy971VQMqKUF9gFhEZFyU23BK1paGPC1t6mq6Yu9bUE9fLn1Sh15tbovgO ymSju8wVzHdfRtCzDtHIjW61WhxlIMy8DY6sGKmLxcIoiqKoXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKptN5jYqjapY4XtYVUJbKD822ARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDE5YjEwMmUtZDJjOC0z ZTcyLWFmZmYtZjE2ZTBlODcwMmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACWbqxDFcPLMR4FI3jW9zsAjuC6lW0yGkUEw7DcB2nuPnmut9CLx OQx+Wr66x/IOF7YsQPqxu5KmGYqP2PIBUKjCJbgPKEJLOV1wGiTDKxTjcscSSHm8 xE6bqAHcQMnQ2jvDS+SkJ0Va2Q1nllHQCuRjSqILO6jQ4Dz4Ysa54MU5Gjn9O5PD mBLb6uKwxJhrvlPjJ4SRcuRccSl3JNGn5+O2zMYg+hFhD+tS9D9CT8A/OT/V39tN lCVrMFtM8g0I1v8ZtlHOWe0pddiiBWsyUjzbx2CqOONbIwGGCh1N1EF5q7y/bgCN rygzRcuXqtDI4/FqAMt9XJ3e0OtsC/bWGKw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:26 2025 by rpki-client