$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa File: d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa (raw, json) Hash identifier: 5qOZ7G8KD5Z9Kuo4d4FKy0xfhdVJ05j6NxNWnspiHE4= Subject key identifier: DA:65:1B:46:1E:CE:F1:D1:B5:66:2F:64:40:A6:4C:CA:80:30:F4:77 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410BC06CAA18B1F1A705F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bc:06:ca:a1:8b:1f:1a:70:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=65f4cfd7-1923-41bc-9337-8be9b9343956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:5c:8d:a1:69:b1:ca:7f:f3:8c:fd:a2:73:8c: 78:86:51:c0:ca:c3:7c:40:38:9a:21:0e:9f:24:fa: e5:92:f3:75:56:5d:06:9d:49:1e:b0:63:fa:9d:4f: e8:b8:53:74:c2:9e:aa:9e:fe:02:a3:1e:b6:29:68: 63:89:c3:fc:7a:7f:0a:aa:1c:22:92:b3:04:47:ab: 5d:f9:b2:40:f5:2b:a3:81:8e:58:ff:66:f0:c9:e3: 9c:51:98:67:3c:7f:2c:0a:21:2b:4f:04:6e:22:b3: 3e:de:f0:9a:c6:b9:7a:12:7e:3b:9b:1c:15:b1:8b: 30:72:94:2a:49:10:87:d8:24:54:00:57:33:7e:1d: 55:49:dc:03:63:91:9f:de:94:7a:c6:fb:de:f7:82: 1c:44:bd:a1:99:56:5d:71:aa:11:07:a1:f3:c4:98: 15:f7:6a:a4:cc:15:68:c2:46:b3:ba:64:a5:97:37: e2:9d:88:51:fc:4a:1b:ea:ba:9c:0b:4a:9c:d9:bf: a9:ca:dd:fb:80:b5:6b:d3:88:7e:16:78:61:25:b8: 12:b4:36:38:10:e5:de:29:42:5c:fc:d5:17:bb:ff: b1:53:45:63:55:c6:96:60:76:2a:0c:bd:19:85:8e: e3:c2:65:f8:36:2f:96:11:55:8b:d1:92:1c:ee:04: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:65:1B:46:1E:CE:F1:D1:B5:66:2F:64:40:A6:4C:CA:80:30:F4:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4f:7c:9e:65:94:62:b6:f7:80:32:64:ac:2d:bc:9c:37:00: 55:f8:0e:bc:41:3f:16:28:4c:d3:08:d9:34:b4:0e:15:b7:15: 98:9b:f3:8d:ea:c4:2d:c1:9b:95:87:e7:07:cb:20:74:ea:38: 8e:ea:04:6e:08:b9:f2:bd:ad:f2:49:4f:0b:cf:e2:8b:d8:a8: ad:de:a4:9c:9f:c8:d0:55:1f:d3:af:22:08:d6:7d:2a:2e:54: 4b:54:50:f7:79:c2:e7:cf:2c:47:e0:1e:f9:b0:49:a9:7b:cc: 16:9c:5b:b5:1f:77:ad:b7:2f:ff:01:b2:4a:fe:49:73:13:ea: d0:3a:8f:16:1b:6a:a5:dc:6e:e9:37:a1:c9:ca:ac:b8:90:b2: 19:f0:46:a2:54:31:27:38:da:73:8b:c7:28:14:61:df:dc:91: e1:4d:94:7b:e0:22:72:b9:3b:7f:25:0d:1a:a1:88:d7:93:4f: 73:84:9f:0d:c6:91:5a:18:87:1b:a8:3f:4d:e8:eb:71:9b:e2: a6:5e:e3:5e:e9:94:38:f9:f9:97:77:81:ab:3f:29:70:09:d1: b8:ac:8b:19:4c:52:8b:fe:5e:03:25:12:0a:f9:e2:f6:c4:20: 5f:35:f7:64:ad:42:44:8e:b7:de:98:05:69:1c:63:94:ee:3f: 9d:f1:0e:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELwGyqGLHxpwXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjVmNGNmZDctMTkyMy00MWJjLTkzMzctOGJlOWI5MzQzOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1yNoWmxyn/zjP2ic4x4hlHAysN8QDiaIQ6f JPrlkvN1Vl0GnUkesGP6nU/ouFN0wp6qnv4Cox62KWhjicP8en8KqhwikrMER6td +bJA9SujgY5Y/2bwyeOcUZhnPH8sCiErTwRuIrM+3vCaxrl6En47mxwVsYswcpQq SRCH2CRUAFczfh1VSdwDY5Gf3pR6xvve94IcRL2hmVZdcaoRB6HzxJgV92qkzBVo wkazumSllzfinYhR/Eob6rqcC0qc2b+pyt37gLVr04h+FnhhJbgStDY4EOXeKUJc /NUXu/+xU0VjVcaWYHYqDL0ZhY7jwmX4Ni+WEVWL0ZIc7gTd3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNplG0YezvHRtWYvZECmTMqAMPR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDJkODU0ZWQtNjI5NC0z MmIwLThjNzctNDEzZDUxZmU1YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVPfJ5llGK294AyZKwtvJw3AFX4DrxBPxYoTNMI2TS0DhW3FZib 843qxC3Bm5WH5wfLIHTqOI7qBG4IufK9rfJJTwvP4ovYqK3epJyfyNBVH9OvIgjW fSouVEtUUPd5wufPLEfgHvmwSal7zBacW7Ufd623L/8Bskr+SXMT6tA6jxYbaqXc buk3ocnKrLiQshnwRqJUMSc42nOLxygUYd/ckeFNlHvgInK5O38lDRqhiNeTT3OE nw3GkVoYhxuoP03o63Gb4qZe417plDj5+Zd3gas/KXAJ0bisixlMUov+XgMlEgr5 4vbEIF8192StQkSOt96YBWkcY5TuP53xDkU= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:04 2025 by rpki-client