$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa File: d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa (raw, json) Hash identifier: s1zP+F8uZM+YzO7HK5mCRLsx60djlQAXkNB3e01XZgg= Subject key identifier: 10:BD:D7:24:ED:25:91:A9:60:AC:7F:93:98:52:C7:E0:C7:E5:40:42 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C03934B874BB4DD35740 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:4a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c0:39:34:b8:74:bb:4d:d3:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=df07a70f-e099-494f-b09e-12ec35abf55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d9:15:8e:65:16:54:55:46:03:14:63:05:3e: 94:6c:38:73:91:54:70:f3:17:12:5c:f8:2c:05:02: e9:2e:16:6e:7c:16:bd:cd:69:13:c9:08:f9:35:20: 84:b5:07:e5:27:28:8a:2d:74:06:54:fa:42:0d:12: 38:fd:fb:f9:b9:a0:3f:6e:c3:70:07:fc:8b:3b:6d: 03:c5:01:7a:87:c7:24:6f:29:4b:86:10:b7:ae:1c: a7:ee:15:13:0d:26:d6:ca:f9:00:03:9d:a2:53:b0: 54:be:0c:39:1a:32:4f:37:5c:0b:89:b5:8c:23:83: 87:b6:f9:2d:42:d6:f1:d4:2e:e2:0b:59:5b:47:92: a9:c4:a0:74:2c:9e:73:62:a5:06:bf:31:ca:b1:31: 48:da:eb:76:51:f2:13:36:76:06:e0:71:f8:5e:ab: ad:55:1b:4b:7c:ad:9e:31:2b:05:9e:ef:7b:07:ad: 75:02:d5:d9:1c:70:d0:a4:eb:4a:cb:62:f2:10:27: bd:d0:2f:03:06:9a:f3:43:7a:95:9e:3b:33:31:11: 7d:71:f1:d9:1c:d5:3a:cf:f0:1b:e6:04:af:f1:2b: a9:2a:a2:b0:53:51:a9:ca:86:9a:02:ff:b5:8c:ed: 5d:f9:1b:f0:17:28:e2:cc:54:db:14:8d:20:c7:6e: 24:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BD:D7:24:ED:25:91:A9:60:AC:7F:93:98:52:C7:E0:C7:E5:40:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:30:d6:2d:62:c4:25:80:f3:9c:db:0b:98:0e:6e:88:c0:9e: ef:04:52:b1:e1:aa:71:45:fd:cb:3e:c4:62:0b:8c:df:73:7f: ce:2d:ed:84:63:e2:22:12:3e:da:fc:c6:08:fe:c8:51:ac:40: 25:a7:5c:90:c4:aa:41:8e:b8:38:09:7b:70:ca:b4:c0:1e:ca: 12:b9:43:97:32:3f:e7:a7:8b:b6:6e:fd:17:c0:f9:a2:40:9b: eb:74:97:0d:d1:2a:a5:6b:f9:e4:b9:22:ad:10:f5:44:5c:dd: 2f:cd:96:19:57:de:3d:ce:c6:94:10:e6:36:37:33:39:e0:9f: 20:62:57:0d:80:f7:1c:d5:4a:97:45:51:15:cb:d5:d5:7b:14: 85:c8:45:83:35:8a:65:5f:3c:4c:8b:31:ac:b2:94:be:00:78: 43:04:93:c2:bd:b8:39:8a:51:d4:66:84:cb:7c:62:50:ae:f5: cf:e1:53:f6:97:b2:69:1f:99:bd:34:eb:1c:54:2e:b5:b7:7b: 24:a0:72:71:2c:ed:a5:fb:02:dd:66:89:5a:5e:55:42:62:73: 7b:b2:ff:5a:54:25:e1:9b:4d:16:05:a9:a6:f6:ea:80:47:a9: 58:21:51:62:62:90:84:a0:4d:ea:a5:15:f2:bc:ee:cb:cb:dc: 5b:19:e4:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMA5NLh0u03TV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGYwN2E3MGYtZTA5OS00OTRmLWIwOWUtMTJlYzM1YWJmNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9kVjmUWVFVGAxRjBT6UbDhzkVRw8xcSXPgs BQLpLhZufBa9zWkTyQj5NSCEtQflJyiKLXQGVPpCDRI4/fv5uaA/bsNwB/yLO20D xQF6h8ckbylLhhC3rhyn7hUTDSbWyvkAA52iU7BUvgw5GjJPN1wLibWMI4OHtvkt Qtbx1C7iC1lbR5KpxKB0LJ5zYqUGvzHKsTFI2ut2UfITNnYG4HH4XqutVRtLfK2e MSsFnu97B611AtXZHHDQpOtKy2LyECe90C8DBprzQ3qVnjszMRF9cfHZHNU6z/Ab 5gSv8SupKqKwU1GpyoaaAv+1jO1d+RvwFyjizFTbFI0gx24k6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBC91yTtJZGpYKx/k5hSx+DH5UBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDNmZjQxYjUtMzI2Ni0z NDRkLWJhYjEtNzhiZTE3Y2E0YmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADww1i1ixCWA85zbC5gObojAnu8EUrHhqnFF/cs+xGILjN9zf84t 7YRj4iISPtr8xgj+yFGsQCWnXJDEqkGOuDgJe3DKtMAeyhK5Q5cyP+eni7Zu/RfA +aJAm+t0lw3RKqVr+eS5Iq0Q9URc3S/NlhlX3j3OxpQQ5jY3MzngnyBiVw2A9xzV SpdFURXL1dV7FIXIRYM1imVfPEyLMayylL4AeEMEk8K9uDmKUdRmhMt8YlCu9c/h U/aXsmkfmb006xxULrW3eySgcnEs7aX7At1miVpeVUJic3uy/1pUJeGbTRYFqab2 6oBHqVghUWJikISgTeqlFfK87svL3FsZ5LA= -----END CERTIFICATE-----Generated at Thu Aug 7 03:25:03 2025 by rpki-client