$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d6d62893-1a22-3d29-bab8-c2006df700da.roa File: d6d62893-1a22-3d29-bab8-c2006df700da.roa (raw, json) Hash identifier: 77k6FZ/w1ZP2kEjL4SuzjX3l5Yc/D+RfJTSxaRYxkUc= Subject key identifier: 64:FF:EB:B2:9A:12:2B:E6:07:66:6E:2F:F6:A8:89:D6:CA:1B:EB:4F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE4CB0F17A778B26E455B0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d6d62893-1a22-3d29-bab8-c2006df700da.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4c:b0:f1:7a:77:8b:26:e4:55:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bd5b807c-d874-4f2e-8fca-90752ba0f9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:76:54:4c:f6:a6:61:6d:d3:57:9e:07:5d: 54:77:43:b8:90:ea:da:c5:09:27:7d:91:a5:f7:ff: 74:45:c4:2f:93:e7:78:9e:cf:0e:1c:71:c7:49:82: 23:14:95:e4:cc:21:f7:25:cd:b6:2f:5b:2e:e5:ac: 4d:90:e1:cc:b2:aa:fb:55:7c:48:61:36:13:d8:10: 33:59:e1:53:aa:9d:07:e7:55:b6:b4:6d:d0:b4:54: b0:45:52:79:fa:13:8f:7a:97:5b:92:89:61:d5:fe: 81:04:5d:7d:96:c1:52:91:d5:fa:dd:d9:c9:44:36: cb:99:ae:36:87:5b:d5:b9:98:74:d5:13:4a:3c:de: e6:05:7f:18:a7:1b:ef:bf:1a:41:8c:a8:87:03:dd: b2:03:b4:63:a0:3c:01:0c:44:28:d6:db:d7:48:e5: d5:da:3d:27:12:15:2b:e0:f7:d4:c6:67:ad:e7:a3: c4:ce:8f:51:f4:ea:cc:42:af:fe:ff:34:d6:44:c0: bb:51:d6:d4:cd:ff:35:b7:20:dd:7c:f1:26:98:01: 20:ac:33:b7:4c:e0:1c:0f:7f:12:dd:23:8b:29:23: b3:cd:54:9d:c7:05:e7:20:89:24:4f:c5:40:9b:1d: e0:84:34:26:ba:6f:b0:d7:fb:f3:1f:1f:9f:cc:e5: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FF:EB:B2:9A:12:2B:E6:07:66:6E:2F:F6:A8:89:D6:CA:1B:EB:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d6d62893-1a22-3d29-bab8-c2006df700da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:31:9c:91:10:a7:1a:71:da:23:1f:77:56:dd:a9:3d:84:67: 8f:c9:7b:33:f8:51:77:e8:44:11:07:56:a8:61:be:55:ad:74: 79:bf:d4:06:6b:85:3a:a1:01:68:5f:33:1b:a1:f6:a4:ad:8d: 8d:12:65:89:8e:bb:35:6b:1b:51:6d:df:9f:18:72:18:52:41: e0:51:18:e6:49:c7:1f:18:23:cc:56:73:24:dc:77:03:c0:7e: 37:18:34:10:d0:14:1b:97:63:0a:96:85:2b:56:a9:4d:32:44: 28:3a:90:0f:28:35:52:db:b5:c2:11:06:bc:ab:b2:11:da:23: 64:41:a9:01:71:a0:8d:85:9e:75:2d:6f:14:d7:2f:e8:49:42: 4b:27:7c:42:37:93:d7:33:19:53:18:dc:c6:9e:e5:b4:1d:52: 1b:40:66:37:7f:45:7b:d4:92:fe:41:67:3e:74:8e:a4:1a:46: 13:fd:f6:78:34:44:bd:eb:33:eb:16:3a:db:00:96:71:d1:67: ca:4a:2a:14:08:88:2a:fa:6c:11:06:b6:db:52:32:b5:d9:2c: 85:67:f5:dc:85:b8:1a:25:fc:39:a2:2a:06:4e:e6:40:33:57: 75:0f:9e:ad:7e:5c:2d:88:c9:20:63:cd:c6:06:dc:98:1c:57: ca:96:b2:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzkyw8Xp3iybkVbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmQ1YjgwN2MtZDg3NC00ZjJlLThmY2EtOTA3NTJiYTBmOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykt2VEz2pmFt01eeB11Ud0O4kOraxQknfZGl 9/90RcQvk+d4ns8OHHHHSYIjFJXkzCH3Jc22L1su5axNkOHMsqr7VXxIYTYT2BAz WeFTqp0H51W2tG3QtFSwRVJ5+hOPepdbkolh1f6BBF19lsFSkdX63dnJRDbLma42 h1vVuZh01RNKPN7mBX8YpxvvvxpBjKiHA92yA7RjoDwBDEQo1tvXSOXV2j0nEhUr 4PfUxmet56PEzo9R9OrMQq/+/zTWRMC7UdbUzf81tyDdfPEmmAEgrDO3TOAcD38S 3SOLKSOzzVSdxwXnIIkkT8VAmx3ghDQmum+w1/vzHx+fzOWX9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGT/67KaEivmB2ZuL/aoidbKG+tPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDZkNjI4OTMtMWEyMi0z ZDI5LWJhYjgtYzIwMDZkZjcwMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEsxnJEQpxpx2iMfd1bdqT2EZ4/JezP4UXfoRBEHVqhhvlWtdHm/ 1AZrhTqhAWhfMxuh9qStjY0SZYmOuzVrG1Ft358YchhSQeBRGOZJxx8YI8xWcyTc dwPAfjcYNBDQFBuXYwqWhStWqU0yRCg6kA8oNVLbtcIRBryrshHaI2RBqQFxoI2F nnUtbxTXL+hJQksnfEI3k9czGVMY3Mae5bQdUhtAZjd/RXvUkv5BZz50jqQaRhP9 9ng0RL3rM+sWOtsAlnHRZ8pKKhQIiCr6bBEGtttSMrXZLIVn9dyFuBol/DmiKgZO 5kAzV3UPnq1+XC2IySBjzcYG3JgcV8qWssw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:24 2025 by rpki-client