$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d6d62893-1a22-3d29-bab8-c2006df700da.roa File: d6d62893-1a22-3d29-bab8-c2006df700da.roa (raw, json) Hash identifier: hAlhNLdjQfViLWwHz4ajQn7GYzuVm5m+LHGyTqXj+dE= Subject key identifier: 0F:9D:B1:30:FA:5A:51:34:95:D3:91:1B:92:88:A2:D5:22:D3:17:C5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C1B53D5831AF9557FEC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d6d62893-1a22-3d29-bab8-c2006df700da.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c1:b5:3d:58:31:af:95:57:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ad1f8d93-670a-4429-af31-ac7fd1ebf695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:7f:85:0d:cd:c2:7f:cf:02:28:3e:69:7b: 4a:c7:99:66:35:c5:3c:42:27:42:c7:6c:b1:04:7f: 98:e8:cb:ce:a2:c9:1f:37:f9:49:3f:93:59:38:70: 1b:56:a2:88:68:d0:1f:e7:67:f8:9a:47:36:02:0e: 55:49:1a:ba:d1:c6:ac:dd:61:8c:a5:3d:f7:0e:6f: 61:47:a6:ea:c6:36:dd:bf:84:fc:1c:d8:59:89:08: 29:a1:a3:f1:32:7e:85:64:55:ca:63:59:be:7f:ef: a3:48:6f:24:f3:26:a8:a5:ac:94:45:92:f9:48:2a: 14:4b:a0:2f:ff:8e:4e:3d:49:b5:b4:c6:7e:bd:53: 66:a4:74:2e:ae:c7:86:dd:aa:a4:d7:e8:a5:f2:00: 81:b7:d0:48:60:2c:a0:dc:7d:6e:2f:f9:f9:82:49: 9c:70:80:0a:85:8a:71:71:c1:12:44:70:a6:fd:61: e3:62:8a:ff:ee:8f:4d:2b:dc:ca:bf:84:8b:bd:7a: 97:75:e1:52:32:ec:bd:7f:96:8a:b5:c0:a8:d1:47: 03:54:ec:ef:47:be:7b:16:04:43:88:d8:3f:92:d7: 3c:30:ce:71:3b:c1:2c:68:d6:07:a3:5c:47:68:f6: 05:6c:79:a8:4b:8b:c9:04:78:76:80:c0:5c:c4:ec: 43:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9D:B1:30:FA:5A:51:34:95:D3:91:1B:92:88:A2:D5:22:D3:17:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d6d62893-1a22-3d29-bab8-c2006df700da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:51:46:b4:7d:ed:60:32:f0:51:e3:ec:d4:75:4d:2e:4f:64: ae:36:1b:4e:93:c9:2b:45:db:df:42:1a:23:34:79:06:55:b6: a4:5b:ac:59:87:fb:53:28:d9:d0:69:51:02:a2:86:88:db:37: 44:73:de:63:40:49:1e:4d:e1:7a:0e:27:b0:a7:58:cc:6a:f8: c8:81:3c:f2:46:6b:e0:71:c4:f1:74:a5:e2:55:e5:c0:b8:3e: 8f:b3:d6:67:99:74:c9:4d:c5:5a:6c:f5:d0:10:c6:1d:61:cb: 73:09:76:87:8a:e6:d4:d1:3d:79:60:38:62:28:9e:04:c4:de: a8:fd:53:10:3d:d4:8d:e7:7a:e8:1c:c7:4d:98:61:ba:ab:8f: 26:8b:a9:8d:ae:7f:54:f9:c1:0d:36:78:82:18:a2:c5:45:b6: 95:94:90:28:2e:1a:9c:3a:d0:d8:4d:7c:ca:b1:81:34:e4:09: d0:85:c0:f9:14:2f:74:20:f9:e0:a8:09:92:2a:7b:c9:ed:ca: 36:43:5b:20:5e:14:de:ae:77:05:fd:12:5b:56:2b:27:16:60: 33:16:43:1c:ee:bb:07:35:49:2b:9f:f7:f2:14:f4:fd:30:1b: c5:41:7b:d8:28:cc:c6:62:d2:fb:4b:75:5d:4a:c2:12:88:87: b9:db:15:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMG1PVgxr5VX/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWQxZjhkOTMtNjcwYS00NDI5LWFmMzEtYWM3ZmQxZWJmNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjt/hQ3Nwn/PAig+aXtKx5lmNcU8QidCx2yx BH+Y6MvOoskfN/lJP5NZOHAbVqKIaNAf52f4mkc2Ag5VSRq60cas3WGMpT33Dm9h R6bqxjbdv4T8HNhZiQgpoaPxMn6FZFXKY1m+f++jSG8k8yaopayURZL5SCoUS6Av /45OPUm1tMZ+vVNmpHQurseG3aqk1+il8gCBt9BIYCyg3H1uL/n5gkmccIAKhYpx ccESRHCm/WHjYor/7o9NK9zKv4SLvXqXdeFSMuy9f5aKtcCo0UcDVOzvR757FgRD iNg/ktc8MM5xO8EsaNYHo1xHaPYFbHmoS4vJBHh2gMBcxOxDfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA+dsTD6WlE0ldORG5KIotUi0xfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDZkNjI4OTMtMWEyMi0z ZDI5LWJhYjgtYzIwMDZkZjcwMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHhRRrR97WAy8FHj7NR1TS5PZK42G06TyStF299CGiM0eQZVtqRb rFmH+1Mo2dBpUQKihojbN0Rz3mNASR5N4XoOJ7CnWMxq+MiBPPJGa+BxxPF0peJV 5cC4Po+z1meZdMlNxVps9dAQxh1hy3MJdoeK5tTRPXlgOGIongTE3qj9UxA91I3n eugcx02YYbqrjyaLqY2uf1T5wQ02eIIYosVFtpWUkCguGpw60NhNfMqxgTTkCdCF wPkUL3Qg+eCoCZIqe8ntyjZDWyBeFN6udwX9EltWKycWYDMWQxzuuwc1SSuf9/IU 9P0wG8VBe9gozMZi0vtLdV1KwhKIh7nbFSc= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:41 2025 by rpki-client