$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa File: d9cef5d4-90dd-347d-bc06-d594b04e0496.roa (raw, json) Hash identifier: JdsyBYnXFLqvZEMKAOxEIsAzhC3kPpYQsMy6MoGFuPI= Subject key identifier: 51:F4:BF:33:F7:10:A4:7E:EF:E6:3A:C5:05:CA:DF:D2:F5:9F:28:CA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C10ED5DE7176F7BC6280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c1:0e:d5:de:71:76:f7:bc:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8e2960c5-c098-4173-aaff-ba69a1d5dd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:d0:28:b4:9a:f3:c3:0b:1d:7b:77:97:59: 3a:2c:63:e3:2f:02:b2:ee:9a:32:10:79:07:a7:13: cc:07:25:34:f8:d4:d4:79:af:77:d1:06:78:fc:c8: a3:17:0d:5c:38:ec:f9:8f:94:43:4e:36:45:d7:d7: 86:aa:c3:ab:b3:01:a4:61:b1:97:fb:82:d3:98:5d: a5:53:f6:2f:88:c1:f7:f8:bf:99:d2:cd:b9:ec:26: ee:88:70:c5:21:d1:5c:c3:7c:19:c3:c0:64:28:2e: 0c:6a:b5:80:00:c4:37:ff:c2:3f:09:d5:1d:43:49: 04:f9:c2:1e:3f:0b:22:ad:8c:d8:47:c3:bb:c3:52: 0d:70:c4:c0:29:f3:32:d9:70:c4:87:8a:41:cb:73: a9:cc:ca:82:83:36:a4:b5:b5:9b:31:23:75:9d:9d: 76:84:de:d0:06:9d:e5:61:30:3e:4a:27:f6:2a:9b: 20:32:4d:c6:58:0c:23:61:6c:b8:c7:21:ee:04:64: 76:e8:b2:7f:c5:54:36:3d:84:33:9b:ec:5a:98:00: 4c:59:bf:90:ba:9a:cc:89:3f:aa:3b:a9:8b:fe:e3: 20:2f:3f:30:54:ac:99:a5:93:0d:9f:48:ec:02:c7: 71:77:41:89:28:dc:0e:6e:f5:1e:94:d2:75:f9:41: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F4:BF:33:F7:10:A4:7E:EF:E6:3A:C5:05:CA:DF:D2:F5:9F:28:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:8c:d3:46:96:13:8f:da:1b:cf:a1:28:0c:b7:00:2d:a4:6e: bf:5c:6a:02:6c:07:56:87:eb:1f:b3:5d:ed:c5:32:6c:61:08: 3e:2b:17:17:fa:53:78:f9:dd:f6:a2:c3:89:9f:3f:9f:fb:1f: 68:33:3d:96:36:0d:58:b6:53:98:0c:bd:ff:cd:78:01:3c:09: 2f:f3:5c:7b:da:e7:9b:cc:f4:1a:4e:fd:90:9d:f7:f5:12:77: 2e:33:05:39:37:71:56:a2:c9:ce:82:46:68:bb:68:a4:f7:fd: 57:c6:f1:fb:b3:19:0d:6b:3a:33:8f:ca:29:8d:c9:81:e8:38: 3e:69:a4:59:36:32:b1:70:f0:0c:48:34:ba:00:8d:ab:53:62: 99:91:0c:46:db:9d:38:b2:3c:21:ce:06:1c:0f:eb:8b:cc:2c: 41:7a:c5:79:52:ce:a3:4b:b4:62:df:f7:74:ad:97:9e:5e:73: 30:fa:2b:06:8f:5f:31:6b:6a:a7:06:ff:3d:ed:7b:64:a3:b1: 81:6b:80:3c:0d:88:7b:bb:4f:36:2d:44:1e:d5:24:11:31:d2: b3:88:9a:77:ce:b6:a2:c0:9f:f6:73:3d:74:79:2e:66:85:41: 2a:e9:84:99:a9:c9:66:c3:c6:42:e2:4a:7c:2d:a8:96:76:3b: dc:a1:01:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMEO1d5xdve8YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGUyOTYwYzUtYzA5OC00MTczLWFhZmYtYmE2OWExZDVkZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJPQKLSa88MLHXt3l1k6LGPjLwKy7poyEHkH pxPMByU0+NTUea930QZ4/MijFw1cOOz5j5RDTjZF19eGqsOrswGkYbGX+4LTmF2l U/YviMH3+L+Z0s257CbuiHDFIdFcw3wZw8BkKC4MarWAAMQ3/8I/CdUdQ0kE+cIe PwsirYzYR8O7w1INcMTAKfMy2XDEh4pBy3OpzMqCgzaktbWbMSN1nZ12hN7QBp3l YTA+Sif2KpsgMk3GWAwjYWy4xyHuBGR26LJ/xVQ2PYQzm+xamABMWb+QuprMiT+q O6mL/uMgLz8wVKyZpZMNn0jsAsdxd0GJKNwObvUelNJ1+UH8vQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFH0vzP3EKR+7+Y6xQXK39L1nyjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDljZWY1ZDQtOTBkZC0z NDdkLWJjMDYtZDU5NGIwNGUwNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ6M00aWE4/aG8+hKAy3AC2kbr9cagJsB1aH6x+zXe3FMmxhCD4r Fxf6U3j53faiw4mfP5/7H2gzPZY2DVi2U5gMvf/NeAE8CS/zXHva55vM9BpO/ZCd 9/USdy4zBTk3cVaiyc6CRmi7aKT3/VfG8fuzGQ1rOjOPyimNyYHoOD5ppFk2MrFw 8AxINLoAjatTYpmRDEbbnTiyPCHOBhwP64vMLEF6xXlSzqNLtGLf93Stl55eczD6 KwaPXzFraqcG/z3te2SjsYFrgDwNiHu7TzYtRB7VJBEx0rOImnfOtqLAn/ZzPXR5 LmaFQSrphJmpyWbDxkLiSnwtqJZ2O9yhAew= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:20 2025 by rpki-client