$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa File: dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa (raw, json) Hash identifier: BfB6GSWczt9vM076V1W4v0YO6vnnDgmAk2PYf+E5cc4= Subject key identifier: 17:F2:DB:D2:BE:9A:ED:31:74:5E:F0:A9:32:5E:A9:4E:ED:76:34:D4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8410C2A3393180B61E59EC40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 12041 IP address blocks: 2001:500:53::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c2:a3:39:31:80:b6:1e:59:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5ad8b7a2-00b9-4a5b-bf26-d6469f6194ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:8d:07:68:d0:17:c1:2d:c8:5d:e1:5e:21: 85:f9:69:98:1e:7e:f8:ba:fc:7c:06:44:4e:4c:8c: 3f:05:02:34:d9:00:ff:58:10:8a:d0:a8:5c:01:27: 11:3c:c8:b2:29:8d:e1:42:ce:d2:3c:bc:25:38:59: c8:57:c8:78:ad:41:24:fc:e3:5a:44:0a:09:4f:20: 1b:ec:ce:77:5f:95:bd:76:64:a2:33:20:9b:d2:8d: dd:a7:50:36:69:97:bc:f7:e8:c1:dd:fd:a1:73:ec: 1e:c6:03:7b:f3:ce:82:b8:aa:7f:cb:c8:43:38:c8: 65:7e:75:4b:c9:ab:ac:78:9f:25:53:f5:68:49:76: ea:50:ba:2c:3d:a2:35:13:0a:27:35:3b:64:7d:8b: eb:3f:fc:aa:8b:96:03:e5:c1:d8:21:ef:a2:de:e8: 86:a9:ec:37:d9:c1:6e:ca:09:97:29:87:53:9e:97: 6c:37:f4:bb:49:a8:b2:f4:ba:d9:a6:1f:05:b8:ee: 07:e8:18:cb:06:38:ca:ef:6d:1b:2e:d9:c2:9c:17: 31:40:7b:ed:c0:a6:86:a7:34:bb:22:e6:b5:29:70: 7c:6b:6a:75:0a:c9:07:ed:3b:9b:5c:88:a5:7b:79: 0a:1e:3e:ab:29:2a:dc:9d:dd:2c:67:b7:f5:ac:7b: 82:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F2:DB:D2:BE:9A:ED:31:74:5E:F0:A9:32:5E:A9:4E:ED:76:34:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:53::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ce:a9:e6:87:3e:34:88:ce:be:25:dd:0f:d2:f3:23:82:a2: 73:23:18:49:10:c1:f8:fd:1d:96:2f:39:fd:cb:18:e4:c6:0b: 4a:e4:d3:35:7e:89:3e:fe:c1:f4:01:de:6d:61:66:ed:ca:15: df:58:c2:d8:44:14:37:56:1e:88:ea:c4:58:f8:fa:ac:56:f0: a8:d5:2a:0c:32:b8:b9:a2:9c:b0:35:a7:47:da:49:21:7d:8b: 02:1e:b8:b5:57:ed:d1:b8:52:fa:9c:da:02:e4:73:1d:b6:2d: ee:bf:c0:95:a1:a5:e2:d3:0a:4d:6b:44:ee:0b:4a:eb:98:4a: 05:80:89:de:ad:5d:b7:58:4c:e8:9e:2a:2c:9b:aa:2a:65:51: 0f:4a:9d:96:4a:47:cd:a0:55:52:97:56:57:97:5c:de:5d:a8: e2:80:6c:e8:6d:6e:2d:4c:03:a1:36:59:2f:89:58:3e:57:b8: f3:c0:30:bd:e7:05:83:55:14:66:1d:4c:ae:be:01:51:f9:1e: c2:12:f6:db:8f:2e:fd:e2:19:04:ff:4b:9d:96:53:b1:48:3f: b2:5c:a2:11:25:31:ba:16:fd:d5:15:95:90:fa:5d:57:32:c7: 20:92:86:48:4c:c6:30:79:99:89:28:cd:a9:4f:de:8b:f5:60: bf:11:4b:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEMKjOTGAth5Z7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NWFkOGI3YTItMDBiOS00YTViLWJmMjYtZDY0NjlmNjE5NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqryNB2jQF8EtyF3hXiGF+WmYHn74uvx8BkRO TIw/BQI02QD/WBCK0KhcAScRPMiyKY3hQs7SPLwlOFnIV8h4rUEk/ONaRAoJTyAb 7M53X5W9dmSiMyCb0o3dp1A2aZe89+jB3f2hc+wexgN7886CuKp/y8hDOMhlfnVL yauseJ8lU/VoSXbqULosPaI1EwonNTtkfYvrP/yqi5YD5cHYIe+i3uiGqew32cFu ygmXKYdTnpdsN/S7Saiy9LrZph8FuO4H6BjLBjjK720bLtnCnBcxQHvtwKaGpzS7 Iua1KXB8a2p1CskH7TubXIile3kKHj6rKSrcnd0sZ7f1rHuCLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBfy29K+mu0xdF7wqTJeqU7tdjTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGVjNTU0ZmEtYzFhYS0z YzA2LTlmNjItNmQ4ZWQ3MDhkZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALzOqeaHPjSIzr4l3Q/S8yOConMjGEkQwfj9HZYvOf3LGOTGC0rk 0zV+iT7+wfQB3m1hZu3KFd9YwthEFDdWHojqxFj4+qxW8KjVKgwyuLminLA1p0fa SSF9iwIeuLVX7dG4Uvqc2gLkcx22Le6/wJWhpeLTCk1rRO4LSuuYSgWAid6tXbdY TOieKiybqiplUQ9KnZZKR82gVVKXVleXXN5dqOKAbOhtbi1MA6E2WS+JWD5XuPPA ML3nBYNVFGYdTK6+AVH5HsIS9tuPLv3iGQT/S52WU7FIP7JcohElMboW/dUVlZD6 XVcyxyCShkhMxjB5mYkozalP3ov1YL8RSyY= -----END CERTIFICATE-----Generated at Thu Aug 7 11:13:08 2025 by rpki-client