$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa File: dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa (raw, json) Hash identifier: pEkA9KyEFn/UELoZxALmLYG+mAkAm16zyXiRk4hfVGA= Subject key identifier: 7D:9B:0F:46:A8:B7:A2:F6:0E:BA:C5:50:B1:42:E2:37:46:EC:4F:F0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE39BFDCBD887A673F0880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:53::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:39:bf:dc:bd:88:7a:67:3f:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=305b8b25-e5f8-4a21-a610-c223afb8f497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:e0:cf:73:66:32:79:c8:59:b4:91:99:d1: 06:0d:5c:e9:c9:51:78:0b:2b:78:64:f7:91:92:02: 3d:80:aa:86:91:92:fc:f4:83:01:5f:d6:f5:fb:8a: d5:8b:48:16:43:97:cc:6b:0c:37:d6:04:27:e2:27: ee:f1:6c:aa:4a:3c:b9:45:bc:e7:ff:ac:6f:63:90: f3:49:d2:4f:fb:09:ce:ef:9c:19:88:4e:73:e2:ba: de:ee:fb:f6:06:e8:cb:72:4b:9f:5d:e8:01:88:31: 44:4a:7e:f8:23:8d:90:93:c6:21:47:2b:0f:6c:ab: a3:1b:ac:56:dc:d2:21:06:dc:39:f2:8d:52:10:6e: f6:92:0c:d7:41:dd:ed:69:16:58:45:db:a5:0b:e0: c5:d2:20:9f:f7:a5:03:fc:f8:3a:0a:48:4b:bd:11: cc:da:cc:41:fc:36:ed:94:05:27:d9:bd:1f:c6:bd: 3c:d0:bd:21:dd:13:5d:aa:54:7d:2c:f7:51:1d:cd: 5f:87:42:b4:83:5a:9e:96:c3:74:90:ae:26:12:f8: 40:42:cb:fe:5a:25:2d:79:c4:d0:86:37:00:34:10: 71:a5:9c:54:29:18:ef:6f:8d:a8:a0:ac:f6:4b:5d: df:51:0d:a1:3e:ce:db:50:25:a8:ce:fe:a2:ac:ce: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9B:0F:46:A8:B7:A2:F6:0E:BA:C5:50:B1:42:E2:37:46:EC:4F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:53::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:53:25:0d:5d:98:ff:06:2f:45:60:69:ad:57:a2:3f:fa:70: 80:93:d7:71:67:23:fe:8c:9f:ab:d2:a2:05:ab:5a:33:79:fc: e8:20:7d:13:8d:a3:18:37:03:b8:e6:02:ce:a5:60:57:24:34: e1:cb:bf:c9:aa:b4:e3:c4:a3:e4:c1:c3:08:eb:61:01:62:7a: ed:63:d2:fb:28:c7:1e:f0:e7:f8:25:f3:b4:7d:eb:ca:2e:f9: 6a:d0:b7:57:3a:ee:53:bf:8e:5f:d8:cb:b2:2e:94:6b:d3:40: 91:86:ce:65:88:b2:5d:27:96:63:d7:e4:d4:18:21:15:8b:1d: d0:13:c8:cd:56:58:5b:43:de:aa:d9:69:f7:ce:ba:64:8d:62: f6:35:fc:f5:bd:fb:9a:e0:53:8c:ba:c5:ac:23:f0:3f:40:cc: f6:23:b8:c4:0c:3d:ef:f5:2e:9b:c5:b1:85:23:80:a9:36:37: 8a:77:c1:13:13:6e:b0:d7:a0:1f:60:4b:17:01:88:f5:d9:63: 35:06:05:0b:a0:5e:a7:31:32:5b:af:d5:a2:5d:9d:95:0e:1a: 51:dc:1b:b3:b2:7b:26:75:e6:94:61:0f:a9:cd:6c:1b:c1:ce: 8b:68:4a:13:dd:69:47:36:cf:14:2e:9d:a5:1e:7c:04:b3:f6: ef:fa:d3:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzjm/3L2Iemc/CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzA1YjhiMjUtZTVmOC00YTIxLWE2MTAtYzIyM2FmYjhmNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDDgz3NmMnnIWbSRmdEGDVzpyVF4Cyt4ZPeR kgI9gKqGkZL89IMBX9b1+4rVi0gWQ5fMaww31gQn4ifu8WyqSjy5Rbzn/6xvY5Dz SdJP+wnO75wZiE5z4rre7vv2BujLckufXegBiDFESn74I42Qk8YhRysPbKujG6xW 3NIhBtw58o1SEG72kgzXQd3taRZYRdulC+DF0iCf96UD/Pg6CkhLvRHM2sxB/Dbt lAUn2b0fxr080L0h3RNdqlR9LPdRHc1fh0K0g1qelsN0kK4mEvhAQsv+WiUtecTQ hjcANBBxpZxUKRjvb42ooKz2S13fUQ2hPs7bUCWozv6irM5ckQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH2bD0aot6L2DrrFULFC4jdG7E/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGVjNTU0ZmEtYzFhYS0z YzA2LTlmNjItNmQ4ZWQ3MDhkZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABFTJQ1dmP8GL0Vgaa1Xoj/6cICT13FnI/6Mn6vSogWrWjN5/Ogg fRONoxg3A7jmAs6lYFckNOHLv8mqtOPEo+TBwwjrYQFieu1j0vsoxx7w5/gl87R9 68ou+WrQt1c67lO/jl/Yy7IulGvTQJGGzmWIsl0nlmPX5NQYIRWLHdATyM1WWFtD 3qrZaffOumSNYvY1/PW9+5rgU4y6xawj8D9AzPYjuMQMPe/1LpvFsYUjgKk2N4p3 wRMTbrDXoB9gSxcBiPXZYzUGBQugXqcxMluv1aJdnZUOGlHcG7OyeyZ15pRhD6nN bBvBzotoShPdaUc2zxQunaUefASz9u/60z8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:33 2025 by rpki-client