$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d231a0-5597-3a08-9e86-7c7079d184e2.roa File: e3d231a0-5597-3a08-9e86-7c7079d184e2.roa (raw, json) Hash identifier: I+wLNszGUqNnLZ1NhtEsJuRgam/ftHxJRfoPy6rBdAs= Subject key identifier: BA:66:69:08:4B:DD:8C:C0:64:19:7B:99:C5:54:0B:C3:2D:7D:8C:C1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE57B24A8031CF18A71D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d231a0-5597-3a08-9e86-7c7079d184e2.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:57:b2:4a:80:31:cf:18:a7:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=10c58fd9-dbd6-40b8-82ae-40899ea8f52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:ba:04:ab:b6:1e:3c:4a:c5:33:c6:21:b9: fb:64:ad:18:d2:14:86:ea:66:02:b7:3d:0d:fa:a7: 19:56:2a:af:80:25:71:fe:3f:69:e6:e3:01:0d:c0: 24:ca:4d:0b:03:ba:8c:98:9d:06:a9:57:01:14:87: 81:37:17:21:6b:60:bc:9b:6c:6d:d2:c4:37:e1:06: 9f:80:f4:6a:38:23:0e:cd:59:3f:22:f8:16:e6:2c: 8c:f5:7f:b7:ee:d8:ac:5d:51:66:c5:ce:0a:80:79: d4:c4:6b:f7:91:58:3d:8b:e3:3d:96:d2:e2:28:93: 5f:95:4f:85:94:07:7f:86:61:4c:b8:95:4f:c1:b7: a8:7b:c6:96:a5:0f:a5:b2:44:82:11:0f:2f:7b:96: 17:f1:f5:c1:b7:c9:27:b3:e1:5d:64:65:4d:89:27: 3b:c2:fa:41:d8:9e:ec:91:f4:d4:15:3c:be:7e:36: 36:28:45:2d:73:35:72:7a:25:b1:4d:31:5c:17:18: 7d:cd:89:55:62:d6:72:ca:f7:79:6c:6a:25:80:8d: 6d:bc:af:f4:67:a4:63:54:ae:fe:3d:1b:26:76:f5: 7d:e2:ba:8d:69:8b:5a:d7:6b:58:7b:37:df:62:3d: f4:9a:7f:d2:62:0d:0d:6e:9b:74:be:6d:d1:d6:9b: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:66:69:08:4B:DD:8C:C0:64:19:7B:99:C5:54:0B:C3:2D:7D:8C:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d231a0-5597-3a08-9e86-7c7079d184e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4f:2c:b2:81:17:e3:3c:42:08:a9:67:e2:46:a3:46:b1:47: a9:54:60:b8:65:b7:5a:e0:2e:8e:f9:30:e6:31:56:aa:db:59: 9b:c2:59:82:c7:48:87:41:18:c7:47:8a:7c:db:48:60:1e:49: 78:24:b8:dd:79:51:50:10:c3:d6:ee:de:b0:80:fa:c8:df:e5: bc:d4:3e:5f:c8:88:f9:32:93:51:0a:e0:72:71:c4:7b:eb:5e: 60:99:a6:90:7f:79:25:12:ea:90:b0:d7:39:a4:62:e4:38:5a: 26:b1:87:7f:8a:df:5d:f2:72:07:f0:5c:c2:b2:57:e4:c7:fe: 0c:63:68:25:37:ec:6c:5b:33:3e:52:85:61:88:e6:6f:e8:ec: 50:a6:7c:6b:7c:c4:2f:a9:4d:2b:41:95:4a:5a:ab:4f:60:5a: fb:4b:a2:c7:13:14:a9:16:8a:3b:00:69:16:4c:6c:7b:7e:11: 5c:1a:2a:2f:33:ad:a4:fa:06:1c:d5:b8:f6:a8:de:29:1e:31: ce:95:3c:a7:21:f8:a7:71:df:eb:56:d8:c7:1e:b3:d1:1a:c2: 2c:99:e6:f0:06:bf:1f:3e:8d:e2:86:08:a5:60:61:c8:04:ee: e2:e1:30:f7:52:1a:5a:cf:14:98:14:dc:20:a1:1b:70:e2:e9: 42:33:6b:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzleySoAxzxinHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTBjNThmZDktZGJkNi00MGI4LTgyYWUtNDA4OTllYThmNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhG6BKu2HjxKxTPGIbn7ZK0Y0hSG6mYCtz0N +qcZViqvgCVx/j9p5uMBDcAkyk0LA7qMmJ0GqVcBFIeBNxcha2C8m2xt0sQ34Qaf gPRqOCMOzVk/IvgW5iyM9X+37tisXVFmxc4KgHnUxGv3kVg9i+M9ltLiKJNflU+F lAd/hmFMuJVPwbeoe8aWpQ+lskSCEQ8ve5YX8fXBt8kns+FdZGVNiSc7wvpB2J7s kfTUFTy+fjY2KEUtczVyeiWxTTFcFxh9zYlVYtZyyvd5bGolgI1tvK/0Z6RjVK7+ PRsmdvV94rqNaYta12tYezffYj30mn/SYg0Nbpt0vm3R1puXNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLpmaQhL3YzAZBl7mcVUC8MtfYzBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTNkMjMxYTAtNTU5Ny0z YTA4LTllODYtN2M3MDc5ZDE4NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVPLLKBF+M8QgipZ+JGo0axR6lUYLhlt1rgLo75MOYxVqrbWZvC WYLHSIdBGMdHinzbSGAeSXgkuN15UVAQw9bu3rCA+sjf5bzUPl/IiPkyk1EK4HJx xHvrXmCZppB/eSUS6pCw1zmkYuQ4Wiaxh3+K313ycgfwXMKyV+TH/gxjaCU37Gxb Mz5ShWGI5m/o7FCmfGt8xC+pTStBlUpaq09gWvtLoscTFKkWijsAaRZMbHt+EVwa Ki8zraT6BhzVuPao3ikeMc6VPKch+Kdx3+tW2Mces9EawiyZ5vAGvx8+jeKGCKVg YcgE7uLhMPdSGlrPFJgU3CChG3Di6UIza54= -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:13 2025 by rpki-client