$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa File: f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa (raw, json) Hash identifier: NxlWKpK5CJAE+cL8HtN9AVsWozGpUbJ3PEETHJj95/k= Subject key identifier: 24:6C:CD:34:B6:1F:D9:1A:7B:D6:68:D8:85:15:F9:B5:EB:3F:54:9A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE42B83326D31395E87040 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:42:b8:33:26:d3:13:95:e8:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d389c7ea-53f8-4f70-b66f-051d730919ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:ea:75:e3:0e:3d:66:dd:ea:50:e7:cc:41: bc:04:c2:c8:3f:d8:55:f5:54:88:b0:53:6f:9f:ba: 2b:83:f7:a1:20:c4:33:8b:3b:4b:de:0d:c6:d2:41: 43:ab:8e:ce:8d:ff:df:fa:b1:c6:5d:f7:07:d7:fb: 55:28:37:fb:b5:71:63:08:81:a1:f7:f9:25:56:ca: 52:6a:43:2f:2a:a7:ef:d5:a2:bc:c1:88:96:14:7a: d9:df:87:97:5a:c0:71:98:e5:ec:ea:83:05:d5:5b: 85:2b:c3:21:36:a2:82:3f:d2:3e:02:f7:7f:16:f4: 85:e8:6c:26:5b:59:f9:84:42:ac:32:a8:0b:cc:c0: a5:0e:0d:20:cf:fd:7b:87:46:52:d1:8a:6d:92:9e: 55:b2:d9:38:b4:af:68:a7:43:e4:29:d4:9e:6b:3e: da:3f:85:74:d2:13:e4:3d:ba:8e:90:0c:61:de:67: a4:ba:1c:5d:ea:d0:8e:17:56:7c:7a:d4:63:db:b6: 89:62:96:d5:47:80:c8:ea:51:a2:a5:0d:ba:93:fd: a2:63:2b:ff:77:9a:de:3a:53:6e:9d:7a:15:37:75: e7:63:fa:5e:15:a5:bc:29:dd:a9:69:5a:8b:c9:f5: d6:07:17:e5:3d:07:99:58:55:98:64:e4:16:e5:61: ea:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6C:CD:34:B6:1F:D9:1A:7B:D6:68:D8:85:15:F9:B5:EB:3F:54:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:2b:f6:bb:18:e1:b8:c8:ee:b7:7d:98:09:98:2f:16:4e:f8: 6b:f7:01:ed:5d:c8:06:94:d1:30:ce:6f:42:05:2f:5b:11:e9: b0:2e:61:8f:fc:7f:d9:d7:3c:69:80:fd:b7:0e:9f:1b:61:77: 04:61:ce:c9:0e:a1:bf:51:4b:fa:59:8e:b7:c8:b4:bd:16:43: 6e:f6:1b:b5:76:53:92:44:e9:c0:27:0c:0d:a4:f8:17:34:74: 17:0a:82:3e:48:8e:c4:2e:c7:54:60:9a:cf:98:0e:08:ca:35: 56:ae:67:eb:40:14:73:c9:1a:d1:f4:d7:bb:7b:e1:6f:2b:45: 8f:9d:88:bd:fd:1e:f0:16:80:c6:80:66:bb:8b:7b:db:a8:ef: 34:ee:7b:e3:aa:6e:37:cd:51:6f:bd:4c:08:02:e4:a3:b6:fe: db:41:94:f6:7d:48:d4:d4:16:12:1b:6f:4f:3e:a0:49:96:b7: 93:f8:35:2b:fe:eb:8e:8d:c4:0e:04:99:4d:40:ec:f0:0e:b4: 19:84:2b:c1:90:76:52:6d:d5:4f:a8:e6:3a:2f:c0:9d:d0:35: e9:24:61:e7:e3:60:3e:b5:99:18:19:ec:f4:70:52:5f:93:76: dd:b9:09:02:40:6c:ff:58:0b:b7:a6:09:10:2b:14:c0:ab:eb: 64:5d:c1:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzkK4MybTE5XocEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDM4OWM3ZWEtNTNmOC00ZjcwLWI2NmYtMDUxZDczMDkxOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPDqdeMOPWbd6lDnzEG8BMLIP9hV9VSIsFNv n7org/ehIMQziztL3g3G0kFDq47Ojf/f+rHGXfcH1/tVKDf7tXFjCIGh9/klVspS akMvKqfv1aK8wYiWFHrZ34eXWsBxmOXs6oMF1VuFK8MhNqKCP9I+Avd/FvSF6Gwm W1n5hEKsMqgLzMClDg0gz/17h0ZS0Yptkp5Vstk4tK9op0PkKdSeaz7aP4V00hPk PbqOkAxh3mekuhxd6tCOF1Z8etRj27aJYpbVR4DI6lGipQ26k/2iYyv/d5reOlNu nXoVN3XnY/peFaW8Kd2paVqLyfXWBxflPQeZWFWYZOQW5WHqEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCRszTS2H9kae9Zo2IUV+bXrP1SaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjA4MjExNmEtNGMxZC0z Y2QyLTg1ZTEtMmMyODNhMmQxYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKwr9rsY4bjI7rd9mAmYLxZO+Gv3Ae1dyAaU0TDOb0IFL1sR6bAu YY/8f9nXPGmA/bcOnxthdwRhzskOob9RS/pZjrfItL0WQ272G7V2U5JE6cAnDA2k +Bc0dBcKgj5IjsQux1Rgms+YDgjKNVauZ+tAFHPJGtH017t74W8rRY+diL39HvAW gMaAZruLe9uo7zTue+OqbjfNUW+9TAgC5KO2/ttBlPZ9SNTUFhIbb08+oEmWt5P4 NSv+646NxA4EmU1A7PAOtBmEK8GQdlJt1U+o5jovwJ3QNekkYefjYD61mRgZ7PRw Ul+Tdt25CQJAbP9YC7emCRArFMCr62RdwQA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:55:42 2025 by rpki-client