$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f10f2c59-a99e-36fc-b530-00baef18ece2.roa File: f10f2c59-a99e-36fc-b530-00baef18ece2.roa (raw, json) Hash identifier: 8YSrVo65N/t8+uYbI9ndynEsqXKW7GSqtznInS7nEso= Subject key identifier: C0:46:E8:0C:08:CC:41:D3:3B:EE:C8:2C:EC:69:25:31:A5:F6:56:18 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE4FB93F017992FF327500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f10f2c59-a99e-36fc-b530-00baef18ece2.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:4b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4f:b9:3f:01:79:92:ff:32:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f1e36b4f-a3e6-41f6-b5ff-ad97a4fee408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b0:2e:cf:61:e7:1f:8b:b5:bc:18:1f:27:85: 1e:f3:06:10:5a:63:df:a1:9c:86:92:02:dd:58:fd: db:b2:0f:ac:74:77:bb:32:8e:92:13:ab:a1:31:cb: 82:35:5a:2b:71:4e:ef:eb:9f:22:f0:fa:22:c9:2a: 56:8a:48:d0:62:75:a2:61:e4:08:bd:a2:37:21:31: af:ed:26:fa:9c:7f:e4:b6:b7:f2:7b:df:25:47:e1: 14:3c:1d:4b:df:94:fb:83:7d:b7:ca:59:bb:1a:73: da:fd:c9:14:ac:af:02:b6:aa:53:4d:82:df:bb:f1: 14:69:20:0f:39:43:f0:95:77:8e:88:f2:9e:14:a5: a0:36:2e:ef:b8:53:7f:65:de:33:a3:8d:a5:11:0f: df:94:3d:6b:2e:d0:f4:d0:80:4a:31:b6:bc:ff:07: a9:ea:85:48:84:1b:33:1b:31:de:a1:05:85:62:b2: 85:df:de:c3:3a:72:cc:f1:36:5d:41:95:24:78:8e: af:5c:3c:b4:e3:ce:9b:b5:bd:15:6d:43:4e:f5:eb: 0a:d4:5d:a0:0d:f1:60:f2:44:c7:e8:08:9f:83:2f: db:8d:27:0e:66:11:fa:e5:b4:15:1a:10:f2:81:f1: a6:00:1a:87:87:d4:18:a0:aa:12:67:8a:a5:eb:8f: 43:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:46:E8:0C:08:CC:41:D3:3B:EE:C8:2C:EC:69:25:31:A5:F6:56:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f10f2c59-a99e-36fc-b530-00baef18ece2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:3c:ad:ce:11:a7:6d:12:6d:8e:5e:3b:1a:bf:c6:ed:26:be: 82:57:9b:91:10:3b:60:e4:4b:26:cd:1a:e6:4b:ac:a6:8b:9d: 74:83:6a:84:e8:cd:00:f7:b6:9d:aa:1f:bf:c3:50:9d:33:1b: e8:d7:ce:30:15:38:e1:49:7b:f1:fb:4b:ea:c4:1e:d0:e4:ef: 8f:e3:37:d7:e5:61:65:cc:b3:97:7c:b3:09:25:79:1c:37:35: 10:34:d8:42:38:dd:a0:cd:00:a3:4b:1d:66:70:3f:d2:a3:dd: a1:d4:6f:d9:d2:42:aa:59:f5:9c:f2:c4:25:4d:d5:76:aa:1a: 41:0b:75:2a:3e:5f:e0:a7:f6:2a:52:62:3c:d2:5c:c7:c2:82: c3:0c:2e:9e:b8:28:bc:d7:95:74:0f:d6:27:5a:4d:33:8a:15: 7e:87:6e:65:6b:43:6d:91:20:99:5b:c2:b1:58:c8:72:bb:50: ca:60:97:f3:71:17:64:d7:30:20:e7:21:85:e0:12:9d:bf:96: e7:6e:31:7d:e9:19:d5:23:08:ef:00:96:a8:36:4a:2e:e8:05: 1c:16:1b:25:9a:fb:0c:cc:e9:9a:47:72:7a:45:3e:73:d0:b4: 5d:c7:74:0f:3e:ef:7a:6d:2c:3e:d0:d9:f2:d7:1d:52:e8:fb: a5:ff:8a:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzk+5PwF5kv8ydQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjFlMzZiNGYtYTNlNi00MWY2LWI1ZmYtYWQ5N2E0ZmVlNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLAuz2HnH4u1vBgfJ4Ue8wYQWmPfoZyGkgLd WP3bsg+sdHe7Mo6SE6uhMcuCNVorcU7v658i8PoiySpWikjQYnWiYeQIvaI3ITGv 7Sb6nH/ktrfye98lR+EUPB1L35T7g323ylm7GnPa/ckUrK8CtqpTTYLfu/EUaSAP OUPwlXeOiPKeFKWgNi7vuFN/Zd4zo42lEQ/flD1rLtD00IBKMba8/wep6oVIhBsz GzHeoQWFYrKF397DOnLM8TZdQZUkeI6vXDy0486btb0VbUNO9esK1F2gDfFg8kTH 6Aifgy/bjScOZhH65bQVGhDygfGmABqHh9QYoKoSZ4ql649D+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMBG6AwIzEHTO+7ILOxpJTGl9lYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjEwZjJjNTktYTk5ZS0z NmZjLWI1MzAtMDBiYWVmMThlY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK48rc4Rp20SbY5eOxq/xu0mvoJXm5EQO2DkSybNGuZLrKaLnXSD aoTozQD3tp2qH7/DUJ0zG+jXzjAVOOFJe/H7S+rEHtDk74/jN9flYWXMs5d8swkl eRw3NRA02EI43aDNAKNLHWZwP9Kj3aHUb9nSQqpZ9ZzyxCVN1XaqGkELdSo+X+Cn 9ipSYjzSXMfCgsMMLp64KLzXlXQP1idaTTOKFX6HbmVrQ22RIJlbwrFYyHK7UMpg l/NxF2TXMCDnIYXgEp2/luduMX3pGdUjCO8Alqg2Si7oBRwWGyWa+wzM6ZpHcnpF PnPQtF3HdA8+73ptLD7Q2fLXHVLo+6X/irI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:43 2025 by rpki-client