$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa File: f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa (raw, json) Hash identifier: oa7rwOhRvcLbrRZ67LpQBA5KOqiRSDz1sMgOBHt94m8= Subject key identifier: C9:A1:95:E5:D3:C5:52:02:FC:13:D1:03:FC:B0:EE:FC:A8:ED:B3:84 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB43F247E9657E8D280B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 2001:500:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:43:f2:47:e9:65:7e:8d:28:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=c543b8f5-90f9-4ba3-83b6-ebdae0f61992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:62:70:78:e3:57:ef:22:78:9a:97:2d:d3:cc: e8:e4:be:48:f4:bd:45:a5:7e:d3:bf:b3:7b:25:e1: fb:12:1d:b7:ff:a0:d3:34:6e:d0:06:3c:e7:54:fb: 87:33:4f:0a:af:5a:75:d2:0a:84:0c:ed:83:9c:1a: 65:7c:40:8c:d5:25:e3:7b:40:dd:ee:b1:90:db:07: 49:84:42:5e:52:d3:ee:24:91:1e:73:2c:0b:c8:8d: c9:e2:4d:81:34:0e:be:94:25:03:a1:d6:f8:f9:82: c6:da:9b:cb:5a:d0:83:63:c1:7e:be:31:73:33:9b: 40:6f:aa:e2:61:20:90:4b:56:2a:6e:75:b3:34:80: f8:22:26:3d:eb:b4:7a:cb:7e:56:b4:91:1b:95:00: 1b:97:72:06:bf:40:83:36:8d:09:c5:e7:26:b0:3a: 4a:d0:1d:52:00:2e:af:62:5a:fe:38:36:f1:af:87: 10:3d:3a:32:ce:72:d8:4e:c5:d2:e5:a3:d1:c8:2c: e3:e0:88:57:f5:c0:84:88:5c:26:2b:d2:73:24:82: 77:32:b2:dc:f8:88:33:d5:1f:09:2a:73:ac:7b:55: 30:39:ac:74:80:7e:3c:f1:ef:7c:ad:ec:d0:48:a9: 38:73:ef:f3:c9:b4:b5:b5:70:aa:f7:af:64:ef:cf: 65:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A1:95:E5:D3:C5:52:02:FC:13:D1:03:FC:B0:EE:FC:A8:ED:B3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ed:95:c6:48:b6:3f:ef:88:3e:03:02:3a:72:61:d1:a2:d6: 99:5b:9f:17:2f:ec:aa:7c:80:e6:fa:63:5d:37:31:2b:13:f3: d8:3d:a2:2e:d5:74:25:75:98:07:5b:8f:30:9a:1b:46:98:39: 61:36:2e:4a:6a:98:d1:2c:f3:86:b7:b8:9a:c0:8a:35:6e:5f: d6:8d:6e:ef:4d:7c:30:6e:7c:25:55:b2:21:de:09:73:d3:57: 0e:80:98:fc:70:ca:73:b5:2e:51:c0:86:80:2b:a2:6a:22:ca: 76:3c:f8:fe:f7:ca:42:2f:6b:e5:bc:95:a5:51:46:d8:3a:ba: 03:f1:e0:9a:87:e9:af:4e:8b:4c:f9:8e:60:c7:a7:13:fe:56: fb:71:f1:70:f9:43:f1:85:15:e8:71:7b:e8:9c:08:42:29:e2: d1:fc:3a:5d:6b:69:42:1c:bd:5c:ae:38:48:a0:11:ae:39:d5: 8c:7d:1e:43:19:5d:57:3e:ed:40:41:8f:0e:30:c3:85:de:cc: 59:96:fe:8a:ca:bc:8a:9d:ee:52:32:8b:74:1e:6c:36:85:ab: bd:6b:95:3e:01:e9:45:62:7b:6a:21:35:99:e2:ea:a5:43:26: d8:f5:7d:d5:ce:00:c9:30:11:41:07:a9:fa:23:79:81:50:10: db:07:0d:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqCq0PyR+llfo0oC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk YzU0M2I4ZjUtOTBmOS00YmEzLTgzYjYtZWJkYWUwZjYxOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2JweONX7yJ4mpct08zo5L5I9L1FpX7Tv7N7 JeH7Eh23/6DTNG7QBjznVPuHM08Kr1p10gqEDO2DnBplfECM1SXje0Dd7rGQ2wdJ hEJeUtPuJJEecywLyI3J4k2BNA6+lCUDodb4+YLG2pvLWtCDY8F+vjFzM5tAb6ri YSCQS1YqbnWzNID4IiY967R6y35WtJEblQAbl3IGv0CDNo0JxecmsDpK0B1SAC6v Ylr+ODbxr4cQPToyznLYTsXS5aPRyCzj4IhX9cCEiFwmK9JzJIJ3MrLc+Igz1R8J KnOse1UwOax0gH488e98rezQSKk4c+/zybS1tXCq969k789l8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMmhleXTxVIC/BPRA/yw7vyo7bOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjEyNmYzYTEtYjVjMC0z YjA4LTg0MDEtZTg4NzdjNzg3OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPtlcZItj/viD4DAjpyYdGi1plbnxcv7Kp8gOb6Y103MSsT89g9 oi7VdCV1mAdbjzCaG0aYOWE2LkpqmNEs84a3uJrAijVuX9aNbu9NfDBufCVVsiHe CXPTVw6AmPxwynO1LlHAhoAromoiynY8+P73ykIva+W8laVRRtg6ugPx4JqH6a9O i0z5jmDHpxP+Vvtx8XD5Q/GFFehxe+icCEIp4tH8Ol1raUIcvVyuOEigEa451Yx9 HkMZXVc+7UBBjw4ww4XezFmW/orKvIqd7lIyi3QebDaFq71rlT4B6UVie2ohNZni 6qVDJtj1fdXOAMkwEUEHqfojeYFQENsHDfs= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:23 2025 by rpki-client