$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa File: a47f90dd-ec81-3876-8d33-5fc0970e8333.roa (raw, json) Hash identifier: st1sL49PJv2K0Qg99SZka9CQMaIpc9t6IE3pOyjYj0w= Subject key identifier: EB:0F:BA:47:0A:31:45:CA:1F:EA:0E:C9:99:B1:0B:C6:74:A2:E6:C6 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584AF9513C6FB10CCD2DA91635E0 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 3557 IP address blocks: 2001:500:2e::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3c:6f:b1:0c:cd:2d:a9:16:35:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=57c03525-44cc-46cd-b264-48c270d3e33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7c:2e:8a:4e:51:df:58:20:0f:4d:25:fb:3a: a0:fc:e1:10:09:63:71:d1:52:17:a1:ab:55:d6:78: 52:f5:3d:25:17:cd:26:c5:d6:f0:3c:5a:e6:cc:c9: af:a8:fc:ae:1b:6d:0f:19:ac:e6:79:91:c2:00:7b: de:df:6c:33:ad:d1:c1:5f:c0:3c:5e:44:bb:2b:e6: 4d:0d:b2:12:27:4b:ef:b5:c9:3d:83:55:67:75:0a: c8:e0:7d:0a:43:09:62:e5:bd:e0:2b:06:c7:1e:21: b7:34:b4:18:13:37:68:36:2d:92:ac:f4:81:0b:e7: 5f:b9:ed:9f:98:ce:94:ef:ca:e0:58:d0:b2:90:44: 3f:c7:2d:3b:f1:68:d9:d4:ca:5a:27:9b:3e:1d:b6: e7:bd:c0:5f:e6:c3:20:a6:8a:81:11:d3:bd:51:9a: e6:e4:1e:69:21:c1:7e:10:f4:79:f6:0e:82:98:58: 90:84:43:06:52:f9:9b:ea:5e:11:ab:9a:68:ad:cc: da:60:e6:ac:02:97:5b:83:bb:b2:c7:5b:69:fe:cd: a8:a4:d3:f3:6a:21:6f:35:b3:a4:8a:01:b1:f2:01: 3d:82:43:e4:24:ff:9b:b8:a3:d4:64:44:ad:6e:e3: 27:a7:56:68:de:e9:22:bd:9c:fe:4d:23:48:e1:ca: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0F:BA:47:0A:31:45:CA:1F:EA:0E:C9:99:B1:0B:C6:74:A2:E6:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2e::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:37:8d:a3:9a:84:ff:df:f6:92:9a:7c:82:88:1f:74:69:6f: 53:15:c7:d2:fc:e8:86:93:ef:81:f2:c8:92:38:9a:05:6d:62: 57:47:ad:84:1e:2f:c8:de:02:ba:0c:7f:ef:3c:60:9b:9e:67: 82:f7:e8:99:fb:44:81:2b:23:57:0e:8f:16:62:66:45:7b:c0: 70:7e:f2:fd:53:16:91:4b:63:d6:cc:45:1b:ed:68:0b:8c:b1: 6c:1b:b3:69:fd:92:08:bd:c5:eb:50:d5:b9:fd:67:31:a3:e9: c0:d6:c5:c3:8c:b1:0c:23:9d:85:bf:c4:ce:4e:e5:6a:77:da: 5a:d7:70:a4:b5:45:e3:69:30:a9:52:db:fa:63:f2:0b:e7:0a: 9e:c7:98:4e:cd:10:67:fa:45:e2:ee:99:87:4d:d2:5f:5f:e6: c1:dd:cb:d2:f2:9f:ee:db:57:ad:dc:95:2d:7d:0f:11:c0:b5: 86:ec:d3:19:f2:83:d6:1c:68:e6:b5:6b:c4:04:a1:f6:e3:41: 0c:14:47:54:d7:27:8b:98:68:05:82:d6:de:16:84:2d:0c:9a: 22:d2:35:9c:33:82:fe:33:eb:9a:19:1b:f2:85:2a:81:b0:fa: 96:ba:28:a9:58:e6:0d:6c:27:aa:19:e1:29:f8:7b:03:87:04: e8:17:01:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr5UTxvsQzNLakWNeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTdjMDM1MjUtNDRjYy00NmNkLWIyNjQtNDhjMjcwZDNlMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXwuik5R31ggD00l+zqg/OEQCWNx0VIXoatV 1nhS9T0lF80mxdbwPFrmzMmvqPyuG20PGazmeZHCAHve32wzrdHBX8A8XkS7K+ZN DbISJ0vvtck9g1VndQrI4H0KQwli5b3gKwbHHiG3NLQYEzdoNi2SrPSBC+dfue2f mM6U78rgWNCykEQ/xy078WjZ1MpaJ5s+HbbnvcBf5sMgpoqBEdO9UZrm5B5pIcF+ EPR59g6CmFiQhEMGUvmb6l4Rq5porczaYOasApdbg7uyx1tp/s2opNPzaiFvNbOk igGx8gE9gkPkJP+buKPUZEStbuMnp1Zo3ukivZz+TSNI4cpmWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOsPukcKMUXKH+oOyZmxC8Z0oubGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvYTQ3ZjkwZGQtZWM4MS0z ODc2LThkMzMtNWZjMDk3MGU4MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEFAAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACI3jaOahP/f9pKafIKIH3Rpb1MVx9L86IaT74HyyJI4mgVtYldH rYQeL8jeAroMf+88YJueZ4L36Jn7RIErI1cOjxZiZkV7wHB+8v1TFpFLY9bMRRvt aAuMsWwbs2n9kgi9xetQ1bn9ZzGj6cDWxcOMsQwjnYW/xM5O5Wp32lrXcKS1ReNp MKlS2/pj8gvnCp7HmE7NEGf6ReLumYdN0l9f5sHdy9Lyn+7bV63clS19DxHAtYbs 0xnyg9YcaOa1a8QEofbjQQwUR1TXJ4uYaAWC1t4WhC0MmiLSNZwzgv4z65oZG/KF KoGw+pa6KKlY5g1sJ6oZ4Sn4ewOHBOgXAY8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:14:15 2025 by rpki-client