$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00930ea6-c1a0-34d7-bdf4-25cc53f2403c.roa File: 00930ea6-c1a0-34d7-bdf4-25cc53f2403c.roa (raw, json) Hash identifier: Ux7On+fOkZqUyAwEyqRRLIiHPeobpXgt6Oru8OJi6P0= Subject key identifier: DE:D6:08:F7:38:B7:34:C7:27:42:23:36:99:62:21:C0:6E:8F:E9:53 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CCB8A899BAA59E1B37B1F0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00930ea6-c1a0-34d7-bdf4-25cc53f2403c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b8:a8:99:ba:a5:9e:1b:37:b1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=eb43902c-9093-4b14-905c-840d2f9aac55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:d0:c6:fa:16:70:50:f5:0c:f3:f8:bf:e4: 83:f6:89:18:ce:02:1b:b3:04:94:5e:fd:e8:4b:08: 5e:44:7e:3d:0b:b7:40:8c:b5:fe:38:33:7c:c2:13: 8e:7b:98:2a:b4:73:36:12:cf:89:2d:84:ff:3c:58: 30:39:46:51:46:ad:d1:f0:af:c4:86:d7:4a:1c:98: 88:6f:75:f1:91:83:a7:de:86:e0:81:dd:99:f5:3d: c8:38:e3:95:ac:2f:9b:e2:3f:3c:06:0b:8d:16:ef: ce:53:b1:87:d0:e2:e2:9d:43:32:66:36:b8:07:57: e8:66:e7:80:00:c9:89:56:29:2b:0e:15:f5:bf:f5: a1:47:27:f2:33:fd:cb:c7:9d:9d:d1:ef:34:3d:a3: 8b:1c:aa:6f:c9:90:1b:59:10:66:d1:c7:3f:be:82: 6e:10:a5:b4:df:d3:b1:30:69:15:e4:91:f1:94:19: 66:be:95:15:9b:b3:10:71:5f:f6:07:11:37:59:46: 13:92:b0:00:bb:96:48:49:b0:d9:c6:90:e1:c7:ea: f1:dd:ec:b8:7e:c0:f7:cc:90:93:41:fa:79:ad:f8: 6b:6f:cc:e6:01:ef:f2:c6:d5:32:63:a0:14:78:9d: 4e:de:a9:1e:59:18:af:f7:c8:d6:a4:45:42:78:46: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D6:08:F7:38:B7:34:C7:27:42:23:36:99:62:21:C0:6E:8F:E9:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00930ea6-c1a0-34d7-bdf4-25cc53f2403c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:17:7b:98:8d:ed:b0:88:da:80:7b:24:17:fb:c7:7f:a8:8b: 93:d9:d8:f6:0c:0d:d5:d7:85:8a:29:37:0e:12:be:0a:ba:4d: be:1a:da:af:32:53:b7:36:76:c5:6b:64:fd:4e:ee:92:ec:8c: 93:10:3e:b5:c4:ac:33:14:cd:12:dc:b6:e5:52:f7:07:9c:4c: db:f7:ba:f0:48:fc:72:c8:3d:9c:18:54:78:e9:1e:2d:28:a8: 79:a6:60:9a:cc:a2:15:da:15:cf:be:4b:63:bd:48:27:ea:4b: c7:20:00:ed:02:17:4a:71:77:4c:9a:ba:8a:96:e6:01:0e:8b: a6:06:52:e5:84:55:85:18:d3:6c:56:a4:2f:d3:1e:3d:55:e4: 5b:11:06:a1:18:ad:e2:72:54:37:4f:0a:10:a2:c8:8d:27:68: 46:d7:ad:3b:78:e4:41:b3:e8:4a:c3:6c:6d:27:c4:6f:89:fc: 14:07:a9:68:a5:b8:b1:d5:20:51:f0:6d:92:eb:02:7e:8e:7c: 8a:fc:14:99:08:4a:2a:69:17:04:d3:13:6d:dd:2c:6a:92:4a: 32:dd:16:58:14:c3:15:83:f4:a0:bf:b9:1b:fa:20:66:24:6a: dc:e6:33:a5:69:ed:e9:66:d1:99:18:27:e8:9f:3b:b7:2f:30: 22:05:f4:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzLiombqlnhs3sfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWI0MzkwMmMtOTA5My00YjE0LTkwNWMtODQwZDJmOWFhYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrHQxvoWcFD1DPP4v+SD9okYzgIbswSUXv3o SwheRH49C7dAjLX+ODN8whOOe5gqtHM2Es+JLYT/PFgwOUZRRq3R8K/EhtdKHJiI b3XxkYOn3obggd2Z9T3IOOOVrC+b4j88BguNFu/OU7GH0OLinUMyZja4B1foZueA AMmJVikrDhX1v/WhRyfyM/3Lx52d0e80PaOLHKpvyZAbWRBm0cc/voJuEKW039Ox MGkV5JHxlBlmvpUVm7MQcV/2BxE3WUYTkrAAu5ZISbDZxpDhx+rx3ey4fsD3zJCT Qfp5rfhrb8zmAe/yxtUyY6AUeJ1O3qkeWRiv98jWpEVCeEY2YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN7WCPc4tzTHJ0IjNpliIcBuj+lTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDA5MzBlYTYtYzFhMC0z NGQ3LWJkZjQtMjVjYzUzZjI0MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJYXe5iN7bCI2oB7JBf7x3+oi5PZ2PYMDdXXhYopNw4Svgq6Tb4a 2q8yU7c2dsVrZP1O7pLsjJMQPrXErDMUzRLctuVS9wecTNv3uvBI/HLIPZwYVHjp Hi0oqHmmYJrMohXaFc++S2O9SCfqS8cgAO0CF0pxd0yauoqW5gEOi6YGUuWEVYUY 02xWpC/THj1V5FsRBqEYreJyVDdPChCiyI0naEbXrTt45EGz6ErDbG0nxG+J/BQH qWiluLHVIFHwbZLrAn6OfIr8FJkISippFwTTE23dLGqSSjLdFlgUwxWD9KC/uRv6 IGYkatzmM6Vp7elm0ZkYJ+ifO7cvMCIF9BI= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:43 2025 by rpki-client