$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa File: 07137d18-ea2a-3814-9a59-8ee61677f7c2.roa (raw, json) Hash identifier: H2+iE3l3f0qmAIGZ7Z4nOVFuyMCaEG0ZqPX0GtSTdgg= Subject key identifier: 1A:2A:69:FD:9C:2B:31:B7:18:62:BD:1C:C5:E6:11:1D:CA:5A:3E:F4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B8EACC05E119F092649A84080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 198260 IP address blocks: 2001:500:f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c0:5e:11:9f:09:26:49:a8:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=65ef7e4b-cd96-489b-b4b5-9035fe60f2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:26:53:2e:9f:b5:ac:22:8f:4c:09:5e:f7:d4: de:fe:56:f9:05:a5:0a:63:53:04:72:f4:5c:a9:e8: cf:41:d4:98:0d:d9:51:2f:8a:50:c6:8a:e9:03:38: 36:71:1c:00:a2:43:1e:f8:90:72:8c:28:33:2b:65: d5:7f:04:7c:60:6a:2b:f4:9c:b8:01:2f:89:52:6e: a6:4a:20:4c:fa:8c:93:24:5b:65:92:ca:66:f9:11: 95:96:0f:96:41:9a:04:6f:6e:46:8b:ef:86:74:73: fa:a4:39:ca:ba:04:91:c0:64:62:31:f8:42:e7:b5: 7e:0e:bb:93:fc:16:94:08:f2:b2:cc:bb:f0:57:e4: bb:3d:34:51:37:6e:ba:26:e1:ad:82:df:dc:8c:e7: 56:46:2a:cc:53:13:34:dd:ff:a1:5f:50:76:8c:98: 4b:54:0c:12:fb:d7:d6:ef:9c:0e:f5:36:62:8b:7b: 92:89:c1:3b:d8:10:d0:4b:b0:b2:42:4d:5f:20:67: f2:23:d0:b9:51:16:ee:a0:7b:27:65:57:8b:50:a0: de:e8:76:5b:ec:be:00:65:19:1b:a6:ff:02:e6:af: 7c:2c:76:a7:b3:39:51:30:94:70:25:5d:17:7d:98: e6:3b:45:87:4e:78:e0:f6:f9:5a:e2:1b:b4:c8:d0: e6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:69:FD:9C:2B:31:B7:18:62:BD:1C:C5:E6:11:1D:CA:5A:3E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:81:e0:90:5d:a9:e8:59:79:09:c2:c0:f7:f4:fb:f4:4f:2c: 9e:51:e0:c4:80:81:e2:7b:c9:a1:ef:73:4a:f6:a7:10:b3:6d: 3a:05:5b:58:79:a1:0e:53:c2:9c:bd:14:14:3e:ae:c1:80:96: ae:55:17:9f:2c:da:7f:49:db:d0:0e:71:85:54:75:ce:b4:d5: c3:82:c9:ff:cb:d7:0a:e3:7b:3e:c6:8e:a8:fe:89:b1:34:f6: 4c:3d:f1:d2:85:b7:ed:c6:1f:56:90:fc:a5:26:14:04:5e:44: 9c:98:e8:dc:cb:b0:3b:94:62:96:8a:ec:d4:de:4c:42:18:4b: d5:57:55:bf:2e:5f:2f:15:83:c6:fe:3d:33:7b:02:8a:4b:a8: c8:c9:2f:0d:9a:e1:39:ee:cd:aa:fd:71:56:9f:5c:62:0b:96: 60:52:f9:a8:98:26:c2:99:26:51:ee:18:2f:55:c4:14:5d:5f: 6c:83:d4:fe:5d:8c:90:72:53:0e:22:2e:54:6b:e6:6c:ca:c8: dc:42:41:50:3b:c0:16:f9:ce:75:41:d7:c4:99:8b:2c:36:c9: 3b:48:8a:41:07:3d:58:c5:84:c0:78:26:64:a2:c2:19:41:fe: 39:fc:ae:a7:27:07:8f:48:83:83:0c:9d:d2:79:89:5a:50:c5: f8:83:fa:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrMBeEZ8JJkmoQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NjVlZjdlNGItY2Q5Ni00ODliLWI0YjUtOTAzNWZlNjBmMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiZTLp+1rCKPTAle99Te/lb5BaUKY1MEcvRc qejPQdSYDdlRL4pQxorpAzg2cRwAokMe+JByjCgzK2XVfwR8YGor9Jy4AS+JUm6m SiBM+oyTJFtlkspm+RGVlg+WQZoEb25Gi++GdHP6pDnKugSRwGRiMfhC57V+DruT /BaUCPKyzLvwV+S7PTRRN266JuGtgt/cjOdWRirMUxM03f+hX1B2jJhLVAwS+9fW 75wO9TZii3uSicE72BDQS7CyQk1fIGfyI9C5URbuoHsnZVeLUKDe6HZb7L4AZRkb pv8C5q98LHanszlRMJRwJV0XfZjmO0WHTnjg9vla4hu0yNDmMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBoqaf2cKzG3GGK9HMXmER3KWj70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDcxMzdkMTgtZWEyYS0z ODE0LTlhNTktOGVlNjE2NzdmN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALKB4JBdqehZeQnCwPf0+/RPLJ5R4MSAgeJ7yaHvc0r2pxCzbToF W1h5oQ5Twpy9FBQ+rsGAlq5VF58s2n9J29AOcYVUdc601cOCyf/L1wrjez7Gjqj+ ibE09kw98dKFt+3GH1aQ/KUmFAReRJyY6NzLsDuUYpaK7NTeTEIYS9VXVb8uXy8V g8b+PTN7AopLqMjJLw2a4Tnuzar9cVafXGILlmBS+aiYJsKZJlHuGC9VxBRdX2yD 1P5djJByUw4iLlRr5mzKyNxCQVA7wBb5znVB18SZiyw2yTtIikEHPVjFhMB4JmSi whlB/jn8rqcnB49Ig4MMndJ5iVpQxfiD+t8= -----END CERTIFICATE-----Generated at Tue Oct 21 09:20:28 2025 by rpki-client