$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2186736d-c9c1-3bb9-b61f-866ab886a133.roa File: 2186736d-c9c1-3bb9-b61f-866ab886a133.roa (raw, json) Hash identifier: xTjtD59JQROTrfH1sySG+ZoE5SZWK1GmNdbPDoCYvLQ= Subject key identifier: DD:B7:1F:4F:D0:13:30:85:1D:15:36:CE:3E:7D:3F:4E:CB:09:B6:5A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673AC6BB7C7B15CD132460 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2186736d-c9c1-3bb9-b61f-866ab886a133.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 2001:500:4e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3a:c6:bb:7c:7b:15:cd:13:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=b346a68c-6539-42fc-84e1-c2998b165c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:79:21:2d:31:f8:e2:16:bd:1b:81:42:0f:9b: 4f:6e:f8:34:6d:3d:31:08:3a:5a:58:3f:2a:55:23: 60:ab:37:2f:8d:27:36:c3:29:79:b7:ba:b3:b3:b8: f6:8b:8b:23:f2:4d:0e:13:57:3d:7e:fd:4e:5a:ba: ab:1d:8b:d5:fa:33:42:00:b1:e0:de:df:a9:b2:4f: 03:d1:57:85:00:b1:0c:15:ce:8a:1c:d1:23:41:d7: 7e:08:d5:ee:40:73:51:f2:ed:d0:97:6b:dc:b0:37: 99:31:4d:53:0a:3a:72:fe:52:b0:fb:d7:4f:52:59: 4d:e2:2d:8c:42:a5:da:53:c3:af:df:17:aa:9c:43: 6e:03:03:49:80:cb:bb:bd:81:ab:1d:90:ee:07:df: 69:e2:c4:6d:48:3c:da:98:71:cd:01:ec:ac:73:04: b8:bc:2f:24:a1:59:2c:d5:02:60:30:9b:1a:62:cd: 71:cc:1f:ae:52:00:25:46:3e:3b:08:92:53:18:8d: b5:2f:b7:28:df:5b:fb:1d:9f:84:a6:42:62:81:e0: 53:dd:c1:c7:36:b4:78:26:8e:37:fe:fb:43:ac:c3: a4:0d:94:75:7d:7c:16:16:97:08:33:fa:a7:88:c2: ca:7c:60:df:9b:aa:43:03:f8:1b:db:bb:41:0f:8b: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B7:1F:4F:D0:13:30:85:1D:15:36:CE:3E:7D:3F:4E:CB:09:B6:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2186736d-c9c1-3bb9-b61f-866ab886a133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:65:b3:eb:55:d0:20:da:14:67:26:98:c2:97:1a:ff:ff:ee: 54:f4:c5:aa:eb:93:88:7d:83:4d:f9:e3:a7:7e:29:ee:f7:f3: 2c:a8:4f:8c:a3:fa:ac:43:a0:7a:26:8a:67:6a:b4:91:b1:07: e9:68:20:30:0d:c8:9b:d7:7b:e9:ea:0a:96:e2:2b:9e:f1:a7: 3e:ad:b1:7e:8d:b0:32:de:36:41:06:32:ab:c3:3d:eb:4c:d3: 6c:08:ab:96:55:2c:72:55:29:ea:8a:6a:47:b0:ab:b0:43:4f: df:43:e0:b7:99:13:91:cb:52:d7:a1:59:4e:d4:97:30:46:a7: 60:4b:94:86:ae:3e:c9:24:07:12:d2:36:a8:cb:1e:fd:3e:84: f0:0f:cf:6f:a8:6a:05:5b:61:5d:f0:15:de:2e:cf:05:ab:9c: 97:0b:5a:26:e1:58:ad:b8:1a:d0:0f:41:f7:57:7a:be:f8:48: 61:0f:71:3f:98:77:2d:7a:f3:23:89:00:28:6c:a8:43:ac:c5: 15:29:f0:21:29:30:ee:29:b5:99:9d:cf:93:32:9b:d1:9a:98: f5:86:ba:73:2f:1c:1d:dc:c7:9a:44:ad:09:a2:1d:d4:50:87: 66:14:86:34:14:23:17:c0:2d:d1:ce:11:22:50:a3:fc:ce:64: 8c:0f:76:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZzrGu3x7Fc0TJGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YjM0NmE2OGMtNjUzOS00MmZjLTg0ZTEtYzI5OThiMTY1YzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXkhLTH44ha9G4FCD5tPbvg0bT0xCDpaWD8q VSNgqzcvjSc2wyl5t7qzs7j2i4sj8k0OE1c9fv1OWrqrHYvV+jNCALHg3t+psk8D 0VeFALEMFc6KHNEjQdd+CNXuQHNR8u3Ql2vcsDeZMU1TCjpy/lKw+9dPUllN4i2M QqXaU8Ov3xeqnENuAwNJgMu7vYGrHZDuB99p4sRtSDzamHHNAeyscwS4vC8koVks 1QJgMJsaYs1xzB+uUgAlRj47CJJTGI21L7co31v7HZ+EpkJigeBT3cHHNrR4Jo43 /vtDrMOkDZR1fXwWFpcIM/qniMLKfGDfm6pDA/gb27tBD4v3ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN23H0/QEzCFHRU2zj59P07LCbZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjE4NjczNmQtYzljMS0z YmI5LWI2MWYtODY2YWI4ODZhMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFVls+tV0CDaFGcmmMKXGv//7lT0xarrk4h9g03546d+Ke738yyo T4yj+qxDoHomimdqtJGxB+loIDANyJvXe+nqCpbiK57xpz6tsX6NsDLeNkEGMqvD PetM02wIq5ZVLHJVKeqKakewq7BDT99D4LeZE5HLUtehWU7UlzBGp2BLlIauPskk BxLSNqjLHv0+hPAPz2+oagVbYV3wFd4uzwWrnJcLWibhWK24GtAPQfdXer74SGEP cT+Ydy168yOJAChsqEOsxRUp8CEpMO4ptZmdz5Mym9GamPWGunMvHB3cx5pErQmi HdRQh2YUhjQUIxfALdHOESJQo/zOZIwPdnc= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:35 2025 by rpki-client