$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/318e4f33-d285-3655-ab9d-10c9a0009d02.roa File: 318e4f33-d285-3655-ab9d-10c9a0009d02.roa (raw, json) Hash identifier: NN7g17r5t/Z5/Mn2z7cDpMH8CMwm34/uHDJcpvUUbKs= Subject key identifier: 95:69:97:0A:56:ED:A7:6E:58:03:D1:BB:66:B3:C6:78:24:C9:73:70 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674FCF762CF90AE5AD0C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/318e4f33-d285-3655-ab9d-10c9a0009d02.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 2001:500:4a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4f:cf:76:2c:f9:0a:e5:ad:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=91188efa-3ee8-4a1d-9fa9-5ae2f0cd54ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:41:a9:3e:e0:b2:68:67:05:0f:f0:1c:97:5e: ba:c4:e2:1f:26:9f:cf:96:28:e9:56:d3:8d:c2:ef: 0f:47:33:8c:18:93:6d:98:69:3b:f4:49:68:44:9e: 5f:26:3e:e1:37:06:11:92:19:c8:d0:6a:a2:cf:83: 7a:62:d0:45:2a:1f:80:0a:3d:93:39:0c:b8:b5:80: c3:06:36:a0:bf:28:14:52:9f:71:85:9f:a8:2f:0c: 0f:93:2e:34:fa:2c:01:39:ea:b4:a0:83:03:09:94: 66:95:af:46:9b:da:f5:2d:a0:e9:af:a1:e8:4e:23: e8:75:88:13:91:75:75:99:ac:f9:e2:29:14:96:10: 7c:bf:4a:51:54:8b:a1:fb:63:0e:20:a6:85:4f:a2: 3c:27:1e:d6:2f:55:57:52:2f:a3:05:09:69:d2:37: 1b:69:7a:03:0d:50:92:a4:4c:0b:a6:9d:eb:57:b7: 7f:e8:8f:12:7f:9d:fb:d7:78:3c:b3:26:72:57:31: 4a:98:31:37:78:8f:5b:f4:e2:c8:ee:dc:a5:24:bd: 7a:41:7e:c3:1f:de:29:da:8b:8e:7f:a4:f3:cf:44: 09:c5:70:99:18:59:4c:d3:82:13:87:bf:fe:47:81: 4b:40:73:d2:eb:f3:94:e6:d9:cc:b5:2e:3b:50:6d: ec:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:69:97:0A:56:ED:A7:6E:58:03:D1:BB:66:B3:C6:78:24:C9:73:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/318e4f33-d285-3655-ab9d-10c9a0009d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:47:69:c0:82:ad:9c:9b:38:34:5b:8e:62:a1:96:45:57:52: cb:e6:ad:a2:43:3b:fc:cf:d6:aa:33:41:87:0c:f6:3b:99:7f: e7:bb:09:d1:8b:f4:e5:9d:eb:d4:24:3a:54:29:95:5d:15:75: 88:e7:f8:03:33:88:3e:da:af:34:47:36:ae:5d:de:1b:a5:eb: 2a:c0:b8:45:2c:6f:f4:53:26:53:f7:50:8c:7c:fa:b4:9e:16: 22:af:71:80:0b:ce:29:82:10:0b:74:bd:0c:64:2d:57:81:49: ca:bb:a8:7e:5a:70:59:a9:2b:9f:36:73:fd:da:52:23:d5:60: 76:e9:79:11:bc:cd:7e:fd:35:26:d5:ba:af:dd:67:a7:37:36: d1:b5:fd:7b:c9:39:2a:41:70:2d:a0:df:77:6f:48:f3:23:dd: e6:91:27:53:d9:79:06:14:a0:db:48:4c:4d:fd:b6:88:1c:53: a2:7d:8e:53:7c:c8:a7:18:fb:a1:94:ee:0e:15:24:a0:dd:3b: fb:0e:8e:92:a4:15:08:18:53:de:16:c5:82:ef:19:92:3f:39: 60:05:54:5d:94:e0:f3:66:ff:17:78:2f:f2:dd:b4:cf:d6:a3: 64:fb:5a:9f:4e:df:53:f6:3a:2e:f5:c9:2e:cb:52:84:5c:83: 81:c3:56:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ0/Pdiz5CuWtDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk OTExODhlZmEtM2VlOC00YTFkLTlmYTktNWFlMmYwY2Q1NGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUGpPuCyaGcFD/Acl166xOIfJp/PlijpVtON wu8PRzOMGJNtmGk79EloRJ5fJj7hNwYRkhnI0Gqiz4N6YtBFKh+ACj2TOQy4tYDD BjagvygUUp9xhZ+oLwwPky40+iwBOeq0oIMDCZRmla9Gm9r1LaDpr6HoTiPodYgT kXV1maz54ikUlhB8v0pRVIuh+2MOIKaFT6I8Jx7WL1VXUi+jBQlp0jcbaXoDDVCS pEwLpp3rV7d/6I8Sf53713g8syZyVzFKmDE3eI9b9OLI7tylJL16QX7DH94p2ouO f6Tzz0QJxXCZGFlM04ITh7/+R4FLQHPS6/OU5tnMtS47UG3srQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJVplwpW7aduWAPRu2azxngkyXNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzE4ZTRmMzMtZDI4NS0z NjU1LWFiOWQtMTBjOWEwMDA5ZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL5HacCCrZybODRbjmKhlkVXUsvmraJDO/zP1qozQYcM9juZf+e7 CdGL9OWd69QkOlQplV0VdYjn+AMziD7arzRHNq5d3hul6yrAuEUsb/RTJlP3UIx8 +rSeFiKvcYALzimCEAt0vQxkLVeBScq7qH5acFmpK582c/3aUiPVYHbpeRG8zX79 NSbVuq/dZ6c3NtG1/XvJOSpBcC2g33dvSPMj3eaRJ1PZeQYUoNtITE39togcU6J9 jlN8yKcY+6GU7g4VJKDdO/sOjpKkFQgYU94WxYLvGZI/OWAFVF2U4PNm/xd4L/Ld tM/Wo2T7Wp9O31P2Oi71yS7LUoRcg4HDVgU= -----END CERTIFICATE-----Generated at Tue Oct 21 09:15:58 2025 by rpki-client