$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/753af894-1bb4-36e3-92ad-15cbb18e73fe.roa File: 753af894-1bb4-36e3-92ad-15cbb18e73fe.roa (raw, json) Hash identifier: BETaqlvifPH5rPTniUGWi4zHS+NnjZzrbtrnUd7LcKw= Subject key identifier: E0:0A:9F:C0:02:E0:D0:27:73:0E:AA:6D:39:1D:5C:B7:AA:87:2F:C1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674D330E3905964732C580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/753af894-1bb4-36e3-92ad-15cbb18e73fe.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 2001:500:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4d:33:0e:39:05:96:47:32:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=81e79faa-b6db-4fb3-a31e-bea92d57c45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dc:5c:7d:e7:27:85:d0:ac:23:ed:fd:93:17: 36:f4:7e:ea:af:12:b9:b9:7f:a3:05:53:9b:4c:63: 82:6f:3d:41:d1:1b:ec:be:16:cd:a7:9d:59:5e:64: 14:c9:a5:fb:d6:33:e3:0e:ef:cc:dc:84:3e:b4:d8: 1e:66:c6:16:71:28:b7:fa:98:48:7a:0f:25:a7:ba: bc:ea:61:16:28:ef:50:02:bf:c7:37:88:32:9a:03: cc:15:ce:4d:34:49:65:39:86:53:1d:3e:b7:c2:8a: 26:53:b0:a7:ef:3b:a9:ff:f0:62:ca:09:d9:70:5e: 22:3a:70:01:4e:3b:8b:f6:9e:77:10:7c:34:fe:b9: e3:14:18:83:1b:2c:42:16:a5:33:ad:39:90:67:c6: 9f:56:75:fa:b3:7d:c7:21:d4:03:f2:5e:95:4d:d7: 47:9c:88:d0:3b:50:13:68:15:c7:cc:f5:2c:04:34: 83:a4:58:5a:f7:57:d9:73:9e:8b:8e:b8:de:6e:bf: 28:b7:39:a5:b8:cc:df:f8:90:53:80:bb:7f:e3:d1: da:e6:8c:da:31:59:3a:9e:7e:e8:03:65:f2:89:6c: 98:7e:65:47:50:f0:ff:9a:3a:ba:7e:ee:99:be:05: 11:55:9d:5b:1a:6b:10:e7:e8:a4:e3:91:a2:ae:fb: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0A:9F:C0:02:E0:D0:27:73:0E:AA:6D:39:1D:5C:B7:AA:87:2F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/753af894-1bb4-36e3-92ad-15cbb18e73fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a2:c6:5d:81:88:44:16:be:78:a4:e2:61:c2:34:12:f8:20: a7:9e:87:57:03:16:75:77:bd:c0:fe:55:c8:dc:38:6a:d1:33: 37:e4:6f:6b:31:89:eb:6a:f0:64:3e:18:91:5f:81:88:60:b5: 3f:23:4f:09:1c:f9:f7:a3:70:ff:5c:9f:a6:ea:ad:13:59:ae: cd:57:54:39:a5:db:1a:78:83:9b:15:57:4f:c9:59:5b:4b:fa: bb:bb:5d:50:3c:ca:95:46:42:a4:6e:7d:93:9d:a2:e4:26:01: 39:07:21:db:14:3a:c1:17:39:57:67:d0:84:ef:df:6d:63:78: bc:08:08:01:87:c6:ea:b0:4c:2c:71:57:80:a8:f9:f7:db:78: 64:b5:00:bb:89:9b:05:09:62:32:10:6e:1e:6f:48:9a:64:9c: e0:39:7d:66:18:dd:af:64:7d:54:81:cc:23:15:3a:18:df:80: 32:ad:61:9b:a2:6c:64:cf:20:7f:7d:82:84:84:ec:27:b2:38: 08:1d:13:10:89:bd:45:bb:98:25:c7:28:7f:fe:d6:67:8c:4c: 94:1e:8d:a4:7e:8c:cc:ee:90:31:64:87:dc:7e:8a:49:89:ed: c1:59:0d:1e:8c:86:7e:3d:f2:9c:05:7c:8f:c2:92:ca:02:e1: 18:4b:dd:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ00zDjkFlkcyxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ODFlNzlmYWEtYjZkYi00ZmIzLWEzMWUtYmVhOTJkNTdjNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNxcfecnhdCsI+39kxc29H7qrxK5uX+jBVOb TGOCbz1B0RvsvhbNp51ZXmQUyaX71jPjDu/M3IQ+tNgeZsYWcSi3+phIeg8lp7q8 6mEWKO9QAr/HN4gymgPMFc5NNEllOYZTHT63woomU7Cn7zup//BiygnZcF4iOnAB TjuL9p53EHw0/rnjFBiDGyxCFqUzrTmQZ8afVnX6s33HIdQD8l6VTddHnIjQO1AT aBXHzPUsBDSDpFha91fZc56Ljrjebr8otzmluMzf+JBTgLt/49Ha5ozaMVk6nn7o A2XyiWyYfmVHUPD/mjq6fu6ZvgURVZ1bGmsQ5+ik45GirvvfmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOAKn8AC4NAncw6qbTkdXLeqhy/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzUzYWY4OTQtMWJiNC0z NmUzLTkyYWQtMTVjYmIxOGU3M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHSixl2BiEQWvnik4mHCNBL4IKeeh1cDFnV3vcD+VcjcOGrRMzfk b2sxietq8GQ+GJFfgYhgtT8jTwkc+fejcP9cn6bqrRNZrs1XVDml2xp4g5sVV0/J WVtL+ru7XVA8ypVGQqRufZOdouQmATkHIdsUOsEXOVdn0ITv321jeLwICAGHxuqw TCxxV4Co+ffbeGS1ALuJmwUJYjIQbh5vSJpknOA5fWYY3a9kfVSBzCMVOhjfgDKt YZuibGTPIH99goSE7CeyOAgdExCJvUW7mCXHKH/+1meMTJQejaR+jMzukDFkh9x+ ikmJ7cFZDR6Mhn498pwFfI/CksoC4RhL3RM= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:36 2025 by rpki-client