$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa File: 88e2c01c-1673-3937-8a2e-6b1b9270b195.roa (raw, json) Hash identifier: T6pIj16EY0Jp4tMlNh1p6TEzx6Bxi3MGRh7wIahVD3Y= Subject key identifier: 7F:DA:9D:A6:E9:91:7A:D3:47:99:5D:0F:EB:DD:07:53:99:07:67:60 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CCA2C090D127A04B2CA3E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:a2:c0:90:d1:27:a0:4b:2c:a3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f15f2833-622b-410e-864f-20a679d5dafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:e2:7a:27:6d:5a:10:47:c6:0a:ca:86:1d: 4e:01:b9:4e:6c:62:15:31:fe:f1:2a:18:ae:7f:ac: dd:fa:e0:b7:14:75:57:3c:60:c8:e2:1c:e3:2e:10: 45:44:a3:ef:d6:0d:f2:87:9e:8c:f3:7c:07:49:e3: 7c:65:30:bd:78:2f:e7:27:0e:cf:c1:90:be:b1:63: 37:0c:9f:88:bb:e4:28:6c:34:07:a3:9b:e2:9c:20: d2:93:ed:d3:40:aa:28:fc:d9:f4:1f:14:4c:e4:33: b0:7a:54:5a:2a:db:ae:9a:54:2b:da:88:4e:16:d5: 3a:33:ff:05:94:f2:af:52:2f:4a:a1:ae:2d:ac:7f: 16:84:df:28:18:73:29:d6:3b:63:55:fa:27:8e:12: 7a:55:7a:97:3b:2f:c5:e2:7e:04:b2:c0:40:8f:13: ab:2d:e5:dd:69:3b:84:21:a6:1d:9e:d4:c9:92:33: 02:7e:75:34:22:58:f4:3e:d5:87:b0:52:a1:c4:85: d7:82:59:b8:e0:9a:8a:e5:bc:96:55:99:e2:18:b1: 93:38:0a:46:12:6a:44:69:e7:a6:f4:8c:d6:75:ef: 25:4b:41:c3:fd:c0:eb:62:a8:3d:cd:5e:10:de:0f: 32:6f:c9:63:96:16:7d:f1:5a:fd:91:7a:38:43:d7: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DA:9D:A6:E9:91:7A:D3:47:99:5D:0F:EB:DD:07:53:99:07:67:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:70:d6:48:ea:45:25:d4:b8:82:e8:e7:35:f5:24:4f:ae:6b: 80:d2:c6:a4:eb:a8:89:b9:e0:8e:aa:8e:3c:ba:3d:31:1c:fc: 7d:12:0f:6f:45:bf:41:bd:8e:74:f5:52:fc:a0:51:f0:44:2b: db:b1:bb:ff:ba:5a:1a:28:16:76:57:eb:93:96:63:0c:c3:f8: 09:bf:09:d1:19:c7:71:cb:6d:8f:b8:01:fe:9b:c1:ab:dd:09: b2:f6:ef:7a:89:7d:97:46:eb:b7:73:aa:19:2b:6d:ac:af:40: f1:85:8d:f4:9b:30:39:f2:88:a4:4d:bb:5d:6e:b8:12:28:9c: 9d:8c:de:ce:8d:dc:5f:a9:fd:f1:cb:6b:93:85:e2:1b:ee:0d: 08:34:9d:9e:cd:93:0a:55:40:4f:b0:0e:4c:c3:61:0a:d1:c3: bc:ae:22:b0:ea:ec:fa:a0:53:40:60:fd:7e:89:44:b6:47:7f: c2:10:22:13:68:4f:6c:a0:83:71:97:41:4c:fe:f1:ba:00:b3: 7c:58:c4:f3:39:e7:28:a4:dd:c6:32:2a:6f:fd:dc:5b:7d:de: 9b:c6:fe:4e:1c:2b:cb:48:26:b1:f6:df:67:92:9c:0f:64:6e: 17:e8:8e:43:36:b5:56:43:a6:1b:4c:b1:3e:0b:12:b1:40:c5: 91:39:e2:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzKLAkNEnoEsso+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjE1ZjI4MzMtNjIyYi00MTBlLTg2NGYtMjBhNjc5ZDVkYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1nieidtWhBHxgrKhh1OAblObGIVMf7xKhiu f6zd+uC3FHVXPGDI4hzjLhBFRKPv1g3yh56M83wHSeN8ZTC9eC/nJw7PwZC+sWM3 DJ+Iu+QobDQHo5vinCDSk+3TQKoo/Nn0HxRM5DOwelRaKtuumlQr2ohOFtU6M/8F lPKvUi9Koa4trH8WhN8oGHMp1jtjVfonjhJ6VXqXOy/F4n4EssBAjxOrLeXdaTuE IaYdntTJkjMCfnU0Ilj0PtWHsFKhxIXXglm44JqK5byWVZniGLGTOApGEmpEaeem 9IzWde8lS0HD/cDrYqg9zV4Q3g8yb8ljlhZ98Vr9kXo4Q9d/DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH/anabpkXrTR5ldD+vdB1OZB2dgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODhlMmMwMWMtMTY3My0z OTM3LThhMmUtNmIxYjkyNzBiMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKVw1kjqRSXUuILo5zX1JE+ua4DSxqTrqIm54I6qjjy6PTEc/H0S D29Fv0G9jnT1UvygUfBEK9uxu/+6WhooFnZX65OWYwzD+Am/CdEZx3HLbY+4Af6b wavdCbL273qJfZdG67dzqhkrbayvQPGFjfSbMDnyiKRNu11uuBIonJ2M3s6N3F+p /fHLa5OF4hvuDQg0nZ7NkwpVQE+wDkzDYQrRw7yuIrDq7PqgU0Bg/X6JRLZHf8IQ IhNoT2ygg3GXQUz+8boAs3xYxPM55yik3cYyKm/93Ft93pvG/k4cK8tIJrH232eS nA9kbhfojkM2tVZDphtMsT4LErFAxZE54oI= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:33 2025 by rpki-client