$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa File: 9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa (raw, json) Hash identifier: fWSKcqhkXhFcWZbICaEGqT6Jl4yr5iF+CvnblHeHbRE= Subject key identifier: 4E:8A:C4:66:7D:4B:17:72:92:1A:4A:B3:81:A2:32:74:57:0C:64:EE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB44630C6178437F92B680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 2001:500:4d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:44:63:0c:61:78:43:7f:92:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=9580e014-1357-4c9b-8c73-4f00a1844c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fb:4d:cf:b7:77:5e:d4:09:50:20:bc:2b:31: 82:5e:ad:50:eb:5d:e9:d2:38:69:39:c7:d4:cd:93: 22:1b:07:25:88:ed:79:34:27:2b:4e:c5:f5:27:7b: 63:93:0e:d4:44:a7:cd:ad:ac:ec:4b:fe:f2:70:09: 2e:2f:8c:fb:1f:8e:97:b3:9c:2f:bc:3b:5d:7f:f3: 19:02:c2:92:33:7c:d7:92:41:f6:42:3f:2b:49:8d: 37:d7:c5:d3:f6:a9:32:1e:01:87:a0:bb:2c:76:76: 7d:1e:d8:8c:73:a3:c8:00:48:7c:59:ce:ea:93:12: ae:38:c9:63:98:08:f7:a8:a3:3e:19:90:fa:90:46: 14:c7:84:cf:dc:93:39:9e:49:1e:5f:c6:41:c9:eb: 9d:6e:39:e0:e0:80:92:82:c9:ec:0b:e8:89:d1:b3: a2:99:71:7b:a1:a7:d3:13:69:59:b4:31:d3:d9:1a: f6:c1:42:e8:d2:b5:e0:fc:53:77:7a:c7:a1:ee:5b: 78:5a:76:f2:b2:fd:0a:5c:28:b4:87:61:43:bb:47: 52:4e:ec:e2:7b:9b:fd:34:97:16:e2:fd:01:66:e6: 24:2f:b6:56:88:b3:c1:09:94:86:bb:9f:b4:e1:9e: df:fa:1c:a9:2a:fb:06:23:29:20:d9:a8:46:c1:33: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8A:C4:66:7D:4B:17:72:92:1A:4A:B3:81:A2:32:74:57:0C:64:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ba:23:13:43:ed:83:11:7b:f4:5a:bd:56:f4:e3:82:d8:2c: 29:50:89:61:78:e2:12:de:57:c4:5a:3a:d5:49:69:bc:6d:71: fa:dc:c6:e4:72:d5:03:01:97:6f:2d:39:31:ea:96:03:be:c0: a5:a7:35:68:45:c0:63:d9:51:c0:cb:9e:6d:04:80:80:94:b6: cd:19:2e:7f:33:2b:9f:99:7f:f7:9d:4c:b3:f9:6c:dd:5f:01: 36:cc:f1:9a:04:dd:23:ac:d4:aa:62:4e:be:4f:ef:c8:94:d9: 9d:9c:67:71:fa:f9:92:76:34:2e:8a:92:4c:cd:96:6d:ed:16: 59:c9:0e:b3:21:86:f3:b4:61:2f:61:33:34:24:dc:19:68:43: 31:c0:5f:20:6e:d3:9c:9d:88:a8:f2:4a:c9:55:10:1b:12:da: 36:71:c1:cf:d1:59:a4:01:ea:61:45:d2:f6:fe:61:a8:99:41: dd:47:79:71:17:e4:dd:7f:28:f2:80:1f:fb:76:ac:50:99:f8: 5c:d0:ba:1c:29:60:1a:1e:29:30:c3:c3:ed:93:ef:a9:e2:04: fc:e7:1a:ff:09:9e:61:e8:2b:aa:f0:0c:25:95:a0:ec:de:fb: f4:50:2f:21:24:ca:da:86:87:bf:8b:dc:d7:94:4a:a0:03:8d: 46:88:2f:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqCq0RjDGF4Q3+StoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk OTU4MGUwMTQtMTM1Ny00YzliLThjNzMtNGYwMGExODQ0YzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgftNz7d3XtQJUCC8KzGCXq1Q613p0jhpOcfU zZMiGwcliO15NCcrTsX1J3tjkw7URKfNrazsS/7ycAkuL4z7H46Xs5wvvDtdf/MZ AsKSM3zXkkH2Qj8rSY0318XT9qkyHgGHoLssdnZ9HtiMc6PIAEh8Wc7qkxKuOMlj mAj3qKM+GZD6kEYUx4TP3JM5nkkeX8ZByeudbjng4ICSgsnsC+iJ0bOimXF7oafT E2lZtDHT2Rr2wULo0rXg/FN3eseh7lt4Wnbysv0KXCi0h2FDu0dSTuzie5v9NJcW 4v0BZuYkL7ZWiLPBCZSGu5+04Z7f+hypKvsGIykg2ahGwTNOTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE6KxGZ9SxdykhpKs4GiMnRXDGTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTEwMGNjOGMtNGYxMi0z ZmYyLTllNDItZmU3M2U2M2E4ZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHC6IxND7YMRe/RavVb044LYLClQiWF44hLeV8RaOtVJabxtcfrc xuRy1QMBl28tOTHqlgO+wKWnNWhFwGPZUcDLnm0EgICUts0ZLn8zK5+Zf/edTLP5 bN1fATbM8ZoE3SOs1KpiTr5P78iU2Z2cZ3H6+ZJ2NC6KkkzNlm3tFlnJDrMhhvO0 YS9hMzQk3BloQzHAXyBu05ydiKjySslVEBsS2jZxwc/RWaQB6mFF0vb+YaiZQd1H eXEX5N1/KPKAH/t2rFCZ+FzQuhwpYBoeKTDDw+2T76niBPznGv8JnmHoK6rwDCWV oOze+/RQLyEkytqGh7+L3NeUSqADjUaIL9U= -----END CERTIFICATE-----Generated at Sat Aug 23 17:29:56 2025 by rpki-client