$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c8535d2c-b861-3ef0-8198-d791a7698275.roa File: c8535d2c-b861-3ef0-8198-d791a7698275.roa (raw, json) Hash identifier: j8skvy+n77oo2kZVzYM9BnBFilEG168g1HhQ7OQ8Qj4= Subject key identifier: 6B:5D:4E:12:82:BD:24:34:D4:26:43:36:48:18:CE:AB:AB:AB:23:29 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CC94382AA397B795A38C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c8535d2c-b861-3ef0-8198-d791a7698275.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:94:38:2a:a3:97:b7:95:a3:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e66d7bc3-3cb1-4186-a791-7eacff997b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:32:54:01:75:2e:0c:bf:4f:8a:77:d0:a4: ac:4c:da:61:68:09:92:2f:02:22:3c:55:77:18:70: b5:1b:ce:be:bd:76:88:f8:4d:13:e2:79:34:67:57: e5:8d:95:40:2b:06:57:9c:7b:0e:46:14:ab:0e:34: 3c:d1:e1:b7:b4:2b:ca:3c:ba:3c:7a:79:6b:39:db: 4e:b8:d5:87:71:9a:02:69:f7:26:b3:ac:b1:cd:ac: a1:b1:f9:05:51:f3:55:d8:22:e8:c1:cd:13:29:ab: c4:d5:b8:ab:9f:f3:a5:f5:4e:69:75:72:01:c9:9e: f3:74:d7:ae:5c:6c:16:bf:a5:96:f9:b2:41:46:31: c7:36:35:93:b8:a5:82:91:f7:e9:df:d8:8a:a5:73: 85:d0:f7:be:8d:7a:22:e8:85:90:ae:30:cf:38:42: 91:f8:59:fc:31:b3:e5:45:9f:42:67:0d:45:52:51: df:1c:75:35:de:62:71:9d:e9:8a:ae:5d:91:85:08: 27:b4:1d:58:4e:f6:83:c9:90:93:e5:6e:41:d0:86: 07:07:0a:ed:97:aa:09:d3:5f:75:5b:3e:9c:55:b7: 51:ad:10:d6:57:48:31:4f:90:2a:ad:30:1e:2b:94: a4:0f:a1:d2:b5:b0:a6:3b:1f:41:9f:f4:89:53:e7: ea:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5D:4E:12:82:BD:24:34:D4:26:43:36:48:18:CE:AB:AB:AB:23:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c8535d2c-b861-3ef0-8198-d791a7698275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:45:5d:e6:55:a8:3f:ef:ed:a8:1f:62:8a:aa:20:31:04:0c: 55:c4:6f:44:c9:42:5f:37:bd:a7:19:1f:9e:9e:47:0e:2f:e6: cd:1a:6b:d7:1f:27:20:74:05:0a:c6:b9:8f:58:e3:a8:23:fe: b1:6c:21:a8:c1:e9:41:d6:fb:cf:15:13:26:d4:10:0a:13:c5: 51:92:c5:9a:8f:62:0f:93:0b:c1:97:7d:ca:ed:73:58:1f:34: b8:a1:05:42:92:15:12:59:df:6e:75:81:da:4b:ed:e7:35:4b: 9b:c8:2a:ae:49:b1:87:04:ac:e6:9e:ee:e7:f3:ec:5b:34:f2: 80:34:ae:00:54:96:21:87:52:fa:11:af:84:fb:1e:3a:4b:a5: 9d:9b:ae:0e:5f:4e:8e:ac:2a:38:6d:04:ef:b5:25:6d:f5:8c: 15:c5:cc:da:5b:5a:29:ae:d6:7d:0b:d5:18:50:88:c5:dd:51: be:78:93:49:1c:1d:76:d8:a6:45:47:8d:d1:7b:99:90:4a:ee: c1:9f:0d:17:53:01:75:64:0c:4e:1b:e4:5b:69:2f:69:55:c3: c0:b1:a2:74:b5:cc:a7:18:8d:c7:e8:c3:4f:65:56:65:8d:93: dd:b0:5a:23:a4:4e:58:18:39:c7:e7:32:9d:e7:e1:65:59:71: c9:3f:d6:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzJQ4KqOXt5WjjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTY2ZDdiYzMtM2NiMS00MTg2LWE3OTEtN2VhY2ZmOTk3Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSgyVAF1Lgy/T4p30KSsTNphaAmSLwIiPFV3 GHC1G86+vXaI+E0T4nk0Z1fljZVAKwZXnHsORhSrDjQ80eG3tCvKPLo8enlrOdtO uNWHcZoCafcms6yxzayhsfkFUfNV2CLowc0TKavE1birn/Ol9U5pdXIByZ7zdNeu XGwWv6WW+bJBRjHHNjWTuKWCkffp39iKpXOF0Pe+jXoi6IWQrjDPOEKR+Fn8MbPl RZ9CZw1FUlHfHHU13mJxnemKrl2RhQgntB1YTvaDyZCT5W5B0IYHBwrtl6oJ0191 Wz6cVbdRrRDWV0gxT5AqrTAeK5SkD6HStbCmOx9Bn/SJU+fqXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGtdThKCvSQ01CZDNkgYzqurqyMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzg1MzVkMmMtYjg2MS0z ZWYwLTgxOTgtZDc5MWE3Njk4Mjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB1FXeZVqD/v7agfYoqqIDEEDFXEb0TJQl83vacZH56eRw4v5s0a a9cfJyB0BQrGuY9Y46gj/rFsIajB6UHW+88VEybUEAoTxVGSxZqPYg+TC8GXfcrt c1gfNLihBUKSFRJZ3251gdpL7ec1S5vIKq5JsYcErOae7ufz7Fs08oA0rgBUliGH UvoRr4T7HjpLpZ2brg5fTo6sKjhtBO+1JW31jBXFzNpbWimu1n0L1RhQiMXdUb54 k0kcHXbYpkVHjdF7mZBK7sGfDRdTAXVkDE4b5FtpL2lVw8CxonS1zKcYjcfow09l VmWNk92wWiOkTlgYOcfnMp3n4WVZcck/1gE= -----END CERTIFICATE-----Generated at Tue Oct 21 09:17:29 2025 by rpki-client