$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa File: ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa (raw, json) Hash identifier: 9Q2bXSQUFB/Qpn+Hbp2n9PlBdZXLHEuFF+XgWw2Y1kc= Subject key identifier: 23:99:E1:B2:48:12:88:33:00:0C:84:8C:C1:2A:13:EA:32:E5:7B:5E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CCAB834631B1AEFE335600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:ab:83:46:31:b1:ae:fe:33:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4cdd47ef-8b2f-4ad4-897a-2e5d0d5d7064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:6b:03:2e:fd:e7:56:e8:d7:dc:bc:34:17: 95:e3:d6:ff:63:12:f4:35:f9:5d:69:12:63:e2:5f: 8e:6b:ef:cf:ff:76:26:d0:70:d8:64:40:c6:0f:28: bf:51:cf:46:5a:53:b5:06:42:c4:a0:29:3b:15:04: 9e:cc:ce:d2:50:70:f2:af:58:0b:09:b8:03:41:ee: 23:73:ac:d3:07:25:a8:1e:8e:fb:0f:35:c9:60:00: df:13:64:7f:91:a7:4b:8f:34:f5:b6:24:eb:21:ba: fd:d7:96:c2:f0:77:1c:12:a1:46:62:48:af:3f:8a: a0:ea:f8:34:53:d5:3d:44:d9:c6:68:89:de:89:ca: 59:91:e5:f5:60:50:17:50:cb:04:ea:05:b1:2e:b2: e9:fc:a6:d3:24:68:97:1e:13:99:e3:79:cd:91:00: 7d:3d:f8:2a:4d:10:c5:13:18:70:06:aa:3f:04:e3: 6d:64:58:b9:21:80:48:38:ae:34:9b:9f:5d:d5:19: 4e:93:ca:fd:d1:42:01:eb:95:c8:35:ae:4c:36:01: 5c:b5:e8:68:c4:f2:41:95:fd:ff:c2:b9:98:95:6b: 08:e0:4d:a0:85:6f:ec:5e:7d:e4:e9:17:f2:81:2b: 20:4f:ef:21:37:1b:62:5c:c7:4a:41:8a:93:8c:39: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:99:E1:B2:48:12:88:33:00:0C:84:8C:C1:2A:13:EA:32:E5:7B:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b2:1e:d0:80:14:39:20:b2:da:48:87:15:21:89:c3:8d:73: 29:de:1c:67:95:d8:f3:83:7c:8b:14:8b:65:28:98:64:21:cc: 95:16:e1:5d:a7:db:c3:5f:fe:9d:7f:fc:3e:03:8e:19:9e:e7: 07:73:7a:45:2b:82:fa:93:9c:5f:1c:37:fc:a6:da:be:91:08: db:f6:54:73:6d:93:a2:67:2d:f9:74:5b:41:9f:fe:c4:58:29: 56:ec:20:03:a7:46:48:0e:10:ee:c6:eb:85:93:69:14:ff:6d: bb:7b:21:a2:64:89:59:08:f1:52:0d:14:4c:92:03:20:da:3b: 40:d5:e2:a7:09:cc:fe:18:16:3e:43:8e:87:7d:50:da:4e:b8: 82:74:ff:e3:d2:97:4c:f4:3f:20:0f:2d:72:35:fc:04:8c:30: 47:33:a6:72:5b:75:67:3c:54:c4:61:1d:e0:b4:8b:4f:9d:26: dc:ca:7f:ea:9b:ff:0b:af:d7:14:2d:5a:ed:30:9a:70:aa:2b: 1e:d1:8b:10:91:b1:3a:ff:3d:e8:6b:0d:e1:18:e4:5d:fa:68: b2:bb:7f:ed:a4:81:86:64:11:26:a8:01:28:8c:97:8d:67:31: 79:94:bc:93:55:4e:6c:f5:66:2f:63:c7:aa:9d:fb:c0:45:71: 98:70:16:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzKuDRjGxrv4zVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGNkZDQ3ZWYtOGIyZi00YWQ0LTg5N2EtMmU1ZDBkNWQ3MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE1rAy7951bo19y8NBeV49b/YxL0NfldaRJj 4l+Oa+/P/3Ym0HDYZEDGDyi/Uc9GWlO1BkLEoCk7FQSezM7SUHDyr1gLCbgDQe4j c6zTByWoHo77DzXJYADfE2R/kadLjzT1tiTrIbr915bC8HccEqFGYkivP4qg6vg0 U9U9RNnGaIneicpZkeX1YFAXUMsE6gWxLrLp/KbTJGiXHhOZ43nNkQB9PfgqTRDF ExhwBqo/BONtZFi5IYBIOK40m59d1RlOk8r90UIB65XINa5MNgFctehoxPJBlf3/ wrmYlWsI4E2ghW/sXn3k6RfygSsgT+8hNxtiXMdKQYqTjDmWzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCOZ4bJIEogzAAyEjMEqE+oy5XteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2U1Y2M5NjgtYzU5Zi0z MzZkLWFlZWEtMDllNzNjZjIyZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFeyHtCAFDkgstpIhxUhicONcyneHGeV2PODfIsUi2UomGQhzJUW 4V2n28Nf/p1//D4Djhme5wdzekUrgvqTnF8cN/ym2r6RCNv2VHNtk6JnLfl0W0Gf /sRYKVbsIAOnRkgOEO7G64WTaRT/bbt7IaJkiVkI8VINFEySAyDaO0DV4qcJzP4Y Fj5Djod9UNpOuIJ0/+PSl0z0PyAPLXI1/ASMMEczpnJbdWc8VMRhHeC0i0+dJtzK f+qb/wuv1xQtWu0wmnCqKx7RixCRsTr/PehrDeEY5F36aLK7f+2kgYZkESaoASiM l41nMXmUvJNVTmz1Zi9jx6qd+8BFcZhwFgI= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:42 2025 by rpki-client