$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa File: d9cef5d4-90dd-347d-bc06-d594b04e0496.roa (raw, json) Hash identifier: OX4LTVlhSTzAp278dnLLQwA/2o3J7JB7e3x4GrSprrQ= Subject key identifier: 52:4C:4F:57:30:03:BD:B1:B9:E0:0B:71:B6:C4:EB:C0:D8:69:DE:03 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CC9C79D1CB59AA66063F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:9c:79:d1:cb:59:aa:66:06:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ec83d13e-c503-40d6-94e7-08250011208e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:6f:c8:e1:ab:2c:0f:1e:eb:8a:6a:7f:29: 43:f2:bb:a2:0a:63:56:ec:b9:ae:92:79:83:d0:0c: 0e:46:b3:c1:63:2f:cd:ce:9d:90:12:dd:71:93:62: 40:51:1f:9e:92:ef:fa:98:3c:9e:a4:ca:9f:02:da: 2d:7a:09:e7:45:2a:56:06:be:29:17:79:97:91:4e: 84:57:4f:9c:36:cc:b8:51:63:87:48:2b:15:0b:6c: fe:12:56:41:43:8b:54:17:2a:bd:6d:dc:db:b7:8b: 77:57:94:de:df:ee:a9:07:a0:56:c4:10:56:f8:ce: f8:18:db:f3:aa:a7:ad:5c:2c:d4:7d:a8:21:ff:39: d2:a1:61:1d:5c:26:92:b1:83:20:7a:7e:49:0c:79: 69:ad:68:12:a7:f6:62:d8:50:0c:6b:7c:7b:13:64: f7:02:cf:82:3c:47:f9:98:c5:91:c5:54:92:23:11: e0:79:e5:82:a7:29:21:2d:60:a1:6e:ac:fe:14:5d: ca:6c:b2:ff:24:de:b0:c5:78:f5:cb:26:1e:49:fd: d6:a8:92:eb:c4:30:b4:27:58:be:b1:4c:8f:43:59: 55:e4:34:21:93:e8:b2:10:8a:d8:d3:60:1d:22:0d: 6b:b0:9a:ec:ba:0c:be:54:a1:e2:be:9a:bc:37:b7: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4C:4F:57:30:03:BD:B1:B9:E0:0B:71:B6:C4:EB:C0:D8:69:DE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:db:35:44:3c:4a:bf:cf:a5:73:6a:26:bd:92:56:07:a9:15: 34:62:a4:8f:dc:86:10:ea:94:a1:01:29:3b:b2:3c:90:87:2d: 7b:0a:09:ef:17:20:ae:c6:03:6b:2e:a4:40:59:77:b1:0e:d6: 2c:b4:bd:70:e6:6d:4c:dc:bc:39:cf:c7:ec:26:8f:db:1d:a5: 17:2c:a9:71:06:9f:10:07:cc:76:f9:d8:2f:0f:54:26:b3:05: b6:06:2f:07:e1:eb:5b:0c:a7:17:7f:af:fb:ac:e0:8b:1a:86: 37:f3:b9:64:9e:1b:de:60:54:e1:d3:42:bb:c1:8a:a6:c2:c9: bb:c2:2b:ca:b7:30:ff:a2:01:a0:d0:14:b4:07:70:07:64:a8: d9:85:9b:55:83:2d:4e:2a:da:fd:66:f1:86:89:5b:b9:97:20: 3d:f4:20:c6:86:f3:08:1c:e6:ef:c2:c1:08:77:f7:aa:67:99: 5c:b5:f3:b7:70:aa:f3:d9:65:1f:7f:6f:28:22:40:64:18:22: 0c:28:de:01:fc:8d:d0:6c:6b:18:03:bb:02:89:01:87:b5:d0: 1a:a5:e4:99:b1:2c:c0:a3:bd:78:27:f3:7f:d5:d6:19:0c:79: 5b:58:46:b6:1b:9d:6b:27:7c:b2:48:75:13:cc:fc:81:4c:ad: 7e:85:2c:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzJx50ctZqmYGP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWM4M2QxM2UtYzUwMy00MGQ2LTk0ZTctMDgyNTAwMTEyMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5FvyOGrLA8e64pqfylD8ruiCmNW7LmuknmD 0AwORrPBYy/Nzp2QEt1xk2JAUR+eku/6mDyepMqfAtotegnnRSpWBr4pF3mXkU6E V0+cNsy4UWOHSCsVC2z+ElZBQ4tUFyq9bdzbt4t3V5Te3+6pB6BWxBBW+M74GNvz qqetXCzUfagh/znSoWEdXCaSsYMgen5JDHlprWgSp/Zi2FAMa3x7E2T3As+CPEf5 mMWRxVSSIxHgeeWCpykhLWChbqz+FF3KbLL/JN6wxXj1yyYeSf3WqJLrxDC0J1i+ sUyPQ1lV5DQhk+iyEIrY02AdIg1rsJrsugy+VKHivpq8N7eMzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJMT1cwA72xueALcbbE68DYad4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDljZWY1ZDQtOTBkZC0z NDdkLWJjMDYtZDU5NGIwNGUwNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADXbNUQ8Sr/PpXNqJr2SVgepFTRipI/chhDqlKEBKTuyPJCHLXsK Ce8XIK7GA2supEBZd7EO1iy0vXDmbUzcvDnPx+wmj9sdpRcsqXEGnxAHzHb52C8P VCazBbYGLwfh61sMpxd/r/us4IsahjfzuWSeG95gVOHTQrvBiqbCybvCK8q3MP+i AaDQFLQHcAdkqNmFm1WDLU4q2v1m8YaJW7mXID30IMaG8wgc5u/CwQh396pnmVy1 87dwqvPZZR9/bygiQGQYIgwo3gH8jdBsaxgDuwKJAYe10Bql5JmxLMCjvXgn83/V 1hkMeVtYRrYbnWsnfLJIdRPM/IFMrX6FLA4= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:42 2025 by rpki-client