$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e109de6d-8211-3cfd-890e-cf8ec51922e0.roa File: e109de6d-8211-3cfd-890e-cf8ec51922e0.roa (raw, json) Hash identifier: PcS0fAPcsdyeRi5XXCilzBJaAMYY/zo7ZbbeMKF+T7o= Subject key identifier: 73:04:0F:EA:2A:15:93:14:C5:06:1B:B8:7A:A1:0C:91:D5:9B:7D:DD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE3D9B0484CF4DEDE45F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e109de6d-8211-3cfd-890e-cf8ec51922e0.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:3d:9b:04:84:cf:4d:ed:e4:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bda663d4-a17a-4e6f-ab8f-b07555a74691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:5f:79:25:63:24:6d:1b:ca:f2:33:66:50: 27:e2:85:9a:c4:e6:b5:f2:0c:de:b5:d6:f3:9b:ef: 39:07:94:62:a5:bf:78:d8:13:3e:4e:ea:54:f6:35: aa:9e:c9:0d:b3:12:2a:25:cf:f2:dc:a4:28:c0:e7: c3:56:7a:ff:08:19:18:17:ad:dc:f4:a0:8a:38:d1: ed:fb:78:cd:95:23:2d:e9:ff:d8:e8:79:a0:83:f5: 6c:3f:29:33:f5:f0:c6:91:84:f7:da:b4:67:86:a4: 67:14:b6:35:f1:57:51:af:52:46:1b:62:be:85:66: 82:88:4e:c8:95:ec:b3:94:bf:0c:9a:c3:83:64:89: bd:d0:7d:0b:6c:43:39:c3:6e:de:23:f0:15:c2:28: 5a:f1:6e:8f:b4:14:eb:92:c1:b2:d2:7c:4e:9b:51: 28:2d:8e:a2:18:1d:77:7d:5b:5d:6c:80:7f:80:d9: 85:58:24:5c:9e:6f:00:d3:a4:e2:9c:b6:90:a6:bf: 1d:c2:af:6b:83:36:a4:ba:f3:f4:24:fb:a5:4f:d0: 6b:91:b2:ff:64:3e:0b:7b:95:a8:83:c0:9c:9e:e0: b0:f2:3e:49:0e:ac:b2:75:14:1a:60:93:72:98:68: 36:0f:5f:1e:4e:d3:d3:df:ea:c8:2a:b4:96:e8:f7: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:04:0F:EA:2A:15:93:14:C5:06:1B:B8:7A:A1:0C:91:D5:9B:7D:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e109de6d-8211-3cfd-890e-cf8ec51922e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4c:b6:c8:c7:68:91:96:f8:fa:cf:3d:a3:b9:80:92:c1:25: 4a:66:aa:e5:a0:51:a1:48:99:f6:6b:ff:2d:04:57:72:3c:00: b1:d3:85:a5:27:07:20:74:ad:67:f2:e6:38:a5:63:c2:07:6a: d4:5b:c4:98:19:d6:23:cb:fb:68:4c:4c:88:15:68:84:20:c0: 37:63:68:97:52:63:7f:76:3a:8b:3f:8c:51:e4:6d:b9:92:99: e2:44:4c:86:a6:69:3d:3b:6a:8a:9d:c6:a1:93:31:24:a2:62: 69:4d:6f:64:84:c7:1c:d9:84:6d:c2:8b:58:58:d9:7d:67:e3: 9a:71:fb:73:93:d8:e7:f5:4c:32:9b:9e:14:ea:fc:dc:62:5b: e8:be:a7:97:c6:0a:82:79:70:8c:88:b8:69:78:38:fc:d7:18: 0b:91:6c:62:f1:95:b6:5d:af:0f:31:5c:9e:80:f2:0f:c6:88: c6:f4:5e:78:96:71:7d:1c:e2:a0:0a:c2:fe:d4:26:91:bc:e1: 2a:c7:2b:f7:93:00:f1:be:ea:97:f6:eb:56:37:7d:ca:5c:5d: 51:af:bf:98:f1:28:da:5e:85:10:01:b4:de:37:b0:42:08:23: 27:4d:2f:f7:46:eb:12:c8:f5:99:19:11:e2:fc:75:c7:2d:d8: ff:31:4d:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzj2bBITPTe3kXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmRhNjYzZDQtYTE3YS00ZTZmLWFiOGYtYjA3NTU1YTc0NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrpfeSVjJG0byvIzZlAn4oWaxOa18gzetdbz m+85B5Ripb942BM+TupU9jWqnskNsxIqJc/y3KQowOfDVnr/CBkYF63c9KCKONHt +3jNlSMt6f/Y6Hmgg/VsPykz9fDGkYT32rRnhqRnFLY18VdRr1JGG2K+hWaCiE7I leyzlL8MmsODZIm90H0LbEM5w27eI/AVwiha8W6PtBTrksGy0nxOm1EoLY6iGB13 fVtdbIB/gNmFWCRcnm8A06TinLaQpr8dwq9rgzakuvP0JPulT9BrkbL/ZD4Le5Wo g8CcnuCw8j5JDqyydRQaYJNymGg2D18eTtPT3+rIKrSW6PdfMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHMED+oqFZMUxQYbuHqhDJHVm33dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTEwOWRlNmQtODIxMS0z Y2ZkLTg5MGUtY2Y4ZWM1MTkyMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGFMtsjHaJGW+PrPPaO5gJLBJUpmquWgUaFImfZr/y0EV3I8ALHT haUnByB0rWfy5jilY8IHatRbxJgZ1iPL+2hMTIgVaIQgwDdjaJdSY392Oos/jFHk bbmSmeJETIamaT07aoqdxqGTMSSiYmlNb2SExxzZhG3Ci1hY2X1n45px+3OT2Of1 TDKbnhTq/NxiW+i+p5fGCoJ5cIyIuGl4OPzXGAuRbGLxlbZdrw8xXJ6A8g/GiMb0 XniWcX0c4qAKwv7UJpG84SrHK/eTAPG+6pf261Y3fcpcXVGvv5jxKNpehRABtN43 sEIIIydNL/dG6xLI9ZkZEeL8dcct2P8xTcY= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:43 2025 by rpki-client