$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa File: f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa (raw, json) Hash identifier: bL1Q12MovgZob3zJ+W1qesTUFyTJKAkOU7Aggn4wvcA= Subject key identifier: F1:41:B7:27:CA:D9:07:39:9F:06:CC:28:C6:6A:4E:15:1D:F6:6D:01 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B8EAD0A4679A18DDB64626EC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13901 IP address blocks: 2001:500:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:0a:46:79:a1:8d:db:64:62:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=c13ee931-126b-4d27-b663-b84d26da9085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:2e:95:e4:f5:8f:38:99:2b:20:9b:fb:9a: 2a:89:2b:5d:c4:db:0d:c7:58:0d:f3:a7:ef:63:64: 4d:a3:31:5e:fb:e9:8c:83:7f:53:e7:52:d9:ff:1b: 8e:b7:7d:94:18:73:e2:c5:cd:ad:67:78:1b:fc:93: dd:bd:a7:8c:20:a2:6a:66:db:1c:66:d9:d5:22:f0: f6:ca:16:83:d0:bf:73:ef:d7:62:10:d3:3b:c5:8e: ff:be:5d:7d:30:14:69:5c:74:7e:62:90:b0:3b:3d: 83:07:6c:43:66:50:5c:38:b8:d4:ca:54:e0:67:77: 68:49:be:e7:7d:ec:49:e7:94:76:d5:cd:68:72:eb: cf:7b:ac:bb:c5:b1:4d:aa:b1:2b:68:a7:c0:36:21: 76:6d:d6:e5:c4:d8:4a:db:a4:0b:82:16:5b:6f:14: e5:f9:fe:f8:df:6b:2f:ec:ad:90:f8:06:c6:7d:f6: 28:48:c8:5f:d1:56:07:5c:42:87:71:28:bd:39:fe: 23:36:26:0d:d7:3f:14:d5:9c:98:c9:67:2b:33:1c: fb:df:10:44:43:e5:f1:2c:ea:6d:86:6b:76:a2:d4: 77:ff:c8:22:2d:ef:3a:66:2c:24:d7:96:76:a8:70: 61:62:b8:48:46:06:c3:6e:88:24:b8:31:c1:06:7f: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:41:B7:27:CA:D9:07:39:9F:06:CC:28:C6:6A:4E:15:1D:F6:6D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:53:ee:fc:e0:5d:f5:a8:7d:c2:fb:0c:8f:0b:42:5c:f4:54: ab:23:a0:0c:48:ce:e2:f5:27:e8:c6:27:3b:a3:00:e1:ec:d8: ac:4f:2e:cb:84:4d:40:56:92:2c:d4:7b:e9:47:ab:6e:9d:6b: d1:a2:08:bc:1b:e7:ae:df:48:6d:30:56:0c:82:37:23:bd:60: 60:c2:57:ee:88:3b:b8:e6:31:35:f0:18:34:4f:d2:82:6a:7c: 67:6e:88:a1:1e:bf:0d:f1:62:e0:67:1f:6d:cc:b2:29:96:8e: 0f:52:27:3b:fc:ee:34:c9:f2:da:c8:c2:7c:9d:64:be:28:a2: c5:3a:f9:e5:06:32:94:4c:74:6e:cc:66:04:90:86:61:0a:85: 0e:fa:10:92:01:d2:76:60:9e:ed:ec:3c:16:7f:c2:9a:d5:d9: 50:93:e0:af:c6:2c:a3:9a:43:59:71:60:61:08:80:ea:ef:1a: 5d:da:2c:db:4c:69:50:e9:45:a6:d6:bf:25:6e:d6:8e:77:6c: f1:9e:1e:85:84:61:17:d5:d4:20:44:c3:8a:eb:eb:08:5d:3c: fc:6f:44:32:cc:42:64:e9:c2:fd:3c:a5:98:c7:42:ca:20:d7: d2:d2:e5:83:89:d6:11:f1:0b:e5:64:71:c8:9f:66:18:f4:ed: ea:f7:07:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrQpGeaGN22RibsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YzEzZWU5MzEtMTI2Yi00ZDI3LWI2NjMtYjg0ZDI2ZGE5MDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomouleT1jziZKyCb+5oqiStdxNsNx1gN86fv Y2RNozFe++mMg39T51LZ/xuOt32UGHPixc2tZ3gb/JPdvaeMIKJqZtscZtnVIvD2 yhaD0L9z79diENM7xY7/vl19MBRpXHR+YpCwOz2DB2xDZlBcOLjUylTgZ3doSb7n fexJ55R21c1ocuvPe6y7xbFNqrEraKfANiF2bdblxNhK26QLghZbbxTl+f7432sv 7K2Q+AbGffYoSMhf0VYHXEKHcSi9Of4jNiYN1z8U1ZyYyWcrMxz73xBEQ+XxLOpt hmt2otR3/8giLe86Ziwk15Z2qHBhYrhIRgbDbogkuDHBBn9cyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPFBtyfK2Qc5nwbMKMZqThUd9m0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjBhNjQyNjYtZmFmZS0z NTUzLThiYjEtODliYjljMWE3M2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAElT7vzgXfWofcL7DI8LQlz0VKsjoAxIzuL1J+jGJzujAOHs2KxP LsuETUBWkizUe+lHq26da9GiCLwb567fSG0wVgyCNyO9YGDCV+6IO7jmMTXwGDRP 0oJqfGduiKEevw3xYuBnH23MsimWjg9SJzv87jTJ8trIwnydZL4oosU6+eUGMpRM dG7MZgSQhmEKhQ76EJIB0nZgnu3sPBZ/wprV2VCT4K/GLKOaQ1lxYGEIgOrvGl3a LNtMaVDpRabWvyVu1o53bPGeHoWEYRfV1CBEw4rr6whdPPxvRDLMQmTpwv08pZjH Qsog19LS5YOJ1hHxC+VkccifZhj07er3B+4= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:33 2025 by rpki-client