$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa File: 00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa (raw, json) Hash identifier: SnWJjC/2FYmAFDVVCqIe8S5jP8UtDvKArIeigQ4ie4c= Subject key identifier: 82:03:D6:2C:92:55:36:1E:42:41:1D:4D:EA:2E:CC:82:3B:1E:E5:33 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49737F9C313B9FA353588B20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:d5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:7f:9c:31:3b:9f:a3:53:58:8b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b38c54fa-1cea-42b9-ad11-ae73880afb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a6:76:17:19:d3:ac:80:c7:12:a4:17:55:6c: 0f:64:d1:a4:04:06:5a:bc:8b:99:90:06:ac:17:ea: 85:45:a3:59:a8:45:5e:b9:b7:6d:60:bc:db:b0:d1: 22:be:99:19:90:aa:1c:d0:61:16:13:33:18:5e:7b: 48:2b:3c:a2:90:5d:43:df:ba:c3:6e:0d:1b:3b:19: 9d:be:25:e6:59:f0:9d:9d:d6:ca:23:6b:74:c0:59: e0:bc:5f:7a:a6:14:39:79:50:44:ed:de:c4:9a:9a: 2d:1a:44:63:b8:82:19:4c:75:97:c6:6b:e6:cb:ee: 3f:4c:61:c6:1c:90:c9:5e:52:6b:d6:e0:5e:70:4f: 26:ab:41:90:97:e8:90:d4:5a:c6:2d:2d:82:0a:55: 62:0c:3b:13:60:74:08:02:1c:bc:88:64:48:c6:7b: e7:9f:d0:46:03:05:44:ec:71:ea:64:5c:8c:1f:4f: de:ad:49:d6:f9:e2:41:65:db:d2:33:c6:6a:07:46: 9b:33:c2:a5:e6:c5:b2:74:44:e4:44:f9:65:cb:a9: 7c:92:71:56:8b:d5:70:88:05:ff:16:e2:9e:88:fe: 4a:8f:6d:de:32:47:06:55:dc:c4:96:3f:ef:40:ca: 8f:9d:7a:e1:25:19:01:e5:c6:fb:9e:42:e7:20:15: 43:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:03:D6:2C:92:55:36:1E:42:41:1D:4D:EA:2E:CC:82:3B:1E:E5:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:be:62:e3:e3:6d:c6:bf:64:54:e4:13:2b:7c:85:f1:ff:5b: d4:b7:9a:fc:8b:7f:d8:98:8b:3a:81:87:9b:91:bf:2e:83:dd: 69:27:00:2b:69:db:a1:33:3d:b8:05:8f:e6:93:92:7a:db:0a: 99:46:a0:df:8f:fc:b3:28:17:3c:b7:bb:fb:a0:88:30:26:30: 2e:b2:9c:01:0b:73:a6:30:e9:ba:1c:3d:7c:70:51:ea:ce:a1: 28:83:44:58:de:10:3b:33:1d:17:e5:94:05:6e:01:f5:50:47: e8:3d:c4:66:e0:98:e1:85:f4:93:e4:6e:1f:6e:05:28:33:b4: 1e:99:be:07:8f:98:01:e0:de:c8:ed:97:83:2c:f4:75:50:08: 3c:b6:5d:e5:07:ea:f9:7c:87:2d:83:49:4a:e8:f4:4c:a8:fc: ad:8d:1e:3e:87:ee:d5:b7:f5:e8:ba:ca:77:ac:a1:23:81:73: 15:6a:74:1b:49:ce:2f:fa:21:59:15:7a:3f:20:2a:54:19:44: 99:3f:86:7d:6a:02:e7:10:86:86:ee:32:c6:65:46:6c:af:23: b6:8a:0f:04:ee:48:28:66:5c:67:d4:e5:eb:23:26:c1:74:9f: 60:43:d4:03:d9:99:cd:9a:a4:37:5f:b1:16:88:e1:32:0a:5b: cd:68:9a:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc3+cMTufo1NYiyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjM4YzU0ZmEtMWNlYS00MmI5LWFkMTEtYWU3Mzg4MGFmYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36Z2FxnTrIDHEqQXVWwPZNGkBAZavIuZkAas F+qFRaNZqEVeubdtYLzbsNEivpkZkKoc0GEWEzMYXntIKzyikF1D37rDbg0bOxmd viXmWfCdndbKI2t0wFngvF96phQ5eVBE7d7EmpotGkRjuIIZTHWXxmvmy+4/TGHG HJDJXlJr1uBecE8mq0GQl+iQ1FrGLS2CClViDDsTYHQIAhy8iGRIxnvnn9BGAwVE 7HHqZFyMH0/erUnW+eJBZdvSM8ZqB0abM8Kl5sWydETkRPlly6l8knFWi9VwiAX/ FuKeiP5Kj23eMkcGVdzElj/vQMqPnXrhJRkB5cb7nkLnIBVDGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIID1iySVTYeQkEdTeouzII7HuUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDA3ODdmOGMtY2RjOS0z Y2IzLWE0YmUtMmY0NzhiYzFkMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADq+YuPjbca/ZFTkEyt8hfH/W9S3mvyLf9iYizqBh5uRvy6D3Wkn ACtp26EzPbgFj+aTknrbCplGoN+P/LMoFzy3u/ugiDAmMC6ynAELc6Yw6bocPXxw UerOoSiDRFjeEDszHRfllAVuAfVQR+g9xGbgmOGF9JPkbh9uBSgztB6ZvgePmAHg 3sjtl4Ms9HVQCDy2XeUH6vl8hy2DSUro9Eyo/K2NHj6H7tW39ei6ynesoSOBcxVq dBtJzi/6IVkVej8gKlQZRJk/hn1qAucQhobuMsZlRmyvI7aKDwTuSChmXGfU5esj JsF0n2BD1APZmc2apDdfsRaI4TIKW81omoo= -----END CERTIFICATE-----Generated at Fri Sep 25 17:45:14 2026 by rpki-client