$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00930ea6-c1a0-34d7-bdf4-25cc53f2403c.roa File: 00930ea6-c1a0-34d7-bdf4-25cc53f2403c.roa (raw, json) Hash identifier: ISXEWQiYHbaNaUUCYiBG4jiWR/r1QY1m0iVHZ98xGfg= Subject key identifier: 82:BC:5A:46:AA:57:42:25:0F:D7:FC:33:D6:81:DD:14:BF:A5:3E:ED Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974DD835D9C3D8B0F578940 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00930ea6-c1a0-34d7-bdf4-25cc53f2403c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:dd:83:5d:9c:3d:8b:0f:57:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4bf3d43f-7fd3-48eb-b40a-e6ad0deebf6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:76:16:7e:26:40:7a:41:85:ef:05:c0:17:99: da:67:60:9c:59:fd:14:d4:b1:77:9a:23:d0:3d:03: b2:c1:a4:c8:07:fa:f9:20:38:a3:98:a1:d1:6a:5e: 14:d6:06:aa:08:49:22:c5:d1:32:b6:cc:78:dc:b9: e8:42:ad:7d:d0:24:31:db:ee:de:ab:19:82:c6:db: a3:5b:d0:24:62:0d:12:38:34:da:9a:31:c6:8f:30: c0:01:ae:d1:fa:51:d6:e4:42:a7:45:06:af:4e:01: 5f:83:60:9e:41:8a:df:a5:34:fe:e1:6e:8c:69:f7: e7:5c:bc:57:62:11:9b:5e:86:dd:d0:a5:9f:35:44: 40:b8:67:00:35:f1:24:3e:05:9d:24:14:fe:4c:1d: 84:cc:83:e6:7e:9e:ea:10:19:bc:e4:19:3c:f6:34: ab:b8:4d:91:cf:bd:68:b5:7f:d6:1f:de:81:35:dd: 20:69:9c:76:53:fe:9d:c8:6e:e8:0c:8b:03:bb:e8: 4c:04:82:da:9d:78:53:b9:b5:c6:57:1b:0b:f9:a6: f6:89:de:e8:56:de:ae:25:04:ef:99:a2:56:d8:10: bc:82:0b:43:8c:22:3d:40:ea:dc:76:76:f5:bb:ec: ed:1a:02:8b:8a:5c:34:50:0e:b0:62:fb:1e:7a:09: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BC:5A:46:AA:57:42:25:0F:D7:FC:33:D6:81:DD:14:BF:A5:3E:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00930ea6-c1a0-34d7-bdf4-25cc53f2403c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:bc:f4:f0:21:03:27:7f:17:fb:31:60:cb:74:e5:fa:a3:c7: e1:37:12:b2:56:64:97:18:61:cb:69:c6:50:ad:db:cc:9f:2a: 26:3a:67:c0:fd:ea:1b:e9:56:79:0c:b4:95:96:73:25:35:7e: 02:ee:9f:55:66:db:33:ab:63:43:1a:8b:22:4a:aa:3c:d6:be: 0c:21:b1:49:e1:4a:f2:13:b4:96:01:de:d6:47:18:07:79:07: 89:33:69:dc:a9:ee:a8:81:09:7c:ac:aa:0b:8a:f5:41:24:99: 1b:64:c5:22:22:7e:f0:0a:d1:85:c6:2a:d4:59:83:38:fc:1f: 7f:0c:44:ca:0a:5c:62:48:4e:c5:32:f7:dd:99:2f:60:99:20: 49:71:6b:d3:74:b5:7d:45:c5:9e:7f:b6:38:3d:e1:49:ff:1f: fc:89:1a:01:40:72:47:8a:4a:1a:34:c4:de:e5:f4:a9:c2:4a: c4:3b:ef:3d:90:8a:21:d0:04:d9:d7:1c:5b:d3:97:7e:f6:39: 50:2c:2c:4b:3b:fe:25:d0:c8:b8:a3:0a:87:65:51:34:36:0f: 73:bd:bc:6a:64:f9:88:fd:91:49:8f:71:1a:38:57:fe:06:60: ef:8d:38:51:fe:21:89:25:29:6a:30:0a:37:ad:c1:dc:f8:8b: 62:ab:01:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdN2DXZw9iw9XiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJmM2Q0M2YtN2ZkMy00OGViLWI0MGEtZTZhZDBkZWViZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33YWfiZAekGF7wXAF5naZ2CcWf0U1LF3miPQ PQOywaTIB/r5IDijmKHRal4U1gaqCEkixdEytsx43LnoQq190CQx2+7eqxmCxtuj W9AkYg0SODTamjHGjzDAAa7R+lHW5EKnRQavTgFfg2CeQYrfpTT+4W6MaffnXLxX YhGbXobd0KWfNURAuGcANfEkPgWdJBT+TB2EzIPmfp7qEBm85Bk89jSruE2Rz71o tX/WH96BNd0gaZx2U/6dyG7oDIsDu+hMBILanXhTubXGVxsL+ab2id7oVt6uJQTv maJW2BC8ggtDjCI9QOrcdnb1u+ztGgKLilw0UA6wYvseegkWVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIK8WkaqV0IlD9f8M9aB3RS/pT7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDA5MzBlYTYtYzFhMC0z NGQ3LWJkZjQtMjVjYzUzZjI0MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMC89PAhAyd/F/sxYMt05fqjx+E3ErJWZJcYYctpxlCt28yfKiY6 Z8D96hvpVnkMtJWWcyU1fgLun1Vm2zOrY0MaiyJKqjzWvgwhsUnhSvITtJYB3tZH GAd5B4kzadyp7qiBCXysqguK9UEkmRtkxSIifvAK0YXGKtRZgzj8H38MRMoKXGJI TsUy992ZL2CZIElxa9N0tX1FxZ5/tjg94Un/H/yJGgFAckeKSho0xN7l9KnCSsQ7 7z2QiiHQBNnXHFvTl372OVAsLEs7/iXQyLijCodlUTQ2D3O9vGpk+Yj9kUmPcRo4 V/4GYO+NOFH+IYklKWowCjetwdz4i2KrAZw= -----END CERTIFICATE-----Generated at Fri Sep 25 06:45:34 2026 by rpki-client