$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/01d63254-2c2a-337d-a5c5-5c3d27344457.roa File: 01d63254-2c2a-337d-a5c5-5c3d27344457.roa (raw, json) Hash identifier: yY5m27itMswDlWhyXTqicTjpLjcu0SGHXsNDBWLgDcM= Subject key identifier: 3B:E2:03:CE:81:DC:F9:AB:0F:19:E7:A9:EE:13:96:D2:97:EE:A5:A1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4986EFDFAEDC198B77005380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/01d63254-2c2a-337d-a5c5-5c3d27344457.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:ef:df:ae:dc:19:8b:77:00:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b58f65c2-e213-432d-aa05-5d805a89787c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:33:26:54:fb:cd:66:2c:6a:57:c3:e1:66:63: 5e:76:14:ce:bf:40:f0:86:54:e9:7a:f1:61:f3:53: 03:49:59:14:bf:43:cb:de:00:34:bb:b8:ac:9f:2d: b1:fd:39:bb:37:62:15:39:2c:7c:3d:28:43:e1:9c: 94:3a:87:07:ee:0a:5b:f7:94:d2:ef:c2:16:a2:a7: d2:24:a3:4d:d4:d2:0c:07:3f:ea:d2:a9:f8:f7:41: 93:83:98:52:98:07:f8:5f:e7:f8:86:8f:ad:3c:f5: c2:ed:db:10:c9:a1:70:99:3e:26:32:04:20:3a:4b: 42:72:b2:7a:c2:25:d8:a7:6f:a8:0f:71:6a:65:e6: 04:d1:2f:97:eb:8d:4e:0c:d4:64:83:83:8d:6e:93: 35:8c:26:76:6b:6e:f1:57:cf:53:d7:e6:a6:e3:ec: f1:5f:da:6a:22:22:77:97:41:b3:b4:33:99:9d:c4: 3f:43:45:63:a5:ab:db:26:a3:c8:0c:66:50:8b:71: 7f:fa:ba:79:79:56:d9:89:e7:27:e8:22:03:30:41: 8a:c2:7a:7b:ce:28:91:a0:40:be:6e:10:71:ca:1b: 29:01:30:85:87:17:2b:78:42:b3:b9:6e:63:7c:05: 97:78:a5:80:1a:ba:9b:fd:61:9f:7a:8c:59:f3:3b: 4f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E2:03:CE:81:DC:F9:AB:0F:19:E7:A9:EE:13:96:D2:97:EE:A5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/01d63254-2c2a-337d-a5c5-5c3d27344457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:fb:9e:6e:a4:8b:cc:86:c5:24:f5:eb:fd:29:d5:b4:62:17: db:f4:94:17:c2:c1:f8:a6:f3:82:f7:5e:55:cc:98:28:11:75: 3b:2a:37:38:9a:22:c0:e1:8c:e9:40:11:c7:5b:8a:16:5e:7a: 84:d9:9f:fe:b0:18:7d:fc:7e:c4:0a:86:c3:f9:b2:a7:4d:35: 92:67:6c:85:7d:1d:5b:d6:85:48:12:f0:65:9b:81:1e:b1:3c: c6:73:9e:20:1e:4c:c0:ee:fe:c8:5c:3b:82:82:8f:4a:d6:3f: 29:26:8d:d9:85:24:8a:be:24:f2:d2:eb:a2:7c:0c:3c:90:cb: 23:7e:09:41:a3:67:ff:99:85:08:f0:a8:91:9b:b7:a9:a2:7c: 44:54:e2:bc:1e:1a:eb:5a:56:22:9c:d4:7d:1c:96:70:16:79: 98:35:a2:09:32:9a:20:8d:95:8c:c3:85:4a:7e:67:6c:d4:54: 64:d3:ca:02:9f:04:9c:bd:d5:8c:a0:d7:3c:0b:19:56:04:4d: fc:6a:dc:60:50:e4:19:04:fd:7d:ae:ef:0e:94:ba:a1:66:e8: 6d:b5:1a:ee:bb:d2:28:6c:8d:10:10:44:c5:92:19:f4:8a:ff: ae:34:01:ed:80:45:ac:c0:41:8d:f5:ea:6b:ef:27:8c:ae:c2: 5b:12:2d:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jhu/frtwZi3cAU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjU4ZjY1YzItZTIxMy00MzJkLWFhMDUtNWQ4MDVhODk3ODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zMmVPvNZixqV8PhZmNedhTOv0DwhlTpevFh 81MDSVkUv0PL3gA0u7isny2x/Tm7N2IVOSx8PShD4ZyUOocH7gpb95TS78IWoqfS JKNN1NIMBz/q0qn490GTg5hSmAf4X+f4ho+tPPXC7dsQyaFwmT4mMgQgOktCcrJ6 wiXYp2+oD3FqZeYE0S+X641ODNRkg4ONbpM1jCZ2a27xV89T1+am4+zxX9pqIiJ3 l0GztDOZncQ/Q0VjpavbJqPIDGZQi3F/+rp5eVbZiecn6CIDMEGKwnp7ziiRoEC+ bhBxyhspATCFhxcreEKzuW5jfAWXeKWAGrqb/WGfeoxZ8ztPOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDviA86B3PmrDxnnqe4TltKX7qWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDFkNjMyNTQtMmMyYS0z MzdkLWE1YzUtNWMzZDI3MzQ0NDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKD7nm6ki8yGxST16/0p1bRiF9v0lBfCwfim84L3XlXMmCgRdTsq NziaIsDhjOlAEcdbihZeeoTZn/6wGH38fsQKhsP5sqdNNZJnbIV9HVvWhUgS8GWb gR6xPMZzniAeTMDu/shcO4KCj0rWPykmjdmFJIq+JPLS66J8DDyQyyN+CUGjZ/+Z hQjwqJGbt6mifERU4rweGutaViKc1H0clnAWeZg1ogkymiCNlYzDhUp+Z2zUVGTT ygKfBJy91Yyg1zwLGVYETfxq3GBQ5BkE/X2u7w6UuqFm6G21Gu670ihsjRAQRMWS GfSK/640Ae2ARazAQY316mvvJ4yuwlsSLQg= -----END CERTIFICATE-----Generated at Fri Sep 25 07:49:03 2026 by rpki-client