$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa File: 08891ef8-25ed-318c-973b-a8f9d9331675.roa (raw, json) Hash identifier: VkhGE7IJZqmX196gfpthZ8gqtNxe/eSio6ibNTaoTVA= Subject key identifier: 39:19:94:6C:D5:64:22:5F:22:41:5B:8F:9A:DB:9F:5A:DE:34:1A:FA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CF2ED864CAB84CB455800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:f2:ed:86:4c:ab:84:cb:45:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=094e017d-ffa0-446c-ac2c-fa01188640b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:a4:e8:b4:b0:8d:93:e2:fc:c1:5d:36:54: c2:b2:89:f0:76:06:d5:fe:3b:21:de:e5:29:2d:5b: 8c:d5:53:e9:16:27:c3:4e:26:a4:19:d0:20:d9:01: 66:ed:ca:f6:2c:2f:95:22:c2:95:05:82:20:58:07: 85:41:b4:a7:e4:9e:e5:76:e3:68:ac:fd:e4:7e:c4: 1b:31:d3:83:c8:70:58:73:f6:ba:94:a0:45:46:59: f1:15:97:18:fa:10:07:b3:5c:b3:c0:52:4c:bf:45: 4d:e3:6a:f2:49:3a:db:b2:76:81:c4:29:b0:be:0d: fc:30:51:3c:59:75:21:94:79:be:a7:dd:ce:e8:27: 41:4b:d5:1e:db:0c:68:a0:33:3c:d9:ed:c7:ec:29: ff:4b:a9:bd:02:de:11:a1:db:90:f3:54:85:4e:88: b1:88:a3:7a:36:db:12:85:8b:cd:53:50:c9:1f:94: 0d:d1:81:d7:5c:fd:c0:96:64:4e:03:eb:9d:b1:1f: 99:8d:f7:87:8f:6e:9a:c4:86:6a:e4:1f:97:32:ac: b1:84:69:ad:dd:7f:86:b9:57:d4:f3:30:48:5b:82: c3:7f:07:30:d7:c3:7e:44:5f:60:b0:2b:44:4b:4f: 48:2c:67:2a:6a:01:73:14:53:38:79:81:51:33:f9: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:19:94:6C:D5:64:22:5F:22:41:5B:8F:9A:DB:9F:5A:DE:34:1A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:da:3a:0c:13:66:e3:01:ac:16:25:cf:0f:56:95:98:17:ba: 7a:a6:12:9f:72:b5:8d:32:23:21:5f:f9:31:d6:00:29:65:80: e6:fe:cd:88:4c:0d:76:3f:5c:75:8f:41:34:82:1b:db:1c:7a: 84:15:c3:a6:b4:71:cc:a7:1a:69:df:89:d0:32:9c:ad:b9:10: 70:d5:15:a2:b6:91:48:d5:c7:4e:c0:1c:0f:22:54:0d:2f:af: 4f:ac:a9:3b:a1:60:04:a5:07:c8:42:a2:08:c4:2a:ad:93:09: 15:72:26:b2:74:24:2f:c8:83:5a:7a:2d:fb:74:51:a5:99:fc: 1b:24:24:39:06:cd:a0:61:37:64:a9:95:e7:b6:e3:5d:50:d8: c6:e8:90:7f:ee:b0:fb:cc:e0:56:eb:49:4b:c4:c8:da:98:ee: 67:12:3f:ff:46:9a:d9:13:f9:50:ae:3d:10:31:46:74:f0:09: 40:cd:95:3d:d8:fa:0e:6b:5b:99:9c:3c:bb:a7:bf:e6:ea:5f: 88:22:08:e6:0f:50:4b:83:05:f3:9d:30:e3:fd:bf:33:f8:45: 1b:9f:2a:66:5c:ee:8e:95:36:71:3b:96:d6:46:e4:55:07:98: 4c:72:67:62:47:6d:8e:46:5e:34:3a:b5:4f:54:6a:d3:4c:5c: 55:25:3c:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnPLthkyrhMtFWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDk0ZTAxN2QtZmZhMC00NDZjLWFjMmMtZmEwMTE4ODY0MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykGk6LSwjZPi/MFdNlTCsonwdgbV/jsh3uUp LVuM1VPpFifDTiakGdAg2QFm7cr2LC+VIsKVBYIgWAeFQbSn5J7lduNorP3kfsQb MdODyHBYc/a6lKBFRlnxFZcY+hAHs1yzwFJMv0VN42rySTrbsnaBxCmwvg38MFE8 WXUhlHm+p93O6CdBS9Ue2wxooDM82e3H7Cn/S6m9At4RoduQ81SFToixiKN6NtsS hYvNU1DJH5QN0YHXXP3AlmROA+udsR+ZjfeHj26axIZq5B+XMqyxhGmt3X+GuVfU 8zBIW4LDfwcw18N+RF9gsCtES09ILGcqagFzFFM4eYFRM/lxnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDkZlGzVZCJfIkFbj5rbn1reNBr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDg4OTFlZjgtMjVlZC0z MThjLTk3M2ItYThmOWQ5MzMxNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL7aOgwTZuMBrBYlzw9WlZgXunqmEp9ytY0yIyFf+THWACllgOb+ zYhMDXY/XHWPQTSCG9sceoQVw6a0ccynGmnfidAynK25EHDVFaK2kUjVx07AHA8i VA0vr0+sqTuhYASlB8hCogjEKq2TCRVyJrJ0JC/Ig1p6Lft0UaWZ/BskJDkGzaBh N2Splee2411Q2MbokH/usPvM4FbrSUvEyNqY7mcSP/9GmtkT+VCuPRAxRnTwCUDN lT3Y+g5rW5mcPLunv+bqX4giCOYPUEuDBfOdMOP9vzP4RRufKmZc7o6VNnE7ltZG 5FUHmExyZ2JHbY5GXjQ6tU9UatNMXFUlPHA= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:57 2026 by rpki-client