$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa File: 095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa (raw, json) Hash identifier: E4g1aeChRQb8ikihmzHKHjgV4cPpY/7W7K9BkELrUFg= Subject key identifier: 8A:AC:30:6F:CE:2D:13:F9:A9:F4:02:10:DF:4C:E0:93:E2:81:BD:02 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C1BD6B64A9431FDE27200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 2001:500:4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:1b:d6:b6:4a:94:31:fd:e2:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e56a4ad1-8ecd-4446-a013-f9fad88b1652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:9f:04:d9:ca:75:d1:1f:3b:49:ab:88:ea: 9d:20:73:f4:41:df:f6:8b:3e:a0:61:70:1c:27:ad: 1d:c7:76:71:13:bb:77:82:d1:0f:12:df:f8:96:c0: f0:8a:95:f3:a4:48:c2:3f:e3:ba:3d:0f:d9:0a:7f: 33:07:e6:68:55:76:e7:b3:bd:94:83:10:9a:4a:f5: e9:ed:b2:fb:64:9f:7f:db:51:9f:d6:ab:18:17:41: cb:51:f6:dc:12:26:ec:82:a1:e8:df:cd:4a:7d:22: 76:31:37:be:ab:c8:33:5e:37:57:d3:f9:bb:11:4c: 7f:88:55:3f:fc:ee:91:ab:46:45:15:91:8a:1e:cc: 4e:ca:8d:6c:3f:44:27:65:02:67:9d:69:af:5b:da: 17:7d:90:05:33:fb:79:1b:13:9b:e4:0b:08:92:af: 65:08:4e:6c:16:38:16:8d:81:16:79:7b:07:cc:38: 78:b4:48:96:1f:90:93:c8:5d:e4:34:92:31:e8:66: c8:24:6b:a6:f5:d8:62:88:9e:cc:0e:d4:a3:42:e5: 8c:34:a5:f1:47:9f:46:79:a5:1b:13:db:fc:b6:57: da:25:53:3a:fa:57:9f:84:fb:24:dd:c8:d1:d3:43: 38:70:d8:30:db:7f:fb:91:fd:56:f9:b8:e9:0a:70: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AC:30:6F:CE:2D:13:F9:A9:F4:02:10:DF:4C:E0:93:E2:81:BD:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:be:4d:45:15:6d:1c:df:8c:b2:70:ad:6b:d0:7e:3f:7f:f4: c2:1a:35:cb:4f:40:8d:e9:1f:40:bf:2f:8f:c9:8b:8c:9c:71: 80:6f:62:3c:9a:53:a8:ff:17:db:6a:d2:47:0c:5b:cc:12:76: 87:18:1c:cd:7b:90:c3:f6:42:d1:a8:e0:5a:40:08:94:59:e6: 54:6d:55:d8:a7:36:09:10:f0:9d:be:20:6c:69:0d:16:6b:87: 41:14:a3:fc:aa:53:8f:b3:4f:e2:c1:d6:f5:22:07:5c:62:79: c7:fa:c0:50:53:ba:be:70:49:f1:11:fa:54:1e:1a:d9:7e:cd: 92:7d:2a:a0:93:e8:4b:c4:4c:ac:23:85:19:4f:fc:a6:2f:05: 69:89:2a:64:65:68:a2:5c:0d:0a:c5:09:c4:a0:59:40:78:8a: 60:54:84:cc:2e:2d:f2:4b:35:c1:18:4b:f6:e6:88:a9:c7:c1: 41:fc:a9:f8:2c:2c:45:b9:96:95:1b:9e:87:26:b3:f9:8f:f9: 58:b4:47:22:ac:7c:f3:1c:a8:b7:ea:7b:2c:81:35:53:99:1c: b6:9f:ec:73:bf:d0:e5:32:77:30:6f:b7:de:ad:fb:97:d2:f1: 31:9b:49:30:52:0c:66:09:15:07:df:f7:e9:f5:42:90:52:2e: 0b:2e:39:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnBvWtkqUMf3icgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTU2YTRhZDEtOGVjZC00NDQ2LWEwMTMtZjlmYWQ4OGIxNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0afBNnKddEfO0mriOqdIHP0Qd/2iz6gYXAc J60dx3ZxE7t3gtEPEt/4lsDwipXzpEjCP+O6PQ/ZCn8zB+ZoVXbns72UgxCaSvXp 7bL7ZJ9/21Gf1qsYF0HLUfbcEibsgqHo381KfSJ2MTe+q8gzXjdX0/m7EUx/iFU/ /O6Rq0ZFFZGKHsxOyo1sP0QnZQJnnWmvW9oXfZAFM/t5GxOb5AsIkq9lCE5sFjgW jYEWeXsHzDh4tEiWH5CTyF3kNJIx6GbIJGum9dhiiJ7MDtSjQuWMNKXxR59GeaUb E9v8tlfaJVM6+lefhPsk3cjR00M4cNgw23/7kf1W+bjpCnDOqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIqsMG/OLRP5qfQCEN9M4JPigb0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDk1MjIzYTItNzdhYS0z MmU5LTk2NTUtN2RjOGU3YzZiYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEa+TUUVbRzfjLJwrWvQfj9/9MIaNctPQI3pH0C/L4/Ji4yccYBv YjyaU6j/F9tq0kcMW8wSdocYHM17kMP2QtGo4FpACJRZ5lRtVdinNgkQ8J2+IGxp DRZrh0EUo/yqU4+zT+LB1vUiB1xiecf6wFBTur5wSfER+lQeGtl+zZJ9KqCT6EvE TKwjhRlP/KYvBWmJKmRlaKJcDQrFCcSgWUB4imBUhMwuLfJLNcEYS/bmiKnHwUH8 qfgsLEW5lpUbnocms/mP+Vi0RyKsfPMcqLfqeyyBNVOZHLaf7HO/0OUydzBvt96t +5fS8TGbSTBSDGYJFQff9+n1QpBSLgsuOVE= -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:22 2026 by rpki-client