$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dffa10e-c9c6-3444-9d80-d59171794299.roa File: 0dffa10e-c9c6-3444-9d80-d59171794299.roa (raw, json) Hash identifier: Zvp6boMnWd01gNqEEh1NxrAN3YItYbdd+lqY0/l+6KA= Subject key identifier: 2C:1E:C9:E1:D0:50:F3:DC:14:01:21:22:EE:2D:DF:0B:E6:60:E7:1D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974F5A40B718C6E15C23E60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dffa10e-c9c6-3444-9d80-d59171794299.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f5:a4:0b:71:8c:6e:15:c2:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=04a8bec9-9118-4d64-abe1-343fd43ab11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:16:e4:b5:b0:a9:07:8d:be:23:cf:7b:1e:79: a2:8e:16:cc:c1:9e:8a:74:fc:98:e8:ac:4b:e0:b6: cb:ff:e8:7b:6b:a0:51:71:06:85:2f:7d:1a:8e:0b: 8a:2d:6d:26:ac:0c:91:f9:b4:3e:83:9a:98:4a:7a: 14:47:1e:6a:b4:3a:ab:35:ba:11:83:9a:12:77:48: 90:ca:84:ca:68:6f:71:60:77:28:79:c3:13:bc:f9: e9:a7:bc:03:b1:71:98:61:94:23:58:8d:ee:64:25: 83:08:26:37:47:f7:6f:19:bd:22:81:71:73:ea:87: e8:6b:b0:f2:b9:86:27:c8:ef:5b:a5:68:42:2d:5d: 5f:67:84:29:ca:a8:da:46:2b:77:6b:bd:b4:87:7b: 6a:6e:58:de:4c:93:d3:9b:7e:3d:06:93:9f:f9:9b: fb:00:25:74:d3:51:c2:8a:10:97:99:d6:d5:09:0b: 97:ca:17:f4:55:ab:ce:2f:ab:80:b7:bc:2d:2c:3c: d4:7b:c4:95:0e:a4:f6:90:16:17:aa:f4:03:73:65: 06:bd:92:6a:e2:84:e1:cd:f7:4d:71:a5:39:28:5a: 3e:4f:2d:ce:3f:e8:29:4a:7b:e4:e2:31:2d:5d:6c: 3a:0c:27:f2:05:30:8b:34:ff:ee:cc:db:e6:af:58: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1E:C9:E1:D0:50:F3:DC:14:01:21:22:EE:2D:DF:0B:E6:60:E7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dffa10e-c9c6-3444-9d80-d59171794299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:91:fb:cc:fb:f8:7f:57:1c:1b:9f:42:a3:3c:68:35:3b:fc: 71:f8:10:2c:dd:f4:75:d2:1f:f9:f3:19:e7:5d:26:be:a5:1a: 7f:c6:08:c0:92:55:7c:bf:86:a2:81:2c:49:06:19:d2:ab:40: 81:bd:27:06:af:50:47:14:38:87:d6:2d:80:6a:9f:fa:b8:ae: 29:08:7c:87:a8:bc:25:0b:4d:bf:62:db:6a:56:41:13:8c:b7: 41:0b:96:ff:4e:3e:d0:bc:56:19:93:03:70:7a:0f:99:b8:95: c7:99:23:4a:1d:40:2a:eb:47:48:b1:33:a9:46:2f:c7:01:22: 78:3f:d5:9f:71:be:ba:f0:a8:bd:d6:f2:68:4c:38:e5:7c:1d: c6:68:6c:ab:02:32:a9:0f:48:2b:5a:24:d6:61:00:8f:c8:9a: 0f:f2:00:cf:d8:dc:49:80:87:68:ac:53:71:00:b8:b9:2c:ce: 39:e6:be:1c:65:c5:0c:46:26:f2:a3:7e:2f:23:65:78:72:18: 69:e7:c9:c2:52:94:02:77:f2:56:1d:8a:3e:67:03:e2:12:a1: b7:12:17:00:87:ad:d6:7e:8e:f6:b5:34:17:ca:e7:a0:0d:fd: 82:cc:86:ed:20:05:85:6d:8b:92:6f:7e:66:49:b3:93:90:57: 5c:e6:8d:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdPWkC3GMbhXCPmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDRhOGJlYzktOTExOC00ZDY0LWFiZTEtMzQzZmQ0M2FiMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RbktbCpB42+I897HnmijhbMwZ6KdPyY6KxL 4LbL/+h7a6BRcQaFL30ajguKLW0mrAyR+bQ+g5qYSnoURx5qtDqrNboRg5oSd0iQ yoTKaG9xYHcoecMTvPnpp7wDsXGYYZQjWI3uZCWDCCY3R/dvGb0igXFz6ofoa7Dy uYYnyO9bpWhCLV1fZ4QpyqjaRit3a720h3tqbljeTJPTm349BpOf+Zv7ACV001HC ihCXmdbVCQuXyhf0VavOL6uAt7wtLDzUe8SVDqT2kBYXqvQDc2UGvZJq4oThzfdN caU5KFo+Ty3OP+gpSnvk4jEtXWw6DCfyBTCLNP/uzNvmr1hBPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCweyeHQUPPcFAEhIu4t3wvmYOcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGRmZmExMGUtYzljNi0z NDQ0LTlkODAtZDU5MTcxNzk0Mjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADWR+8z7+H9XHBufQqM8aDU7/HH4ECzd9HXSH/nzGeddJr6lGn/G CMCSVXy/hqKBLEkGGdKrQIG9JwavUEcUOIfWLYBqn/q4rikIfIeovCULTb9i22pW QROMt0ELlv9OPtC8VhmTA3B6D5m4lceZI0odQCrrR0ixM6lGL8cBIng/1Z9xvrrw qL3W8mhMOOV8HcZobKsCMqkPSCtaJNZhAI/Img/yAM/Y3EmAh2isU3EAuLkszjnm vhxlxQxGJvKjfi8jZXhyGGnnycJSlAJ38lYdij5nA+ISobcSFwCHrdZ+jva1NBfK 56AN/YLMhu0gBYVti5JvfmZJs5OQV1zmjVk= -----END CERTIFICATE-----Generated at Fri Sep 25 09:37:42 2026 by rpki-client