$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa File: 11cdd2e2-39fe-3cac-a71b-b6844486d252.roa (raw, json) Hash identifier: hDB2wbeQNVhbZaNkmO9Hb4ZsLfymrFJ2k7QWl2WLRW0= Subject key identifier: 5B:83:1A:F3:57:E7:AA:EE:34:BF:0B:F5:0B:83:45:28:0D:C9:8B:42 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA7A0E74EDBC8B00B9B3AA280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:e7:4e:db:c8:b0:0b:9b:3a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9e968264-e063-4235-9eb2-239abe536d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ba:85:be:64:7e:14:07:fc:20:0a:93:3e:f8: 9b:49:d9:3d:36:2f:43:37:ac:1b:5c:02:c8:b4:b4: 1f:04:17:72:7e:df:3d:de:82:74:21:bf:95:04:ca: fa:b1:fe:ed:70:53:0d:ed:be:b3:da:89:23:49:0f: 12:54:29:b8:05:ed:b2:44:56:64:e8:96:22:37:aa: 5e:dc:fa:0b:41:cf:da:c6:23:4f:5f:1d:cf:b2:45: a6:2b:0c:07:6a:47:02:30:1a:c0:eb:e6:db:ef:a7: 84:04:16:a6:8d:d5:18:dd:08:83:0a:b5:02:45:39: ef:c8:16:cf:e9:61:ce:1d:b7:17:58:7d:7f:aa:e2: 4e:5b:b6:7c:1b:c8:af:ca:47:1e:be:86:98:a1:ea: e5:b0:60:d8:24:ed:b2:e6:a8:89:d9:91:6b:f8:04: 8b:99:5c:d6:0e:e0:d0:02:67:1e:c2:6b:be:3f:2d: a7:cf:57:21:e9:97:ec:43:c6:e0:d8:89:8b:01:6d: 9f:5b:67:29:4e:e5:bd:7f:c6:9f:be:98:f7:1a:46: 15:0a:5b:44:20:d4:df:d0:59:a7:47:61:fd:4e:0e: e2:6a:39:7d:df:7d:f8:c6:3e:5e:d9:3d:4e:8b:19: 41:33:25:b3:07:bd:ae:98:ce:51:e2:dc:cf:61:b8: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:83:1A:F3:57:E7:AA:EE:34:BF:0B:F5:0B:83:45:28:0D:C9:8B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9d:a9:57:0b:e3:ec:a0:9e:ea:ff:14:a8:c1:47:d5:aa:cf: 4e:39:08:50:c1:82:d3:d4:fd:91:a6:04:1e:3f:d5:6a:12:93: 6d:08:17:6d:42:66:fe:2e:fb:81:9b:87:8f:dc:ac:9a:dc:00: 6d:3b:f1:39:1b:74:d3:7b:7b:9f:28:a3:3f:4c:91:4b:bc:1e: c9:a0:c4:8a:8b:d8:9b:7e:59:a5:66:60:76:b1:d1:de:f0:11: c4:15:ab:a7:4e:f7:2a:e9:da:3a:11:07:06:01:6c:0c:c1:b2: 94:24:4e:ce:ed:c9:a0:2d:5f:a7:d4:35:27:7a:ad:f0:c0:89: 40:12:6c:4f:49:9f:2d:1a:7c:9a:d6:13:61:98:1d:75:a4:41: a1:6e:13:0f:f9:5c:09:54:b3:e1:5d:43:38:d7:69:d9:68:c2: ed:db:80:fe:d0:5f:6d:ea:55:d7:e5:5e:80:b9:67:6d:e6:b5: ed:85:f4:75:81:56:c4:f0:e3:c7:bb:74:c7:87:03:57:7a:ac: 95:9f:7b:57:dd:e3:85:f6:61:d5:11:82:83:ed:87:00:a0:e4: 47:0b:82:cf:0a:2d:fe:60:48:0f:47:9b:63:d3:6e:0d:03:74: 31:aa:27:d1:3a:ae:00:0a:ab:b2:be:79:61:9b:b2:21:18:8d: cd:cc:b0:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noOdO28iwC5s6ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWU5NjgyNjQtZTA2My00MjM1LTllYjItMjM5YWJlNTM2ZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLqFvmR+FAf8IAqTPvibSdk9Ni9DN6wbXALI tLQfBBdyft893oJ0Ib+VBMr6sf7tcFMN7b6z2okjSQ8SVCm4Be2yRFZk6JYiN6pe 3PoLQc/axiNPXx3PskWmKwwHakcCMBrA6+bb76eEBBamjdUY3QiDCrUCRTnvyBbP 6WHOHbcXWH1/quJOW7Z8G8ivykcevoaYoerlsGDYJO2y5qiJ2ZFr+ASLmVzWDuDQ Amcewmu+Py2nz1ch6ZfsQ8bg2ImLAW2fW2cpTuW9f8afvpj3GkYVCltEINTf0Fmn R2H9Tg7iajl93334xj5e2T1OixlBMyWzB72umM5R4tzPYbiitwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFuDGvNX56ruNL8L9QuDRSgNyYtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTFjZGQyZTItMzlmZS0z Y2FjLWE3MWItYjY4NDQ0ODZkMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEadqVcL4+ygnur/FKjBR9Wqz045CFDBgtPU/ZGmBB4/1WoSk20I F21CZv4u+4Gbh4/crJrcAG078TkbdNN7e58ooz9MkUu8HsmgxIqL2Jt+WaVmYHax 0d7wEcQVq6dO9yrp2joRBwYBbAzBspQkTs7tyaAtX6fUNSd6rfDAiUASbE9Jny0a fJrWE2GYHXWkQaFuEw/5XAlUs+FdQzjXadlowu3bgP7QX23qVdflXoC5Z23mte2F 9HWBVsTw48e7dMeHA1d6rJWfe1fd44X2YdURgoPthwCg5EcLgs8KLf5gSA9Hm2PT bg0DdDGqJ9E6rgAKq7K+eWGbsiEYjc3MsGo= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:00 2026 by rpki-client