$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa File: 30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa (raw, json) Hash identifier: lsFF8kLqtmxINYXwEtR7TE+Sm5WIFpASHmMC8pL5MbQ= Subject key identifier: 3B:83:E4:D0:55:05:BD:5E:04:32:5E:67:E3:A6:07:19:6D:63:7C:8C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972E4418232F580BFE24700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e4:41:82:32:f5:80:bf:e2:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e0d8eacb-d183-485f-b9c6-1cffd5e9e89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:51:ee:6e:a9:75:c5:ff:16:82:28:37:4f:a1: ae:e7:18:9f:87:81:1a:0e:bc:56:58:71:95:26:aa: 58:12:9d:b7:87:45:20:e3:9e:62:b6:81:b0:12:76: 92:72:65:df:27:4c:68:4e:82:07:1b:bd:25:30:40: 17:1e:52:52:f5:11:23:3a:c6:53:c4:17:dd:7f:b6: 53:67:d9:d1:bb:d2:71:df:fd:35:3b:84:75:f4:01: d0:f2:3a:51:b5:17:a8:8e:41:1a:b7:32:63:86:f3: ad:fb:76:03:8a:b3:cb:73:98:5f:bf:b7:97:de:20: 00:74:4d:4c:9b:ba:7e:fc:0b:0a:88:ee:4d:6a:ff: 87:98:15:bf:f6:bd:a7:3d:d1:d2:f1:58:32:bf:f1: c9:4f:ad:6c:30:31:5d:6a:95:35:26:79:f1:43:3a: ec:9d:04:87:9c:e4:51:39:0f:d2:75:14:7d:0b:1a: fd:f4:e2:d0:6f:fe:4d:78:69:aa:9e:61:7c:62:91: d5:13:94:a1:25:cd:0b:6e:c4:13:1f:2a:fe:60:c3: 52:7b:af:e1:b9:c6:98:b3:11:27:82:62:0c:ae:29: 66:31:12:1d:f2:cf:87:0e:4a:a4:56:9f:bb:24:9c: 80:d6:8c:49:2d:e3:0f:68:00:8f:ec:ca:6c:78:30: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:83:E4:D0:55:05:BD:5E:04:32:5E:67:E3:A6:07:19:6D:63:7C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:94:33:3f:32:88:f4:cb:66:18:c4:ab:c3:85:69:d7:33:f0: ed:36:ee:0a:98:9b:62:bd:b9:ea:e6:1d:42:e1:9a:7a:61:b3: 4d:b4:ee:16:e0:16:79:b4:39:6d:cb:98:ec:28:cb:86:7e:6d: 1b:c0:0c:da:10:c0:d3:fa:82:a6:02:e2:00:f1:d3:53:48:47: 8a:1e:20:a2:3a:bd:f0:4e:5d:08:2e:ba:a4:8e:dd:ed:57:11: a9:ff:38:37:af:47:bc:fa:7e:53:22:ad:a1:36:21:b7:41:c7: 39:e6:74:b4:f7:1a:1c:b0:2d:d4:b8:2a:21:7f:2e:a3:31:d5: 08:90:a8:24:e6:77:65:36:a0:34:22:8a:f4:ea:67:8f:9a:5a: 3c:6a:4a:b7:9e:ad:53:27:ff:bb:1d:9e:b8:66:ee:a4:fc:be: 18:b7:ef:ad:71:ce:27:30:a3:78:16:1c:5a:7a:6b:94:93:f6: c2:96:87:41:24:ad:b0:92:91:32:3e:ea:0e:c4:e1:d1:4e:72: 39:aa:e2:71:98:fb:ef:53:fb:ce:1e:de:ea:ed:83:ef:e4:9e: 24:7b:b1:4f:18:e9:26:49:d6:3f:f7:c0:88:ba:cd:5a:82:04: 73:a0:c2:c0:f9:b1:e5:6d:dc:79:39:73:d0:33:ee:3c:8d:a6: 5a:bf:cc:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcuRBgjL1gL/iRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTBkOGVhY2ItZDE4My00ODVmLWI5YzYtMWNmZmQ1ZTllODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVHubql1xf8Wgig3T6Gu5xifh4EaDrxWWHGV JqpYEp23h0Ug455itoGwEnaScmXfJ0xoToIHG70lMEAXHlJS9REjOsZTxBfdf7ZT Z9nRu9Jx3/01O4R19AHQ8jpRtReojkEatzJjhvOt+3YDirPLc5hfv7eX3iAAdE1M m7p+/AsKiO5Nav+HmBW/9r2nPdHS8Vgyv/HJT61sMDFdapU1JnnxQzrsnQSHnORR OQ/SdRR9Cxr99OLQb/5NeGmqnmF8YpHVE5ShJc0LbsQTHyr+YMNSe6/hucaYsxEn gmIMrilmMRId8s+HDkqkVp+7JJyA1oxJLeMPaACP7MpseDDSZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDuD5NBVBb1eBDJeZ+OmBxltY3yMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzBmMmU4YzktZDQ0My0z MjJhLWIyZWMtODc4ODQ4YTdjN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK6UMz8yiPTLZhjEq8OFadcz8O027gqYm2K9uermHULhmnphs020 7hbgFnm0OW3LmOwoy4Z+bRvADNoQwNP6gqYC4gDx01NIR4oeIKI6vfBOXQguuqSO 3e1XEan/ODevR7z6flMiraE2IbdBxznmdLT3GhywLdS4KiF/LqMx1QiQqCTmd2U2 oDQiivTqZ4+aWjxqSreerVMn/7sdnrhm7qT8vhi3761xzicwo3gWHFp6a5ST9sKW h0EkrbCSkTI+6g7E4dFOcjmq4nGY++9T+84e3urtg+/kniR7sU8Y6SZJ1j/3wIi6 zVqCBHOgwsD5seVt3Hk5c9Az7jyNplq/zDo= -----END CERTIFICATE-----Generated at Fri Sep 25 17:45:35 2026 by rpki-client