$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/318e4f33-d285-3655-ab9d-10c9a0009d02.roa File: 318e4f33-d285-3655-ab9d-10c9a0009d02.roa (raw, json) Hash identifier: /6b4XbrG9m2QW3lCEhf+EDHU70nuY/WyKHfV0tZ1J4A= Subject key identifier: 63:41:5A:9E:F4:A0:0A:84:2B:6A:AD:88:5A:1C:C0:7E:39:D9:D1:96 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CBE0B13D2B9C0A3E7BD4E Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/318e4f33-d285-3655-ab9d-10c9a0009d02.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 2001:500:4a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:be:0b:13:d2:b9:c0:a3:e7:bd:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dbf2ddfb-ab4a-4c2f-a4fc-303181152d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:0f:fd:0e:e7:c3:cd:d2:a9:58:87:ba:fb: 2d:c1:39:7d:f5:55:21:6b:50:14:6f:75:42:2f:6f: c5:40:bd:02:66:cb:cf:60:a8:c2:10:aa:c7:a3:20: c2:65:a3:05:09:7d:f7:2e:08:f7:ce:93:f5:34:8c: 53:65:e1:89:d7:03:d7:b3:47:dc:a5:f2:c1:b4:56: 83:51:42:34:2e:c0:27:81:dc:29:e2:7d:f1:33:35: d4:21:90:f4:e5:5c:44:9c:0a:4a:bd:2d:51:a8:c5: 2b:b2:cb:e1:66:a2:8e:5d:cf:dc:3c:a4:06:d2:00: 6d:8d:ef:8b:77:30:cb:13:83:fc:8b:d6:45:7b:06: 6b:5d:af:c7:0b:3a:f0:6d:61:84:4a:d2:77:36:4d: ac:6b:ec:35:31:70:e2:72:fa:02:92:02:e6:63:9e: d1:6d:e9:14:17:27:00:f9:95:d9:f7:09:ff:16:50: 9c:d6:03:2d:e4:f2:5d:b0:84:1d:eb:33:69:15:f9: 66:61:95:86:59:a5:2e:ed:40:2f:bb:11:e9:7c:50: 23:e2:f3:7b:1b:25:2d:43:e2:2a:f6:df:8c:fa:01: 14:7b:d4:ab:e3:be:00:d3:5f:ee:68:e0:69:1d:98: 09:c4:e6:82:cc:4e:8e:db:a0:d4:b7:a0:20:6b:d6: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:41:5A:9E:F4:A0:0A:84:2B:6A:AD:88:5A:1C:C0:7E:39:D9:D1:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/318e4f33-d285-3655-ab9d-10c9a0009d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:de:9a:3f:d1:bf:ae:42:9b:de:72:e2:21:19:42:ac:af:b6: b4:d8:34:3a:62:20:1b:d6:b9:f0:ba:8a:27:dd:50:7c:08:e0: 8d:36:e5:76:b0:0b:0c:f1:e8:25:3f:01:47:c1:d7:06:99:8a: 51:e8:29:d7:4f:0e:18:a7:97:97:9d:65:ed:df:65:de:56:51: 30:26:a6:ea:57:84:c5:81:cd:52:9d:4f:73:bc:57:a7:02:df: eb:ba:e8:2c:ab:52:b4:54:ec:44:1d:3b:d8:b8:b3:39:b6:b9: 2a:33:89:09:e9:78:1d:db:05:38:41:25:ba:4c:56:ae:36:ce: 82:01:6f:1d:9e:14:4e:40:2a:06:fe:5e:83:b5:d3:ee:b4:fd: 9c:21:ac:ed:cc:51:72:4f:cb:5b:e4:59:52:f3:79:ba:a3:f2: 27:74:72:4d:6e:d2:ef:85:13:8b:bd:d7:f4:45:29:af:a2:f7: 30:20:ed:f1:99:aa:7d:f1:a0:b7:4a:b8:29:38:13:a7:ba:97: b1:7a:80:6a:d2:5d:bf:a4:e2:84:e7:09:48:bb:c7:66:6b:a8: da:ea:aa:79:90:29:ec:f5:1a:96:e6:a4:bc:93:ef:1d:8e:dd: ae:86:10:6f:90:9b:70:4a:09:1f:2c:2f:78:34:a9:03:9d:3c: 97:c6:b4:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnL4LE9K5wKPnvU4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGJmMmRkZmItYWI0YS00YzJmLWE0ZmMtMzAzMTgxMTUyZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp80P/Q7nw83SqViHuvstwTl99VUha1AUb3VC L2/FQL0CZsvPYKjCEKrHoyDCZaMFCX33Lgj3zpP1NIxTZeGJ1wPXs0fcpfLBtFaD UUI0LsAngdwp4n3xMzXUIZD05VxEnApKvS1RqMUrssvhZqKOXc/cPKQG0gBtje+L dzDLE4P8i9ZFewZrXa/HCzrwbWGEStJ3Nk2sa+w1MXDicvoCkgLmY57RbekUFycA +ZXZ9wn/FlCc1gMt5PJdsIQd6zNpFflmYZWGWaUu7UAvuxHpfFAj4vN7GyUtQ+Iq 9t+M+gEUe9Sr474A01/uaOBpHZgJxOaCzE6O26DUt6Aga9Y82QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGNBWp70oAqEK2qtiFocwH452dGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzE4ZTRmMzMtZDI4NS0z NjU1LWFiOWQtMTBjOWEwMDA5ZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDemj/Rv65Cm95y4iEZQqyvtrTYNDpiIBvWufC6iifdUHwI4I02 5XawCwzx6CU/AUfB1waZilHoKddPDhinl5edZe3fZd5WUTAmpupXhMWBzVKdT3O8 V6cC3+u66CyrUrRU7EQdO9i4szm2uSoziQnpeB3bBThBJbpMVq42zoIBbx2eFE5A Kgb+XoO10+60/ZwhrO3MUXJPy1vkWVLzebqj8id0ck1u0u+FE4u91/RFKa+i9zAg 7fGZqn3xoLdKuCk4E6e6l7F6gGrSXb+k4oTnCUi7x2ZrqNrqqnmQKez1GpbmpLyT 7x2O3a6GEG+Qm3BKCR8sL3g0qQOdPJfGtOE= -----END CERTIFICATE-----Generated at Wed Jul 29 10:34:06 2026 by rpki-client