$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa File: 3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa (raw, json) Hash identifier: OQG0zDU3jzSyDpnHOkHdCy6ksln2KH2FNuw7Bom4t5Q= Subject key identifier: DB:44:0A:BD:18:8A:A0:EB:57:B2:4E:09:99:98:65:B2:9A:AC:2B:49 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA7A0BFB50B0B75931BFF6E00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:d3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:bf:b5:0b:0b:75:93:1b:ff:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6de96453-7d68-4351-a19d-6946a77228d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fb:e8:17:15:51:81:ea:46:6a:87:c6:3d:cf: 55:93:8e:6f:b5:45:80:dd:66:61:a8:e5:b2:53:1c: d7:54:42:2d:cb:3e:b1:24:52:d8:63:e4:df:58:be: 54:dc:9f:88:0d:52:8a:00:15:46:06:40:be:13:e5: c3:ba:e8:cd:45:cf:8c:cb:19:95:90:41:29:85:13: 57:dd:ab:df:13:eb:14:6f:b0:40:84:a5:07:be:0f: 4e:3d:fb:e7:72:60:80:03:ba:46:91:cd:40:05:a5: cb:5e:59:7d:50:0a:49:d8:85:cf:a3:3f:62:6a:56: 90:a9:9a:57:bf:ef:03:5e:44:0f:5a:25:5c:12:bc: e2:d4:a1:86:d5:ea:a1:a1:68:e6:29:8a:70:6d:be: 48:ab:bd:16:8c:c3:e4:fc:64:1c:37:95:74:50:53: 63:89:38:27:a8:07:4f:15:30:58:62:f9:de:60:fc: fc:14:6e:92:47:fa:42:4f:1d:0c:33:40:de:fc:fe: 18:dc:5b:9d:eb:5e:9f:f8:08:90:f8:6a:99:51:ca: e8:01:17:72:e8:7a:5d:0a:8f:10:eb:17:55:7a:49: 1e:29:57:a8:f6:ff:c4:2c:10:72:70:27:8e:f5:a5: 50:eb:d3:ca:97:a9:e8:aa:72:5e:0b:c5:f8:d7:08: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:44:0A:BD:18:8A:A0:EB:57:B2:4E:09:99:98:65:B2:9A:AC:2B:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3ac344b0-7baf-3bba-b34b-2cdfc6a0a2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:21:30:f1:b4:14:d0:9d:43:4e:11:be:f1:4d:69:b4:b0:23: 45:c9:9b:b6:d2:4f:f6:a9:4d:6f:90:e0:0b:1b:90:c4:af:75: 25:ea:b7:9d:a3:2e:95:61:2e:2a:ea:c7:fb:09:8d:7e:87:5e: 03:17:90:55:66:e9:6d:59:0a:43:83:34:74:6f:e7:37:e1:1b: bb:b7:22:4d:0c:29:cc:b3:13:bb:1f:d4:31:99:10:c2:ed:ba: 78:14:e1:cf:0e:57:80:09:fc:e1:35:b5:22:bc:c8:3e:9b:c8: f3:6a:1c:db:d4:36:64:9b:b0:05:0f:78:42:53:00:87:cf:8e: ae:95:d6:dc:fc:5c:2f:de:97:1f:ef:f4:b9:1c:4b:31:fe:4e: 92:94:1c:39:c3:26:2b:51:c2:be:1f:b2:2f:da:c0:58:f6:a3: 4a:15:50:82:56:76:37:ed:a3:93:47:85:bf:c2:be:24:88:c7: 13:14:25:ea:6c:73:58:9c:de:fd:de:cb:c0:ff:d1:cb:77:73: e4:35:6d:54:15:a6:c1:1a:5d:bd:f2:0c:f0:10:c1:0b:f8:b9: e9:1c:9f:52:94:b5:db:1b:be:aa:54:56:74:e3:d7:a5:96:01: d8:3c:d9:d4:72:84:c9:21:df:67:e5:35:de:f8:69:29:03:a8: 77:ec:99:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noL+1Cwt1kxv/bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmRlOTY0NTMtN2Q2OC00MzUxLWExOWQtNjk0NmE3NzIyOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PvoFxVRgepGaofGPc9Vk45vtUWA3WZhqOWy UxzXVEItyz6xJFLYY+TfWL5U3J+IDVKKABVGBkC+E+XDuujNRc+MyxmVkEEphRNX 3avfE+sUb7BAhKUHvg9OPfvncmCAA7pGkc1ABaXLXll9UApJ2IXPoz9ialaQqZpX v+8DXkQPWiVcErzi1KGG1eqhoWjmKYpwbb5Iq70WjMPk/GQcN5V0UFNjiTgnqAdP FTBYYvneYPz8FG6SR/pCTx0MM0De/P4Y3Fud616f+AiQ+GqZUcroARdy6HpdCo8Q 6xdVekkeKVeo9v/ELBBycCeO9aVQ69PKl6noqnJeC8X41wjSYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNtECr0YiqDrV7JOCZmYZbKarCtJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2FjMzQ0YjAtN2JhZi0z YmJhLWIzNGItMmNkZmM2YTBhMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEghMPG0FNCdQ04RvvFNabSwI0XJm7bST/apTW+Q4AsbkMSvdSXq t52jLpVhLirqx/sJjX6HXgMXkFVm6W1ZCkODNHRv5zfhG7u3Ik0MKcyzE7sf1DGZ EMLtungU4c8OV4AJ/OE1tSK8yD6byPNqHNvUNmSbsAUPeEJTAIfPjq6V1tz8XC/e lx/v9LkcSzH+TpKUHDnDJitRwr4fsi/awFj2o0oVUIJWdjfto5NHhb/CviSIxxMU Jepsc1ic3v3ey8D/0ct3c+Q1bVQVpsEaXb3yDPAQwQv4uekcn1KUtdsbvqpUVnTj 16WWAdg82dRyhMkh32flNd74aSkDqHfsmaY= -----END CERTIFICATE-----Generated at Wed Jul 29 10:09:17 2026 by rpki-client