$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa File: 3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa (raw, json) Hash identifier: cVICRuSQ4JAWjADEa4D+J3aLTVgNlVLICbrJYvv6PZE= Subject key identifier: E4:DA:4E:25:42:D0:7A:0A:1F:86:95:7B:81:A9:A7:26:35:B5:2B:3F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79D4E0DCC07954231BBB980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:4e:0d:cc:07:95:42:31:bb:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d485ade8-eee4-4ffb-b3b5-26ba0a8214a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d0:47:4c:2d:e7:51:00:d2:57:c8:10:09:e2: ce:fa:97:8c:7c:1c:9c:5f:4c:21:09:d1:06:8c:42: 0f:8b:18:2e:27:25:65:5c:34:49:bb:9b:e9:a0:57: ce:8f:28:79:77:b3:dd:74:f6:7e:52:99:48:a8:fc: 3b:a3:b5:0c:af:54:33:81:fc:74:7a:d3:10:a9:7a: 70:9e:de:4a:ca:75:35:55:04:ac:eb:99:b3:01:bb: c2:83:e7:b2:6a:c0:73:df:bc:ed:a4:8c:25:a2:35: 7c:6f:f6:b5:7b:5d:83:6f:3b:7c:7b:d8:6e:ca:89: 9d:e5:64:38:85:19:d1:1a:3a:d2:3d:25:89:0f:29: 64:fd:6e:76:e3:37:45:03:f6:70:21:55:e8:80:e6: 01:7d:21:9c:53:7d:84:b7:01:ff:10:1e:4d:76:cb: 98:f5:2d:5e:20:85:7a:0e:eb:6e:3f:3d:f3:86:42: 20:27:89:0e:77:69:be:4d:01:55:e4:49:6d:ae:d2: 9e:b3:96:61:9d:e9:3d:1c:42:86:94:10:2b:73:bb: 4d:6d:95:66:fe:69:14:35:83:a4:7b:52:fd:10:e7: 67:3f:99:0b:46:49:19:cd:22:09:8a:a1:af:d9:74: 35:8d:5e:75:09:c7:78:bf:0f:2e:0c:33:37:38:6e: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DA:4E:25:42:D0:7A:0A:1F:86:95:7B:81:A9:A7:26:35:B5:2B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:99:b9:e3:82:8e:0e:f1:da:3e:7b:3d:ee:8e:53:2e:c4:4f: 97:2a:94:10:f9:fe:b5:f3:ab:5e:21:c9:8a:09:8e:bc:60:bd: 80:45:4f:e8:aa:7d:32:4e:3f:1c:e0:14:7e:95:ec:f1:8b:16: 2a:82:54:9d:36:bf:25:43:3c:0e:45:2f:ff:24:98:32:29:38: 60:70:95:07:0b:f0:6d:74:8b:d6:6f:bc:03:08:fb:32:00:ca: d3:5d:88:4d:13:8b:48:0d:fe:c8:e0:fd:49:2b:9d:e0:f6:7d: c8:a6:5d:49:19:ce:71:5e:b9:e4:cc:a1:d2:4f:cb:d6:4e:bc: 37:e0:76:62:dd:a7:cf:d7:bb:16:e4:fc:e1:99:a4:d4:92:31: 60:3c:2e:6c:62:e9:59:db:30:54:50:f1:ef:08:2c:bc:42:58: 85:58:bf:ec:49:01:bc:60:c6:06:00:63:e4:b7:bc:1d:43:08: ba:92:e8:77:6d:8b:89:9e:53:2d:7d:1f:dc:3a:82:1d:69:19: bc:2e:09:50:ed:05:4f:26:9e:41:c0:e4:4b:19:c2:19:e4:ec: e1:71:23:d4:89:6d:bb:3f:a6:89:f9:5b:15:53:e3:e6:2a:d4: 72:a3:a3:98:71:e2:d3:77:df:d7:f6:7b:26:c8:bf:76:62:b6: 18:8d:c8:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnU4NzAeVQjG7uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDQ4NWFkZTgtZWVlNC00ZmZiLWIzYjUtMjZiYTBhODIxNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitBHTC3nUQDSV8gQCeLO+peMfBycX0whCdEG jEIPixguJyVlXDRJu5vpoFfOjyh5d7PddPZ+UplIqPw7o7UMr1Qzgfx0etMQqXpw nt5KynU1VQSs65mzAbvCg+eyasBz37ztpIwlojV8b/a1e12Dbzt8e9huyomd5WQ4 hRnRGjrSPSWJDylk/W524zdFA/ZwIVXogOYBfSGcU32EtwH/EB5NdsuY9S1eIIV6 DutuPz3zhkIgJ4kOd2m+TQFV5EltrtKes5Zhnek9HEKGlBArc7tNbZVm/mkUNYOk e1L9EOdnP5kLRkkZzSIJiqGv2XQ1jV51Ccd4vw8uDDM3OG6VHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOTaTiVC0HoKH4aVe4GppyY1tSs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Q5ZjkyNmItNDNlNi0z YmRhLTg2YTMtYjBjNGUxN2MwYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESZueOCjg7x2j57Pe6OUy7ET5cqlBD5/rXzq14hyYoJjrxgvYBF T+iqfTJOPxzgFH6V7PGLFiqCVJ02vyVDPA5FL/8kmDIpOGBwlQcL8G10i9ZvvAMI +zIAytNdiE0Ti0gN/sjg/UkrneD2fcimXUkZznFeueTModJPy9ZOvDfgdmLdp8/X uxbk/OGZpNSSMWA8Lmxi6VnbMFRQ8e8ILLxCWIVYv+xJAbxgxgYAY+S3vB1DCLqS 6Hdti4meUy19H9w6gh1pGbwuCVDtBU8mnkHA5EsZwhnk7OFxI9SJbbs/pon5WxVT 4+Yq1HKjo5hx4tN339f2eybIv3ZithiNyBg= -----END CERTIFICATE-----Generated at Wed Jul 29 09:05:57 2026 by rpki-client