$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa File: 49bbbd0f-35ec-3df0-96be-ba897acece3b.roa (raw, json) Hash identifier: z/aKwEwVuu+dw+g65ElZL3QuJGKjmGcIBFv4DWeOnBA= Subject key identifier: A9:D5:B9:C5:06:62:8B:32:2F:A6:FF:90:E7:A4:67:3E:55:59:F1:77 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA7A0D8A075C80D5777EA9900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:d8:a0:75:c8:0d:57:77:ea:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a0b37b3b-967c-4923-8912-04066fa21fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b2:91:08:4e:33:e4:7d:05:61:90:2d:78:11: 8d:17:7a:5d:fe:7e:37:04:2d:ad:c8:9a:65:9c:5d: 28:18:c9:14:29:8e:8a:94:87:58:5a:05:c5:34:6d: 48:b8:03:5c:9b:7d:6e:15:33:bb:ae:a5:85:fc:94: 7d:db:a1:3e:93:71:ca:27:1f:fa:d4:f3:bd:d4:4c: 60:21:7f:3d:d6:9c:b2:19:d7:34:eb:35:6b:ba:46: ae:72:fc:f4:0a:1f:70:f9:dc:ee:f4:3f:c7:cf:c4: d0:e5:ec:65:6a:32:b6:71:ab:60:44:75:d7:e0:f5: 90:53:b1:de:e4:e3:c3:77:05:c5:96:07:f7:24:c3: 85:5f:5d:0d:f7:5b:ac:31:b4:7d:c5:1f:bc:03:59: 79:58:93:0b:4c:c0:36:44:27:73:15:36:df:e4:50: fc:35:6e:d2:a2:c8:d4:d3:ec:6c:92:14:19:61:0c: 87:b8:21:dd:c8:05:bd:44:1e:ca:97:40:94:b6:4e: c7:8a:5f:4f:52:28:8d:98:87:7b:7a:7d:f4:bc:7c: d2:42:68:15:20:b7:2f:5a:66:55:ad:ae:1d:7c:c6: 78:f5:18:c0:d0:73:c9:66:5c:9c:45:60:d4:c8:bd: 02:c8:29:34:7e:ac:6d:6b:17:35:16:19:db:61:d5: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D5:B9:C5:06:62:8B:32:2F:A6:FF:90:E7:A4:67:3E:55:59:F1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:fa:ca:02:d6:e5:69:a9:ef:85:9b:6d:b5:57:a3:b1:cf:b9: 3a:43:db:91:df:6f:20:88:4c:17:29:fa:83:92:35:4b:e6:b3: 20:b8:43:50:17:b0:f3:fd:ba:b2:84:b3:a3:39:0d:50:a3:fd: 1a:50:ae:9a:41:26:07:26:59:d7:71:61:b5:a5:85:d2:61:c7: b1:c6:4c:4c:19:55:83:56:63:5d:6f:5c:0a:24:e0:fe:bb:b0: 6b:d1:e3:27:f3:40:f0:04:2e:f1:01:f3:29:31:9a:06:77:f6: fb:64:ab:40:4b:8c:8f:1b:f2:eb:c8:9a:da:cb:07:90:26:37: ea:ce:f4:49:75:bb:44:14:93:e6:7e:02:91:0d:29:bc:05:5e: 52:41:60:a9:78:2f:6f:7f:07:df:83:b1:4a:93:4f:ac:a3:c0: 8f:fd:24:2c:ad:ad:b0:8f:48:1c:76:66:2a:f2:8f:c0:9f:09: a7:c8:10:1c:03:75:10:41:e8:bf:bd:47:6b:23:5e:0a:fe:97: 02:48:a1:76:b4:49:c7:15:13:89:08:8a:d5:60:a7:47:ef:b8: 78:18:8d:f5:b0:44:96:d2:12:49:8b:9a:97:21:65:bb:4b:83: 61:a4:95:6d:69:31:64:99:b4:f1:5a:d0:fb:32:a6:67:39:88: 89:2f:cf:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noNigdcgNV3fqmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTBiMzdiM2ItOTY3Yy00OTIzLTg5MTItMDQwNjZmYTIxZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rKRCE4z5H0FYZAteBGNF3pd/n43BC2tyJpl nF0oGMkUKY6KlIdYWgXFNG1IuANcm31uFTO7rqWF/JR926E+k3HKJx/61PO91Exg IX891pyyGdc06zVrukaucvz0Ch9w+dzu9D/Hz8TQ5exlajK2catgRHXX4PWQU7He 5OPDdwXFlgf3JMOFX10N91usMbR9xR+8A1l5WJMLTMA2RCdzFTbf5FD8NW7SosjU 0+xskhQZYQyHuCHdyAW9RB7Kl0CUtk7Hil9PUiiNmId7en30vHzSQmgVILcvWmZV ra4dfMZ49RjA0HPJZlycRWDUyL0CyCk0fqxtaxc1FhnbYdUoNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKnVucUGYosyL6b/kOekZz5VWfF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDliYmJkMGYtMzVlYy0z ZGYwLTk2YmUtYmE4OTdhY2VjZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK36ygLW5Wmp74WbbbVXo7HPuTpD25HfbyCITBcp+oOSNUvmsyC4 Q1AXsPP9urKEs6M5DVCj/RpQrppBJgcmWddxYbWlhdJhx7HGTEwZVYNWY11vXAok 4P67sGvR4yfzQPAELvEB8ykxmgZ39vtkq0BLjI8b8uvImtrLB5AmN+rO9El1u0QU k+Z+ApENKbwFXlJBYKl4L29/B9+DsUqTT6yjwI/9JCytrbCPSBx2Ziryj8CfCafI EBwDdRBB6L+9R2sjXgr+lwJIoXa0SccVE4kIitVgp0fvuHgYjfWwRJbSEkmLmpch ZbtLg2GklW1pMWSZtPFa0Psypmc5iIkvz1I= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:58 2026 by rpki-client