$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa File: 4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa (raw, json) Hash identifier: Awu+PGpQuQPf2uPeRXqCOutnJ4X+5cNOUQIqxjBV9G4= Subject key identifier: 5B:97:98:1F:D0:FA:6B:23:2A:67:A8:57:C0:B8:BA:CC:BF:82:71:68 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498B59A3CE2F82D0E6CEF2C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:59:a3:ce:2f:82:d0:e6:ce:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fbf37d95-2cf1-48bf-8569-7d5839899082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:ba:02:ca:24:a6:ec:da:3b:90:73:95:f9: e1:db:90:67:5e:81:af:40:a3:be:a3:e8:e0:55:4b: 32:41:1d:61:b3:11:11:a1:90:ab:6d:0a:c1:fb:08: b3:a3:32:8e:dc:b0:15:a5:15:24:3f:fe:34:44:f3: 22:ed:66:79:8b:8a:a0:b9:f7:8c:12:96:62:17:2d: d7:b4:32:a6:16:bb:5e:72:db:7e:fe:2a:ce:bc:50: 06:a5:f1:e8:c5:c3:24:99:e4:b3:52:f6:97:c8:6c: ae:01:22:1b:0c:94:d7:46:63:cd:42:35:51:8b:a8: f8:00:04:37:df:3a:b4:04:ef:c9:83:87:54:eb:12: 6a:9b:2b:95:8c:d5:6a:e0:d0:9f:f4:40:b9:47:eb: a6:41:75:b7:f2:24:66:97:d4:89:28:03:84:a3:07: 26:2f:3a:ae:83:5c:58:81:e5:98:49:64:a0:dc:ab: 92:7d:f4:b2:f5:53:71:9b:28:37:1f:05:4b:06:6a: f7:d7:4c:97:11:97:00:7b:e3:ae:ca:86:09:47:5b: 50:59:f7:36:af:87:a0:0c:a2:30:bc:e5:18:2f:0e: 87:54:0b:40:5b:33:e0:56:27:44:dc:8b:0f:c1:19: 44:37:42:7c:db:09:4e:62:b4:b4:c6:ff:a0:ff:53: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:97:98:1F:D0:FA:6B:23:2A:67:A8:57:C0:B8:BA:CC:BF:82:71:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:e3:c2:4a:8c:a0:ab:ae:7c:f8:6c:09:f9:34:da:90:50:c0: 09:85:1e:01:bd:42:77:5c:ee:2f:23:a3:06:3a:14:08:1c:38: 68:38:b2:55:63:0a:60:cc:c0:5a:07:5b:a0:44:3f:63:c8:3d: 72:57:d7:77:2c:6b:93:99:97:9e:66:73:c7:d7:92:ad:cd:43: 2d:f2:2d:1a:9b:33:13:59:85:4e:56:18:c2:d0:ca:d8:e0:f3: 7d:bf:9a:04:03:e8:da:17:37:84:2a:88:4f:e8:45:26:42:72: 8f:4d:3c:61:57:b0:23:17:e5:a8:88:35:21:0e:45:83:92:ef: c6:c8:bf:12:43:32:06:bc:09:c8:2a:ed:c6:54:47:7a:82:fd: 57:70:a2:c2:4a:4d:55:e5:da:eb:0b:d8:d7:0d:8e:b4:a9:21: aa:b3:b4:6c:5a:94:b7:38:13:16:d4:03:90:ff:35:90:63:08: 01:e0:04:4d:c7:a1:92:c9:eb:c0:2c:11:e3:3c:77:b0:3b:54: 55:3f:c9:c4:2c:c7:6e:73:30:f0:81:e8:f2:d8:7e:da:93:0d: 4e:c7:20:0b:68:f0:d0:52:6f:be:f6:9b:f6:21:e4:4d:3e:93: 13:62:65:9d:2a:80:b8:3f:f7:68:f5:49:37:5d:90:e9:22:2d: a5:26:64:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji1mjzi+C0ObO8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmJmMzdkOTUtMmNmMS00OGJmLTg1NjktN2Q1ODM5ODk5MDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkje6AsokpuzaO5Bzlfnh25BnXoGvQKO+o+jg VUsyQR1hsxERoZCrbQrB+wizozKO3LAVpRUkP/40RPMi7WZ5i4qgufeMEpZiFy3X tDKmFrtectt+/irOvFAGpfHoxcMkmeSzUvaXyGyuASIbDJTXRmPNQjVRi6j4AAQ3 3zq0BO/Jg4dU6xJqmyuVjNVq4NCf9EC5R+umQXW38iRml9SJKAOEowcmLzqug1xY geWYSWSg3KuSffSy9VNxmyg3HwVLBmr310yXEZcAe+OuyoYJR1tQWfc2r4egDKIw vOUYLw6HVAtAWzPgVidE3IsPwRlEN0J82wlOYrS0xv+g/1M6PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFuXmB/Q+msjKmeoV8C4usy/gnFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGIxZmZlNWYtNGY2OS0z OTJmLWExYzgtZDk3ZGRhNDY3MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKvjwkqMoKuufPhsCfk02pBQwAmFHgG9Qndc7i8jowY6FAgcOGg4 slVjCmDMwFoHW6BEP2PIPXJX13csa5OZl55mc8fXkq3NQy3yLRqbMxNZhU5WGMLQ ytjg832/mgQD6NoXN4QqiE/oRSZCco9NPGFXsCMX5aiINSEORYOS78bIvxJDMga8 Ccgq7cZUR3qC/VdwosJKTVXl2usL2NcNjrSpIaqztGxalLc4ExbUA5D/NZBjCAHg BE3HoZLJ68AsEeM8d7A7VFU/ycQsx25zMPCB6PLYftqTDU7HIAto8NBSb772m/Yh 5E0+kxNiZZ0qgLg/92j1STddkOkiLaUmZCU= -----END CERTIFICATE-----Generated at Fri Sep 25 13:26:13 2026 by rpki-client