$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa File: 501986f1-6af8-32f5-b7de-589152f724d2.roa (raw, json) Hash identifier: 2aqvtUI/bV1EhcdnxU+sZVqIifhMXXjcw/BcMUbNrcA= Subject key identifier: 83:7A:3C:BD:FF:86:42:90:8B:DF:98:EC:E4:5E:3C:38:BC:7F:0F:9B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CD34C32F6A9411816AC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:d3:4c:32:f6:a9:41:18:16:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=092a5e6f-6c0f-4070-97aa-12dcbf2afc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:ed:da:0e:b5:36:ef:5b:21:80:f2:31:26: c5:4e:e9:7f:73:6d:3d:88:bb:3b:38:e1:55:a3:66: e1:3e:0d:27:ea:50:95:69:01:0d:21:21:3b:82:ea: 47:d5:a8:6e:f9:41:d0:3e:c3:84:81:59:67:cc:7c: 70:a3:f1:c8:a2:60:81:4f:6b:33:f6:98:bd:fd:de: 96:15:e5:09:9f:28:26:cd:7d:87:e2:2a:ca:55:38: 18:e3:cb:9e:52:ec:60:ed:15:4d:92:0a:5c:ef:a9: 33:fe:e6:04:5f:58:a8:75:ce:2f:d5:e4:f7:aa:ad: d5:90:a6:24:d5:16:e1:fd:36:7c:43:a1:7c:51:c3: 85:4d:69:02:75:25:85:a9:ae:e6:1b:64:a0:d5:a6: 59:c4:4f:f7:89:69:f0:0f:3a:16:cc:53:8a:89:5a: f9:c5:71:fa:87:2b:a1:34:70:ee:63:d8:53:06:bc: db:46:fa:fa:33:01:19:c8:7a:0d:2d:32:f7:12:57: 81:da:95:0b:94:f7:51:ed:4c:71:aa:da:30:bb:09: b8:54:7c:19:60:a2:5e:4c:f3:17:81:5c:fe:49:03: f1:03:8d:7d:b6:eb:61:5a:f6:d6:80:8f:d9:3d:6a: 54:fa:62:55:b2:51:76:b8:f3:a1:7e:b5:62:b1:57: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7A:3C:BD:FF:86:42:90:8B:DF:98:EC:E4:5E:3C:38:BC:7F:0F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d0:da:da:85:aa:d6:97:e0:a3:d7:fa:85:af:d5:d0:64:22: c5:35:f2:b0:4b:21:30:e5:3e:b6:19:96:75:dd:3d:b0:d2:56: ef:58:8b:aa:cc:35:60:c4:ee:d0:b2:49:a4:78:e5:be:d1:b3: 1e:1f:31:fd:6d:78:db:73:6e:2a:76:72:4e:45:c3:a9:99:73: 44:b6:22:f5:f1:07:a2:cf:a8:0f:38:f1:df:9e:31:72:ee:a4: 83:87:2d:6f:23:f8:a9:19:98:c9:a6:09:e2:73:05:3a:73:45: 73:fe:24:2b:db:5d:f9:ed:25:91:01:94:bb:20:9d:68:8a:35: 5c:8c:9d:6f:19:c4:13:53:63:b6:c9:da:f2:17:f0:d3:68:71: cf:58:69:57:11:48:37:c0:8a:3f:98:43:41:6c:a0:41:48:47: 99:ea:f5:59:90:94:ec:26:54:62:3c:44:d0:11:22:82:cb:e6: f3:08:9e:ea:80:82:00:d2:06:2e:52:64:e1:36:7d:d0:bd:45: ba:df:c9:a6:3d:b9:25:fb:7c:3f:64:b3:9b:d0:c2:34:b6:85: da:5d:05:40:f8:06:f5:2c:28:6a:da:3c:62:b9:42:20:d1:1e: 31:07:03:f2:0a:55:bd:55:b4:02:df:3d:e6:ae:23:f9:4c:a8: e7:5b:23:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnNNMMvapQRgWrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDkyYTVlNmYtNmMwZi00MDcwLTk3YWEtMTJkY2JmMmFmYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB/t2g61Nu9bIYDyMSbFTul/c209iLs7OOFV o2bhPg0n6lCVaQENISE7gupH1ahu+UHQPsOEgVlnzHxwo/HIomCBT2sz9pi9/d6W FeUJnygmzX2H4irKVTgY48ueUuxg7RVNkgpc76kz/uYEX1iodc4v1eT3qq3VkKYk 1Rbh/TZ8Q6F8UcOFTWkCdSWFqa7mG2Sg1aZZxE/3iWnwDzoWzFOKiVr5xXH6hyuh NHDuY9hTBrzbRvr6MwEZyHoNLTL3EleB2pULlPdR7Uxxqtowuwm4VHwZYKJeTPMX gVz+SQPxA419tuthWvbWgI/ZPWpU+mJVslF2uPOhfrVisVf8CQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIN6PL3/hkKQi9+Y7ORePDi8fw+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTAxOTg2ZjEtNmFmOC0z MmY1LWI3ZGUtNTg5MTUyZjcyNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABTQ2tqFqtaX4KPX+oWv1dBkIsU18rBLITDlPrYZlnXdPbDSVu9Y i6rMNWDE7tCySaR45b7Rsx4fMf1teNtzbip2ck5Fw6mZc0S2IvXxB6LPqA848d+e MXLupIOHLW8j+KkZmMmmCeJzBTpzRXP+JCvbXfntJZEBlLsgnWiKNVyMnW8ZxBNT Y7bJ2vIX8NNocc9YaVcRSDfAij+YQ0FsoEFIR5nq9VmQlOwmVGI8RNARIoLL5vMI nuqAggDSBi5SZOE2fdC9RbrfyaY9uSX7fD9ks5vQwjS2hdpdBUD4BvUsKGraPGK5 QiDRHjEHA/IKVb1VtALfPeauI/lMqOdbI0s= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:37 2026 by rpki-client