$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa File: 501986f1-6af8-32f5-b7de-589152f724d2.roa (raw, json) Hash identifier: tSRniz1i9+pmJUzu/Vv/73zXRW6yx7anqk/Cth8Rpdc= Subject key identifier: E5:47:73:50:F9:ED:80:0E:A3:73:2E:20:48:C2:E0:96:C2:A3:CC:AF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972D34913F0B9393C3F04D8 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d3:49:13:f0:b9:39:3c:3f:04:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5d54e76b-2eee-4c96-a8bc-777b3c7cd712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:2b:77:36:bb:1b:80:53:09:5b:81:10:92: fd:f9:d2:06:e2:2d:15:6e:9d:90:06:36:32:e9:70: 9d:52:8a:b7:f7:fc:e4:80:8b:26:60:e8:8c:88:73: 15:f8:82:d9:70:9f:04:57:a7:bf:cf:0c:cc:c1:b1: c9:70:41:8b:d7:80:60:a3:9c:4e:dd:08:77:3c:66: db:05:4f:31:06:55:65:29:bd:1d:5f:45:94:4e:ca: ab:0b:a0:e3:56:21:11:5b:c0:69:3b:be:3a:2b:b2: 6a:ae:ce:bd:c9:41:23:6f:54:51:87:b9:ec:62:68: 45:44:21:c2:fe:95:9e:0b:dc:2a:bc:f1:18:6c:6d: 7c:5c:9b:10:dc:8b:53:5d:4d:76:32:f3:6e:86:d6: f1:07:22:ec:0f:01:1f:07:98:a6:f1:f5:b1:b3:78: 01:70:14:b4:10:6f:2a:09:9e:43:f8:84:f7:97:97: 42:51:e8:37:90:cf:30:13:98:b4:fa:d4:77:15:95: 04:d3:bc:6d:aa:2c:13:e0:82:a3:e1:bb:c9:6b:3f: 1d:ca:4c:cb:32:02:a5:4c:d0:b1:ae:cd:bd:9f:e0: 67:d7:7d:61:24:51:79:21:3e:b6:98:ed:e1:9e:6e: 97:86:5c:fc:b6:7a:10:a0:07:45:b6:de:13:20:6c: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:47:73:50:F9:ED:80:0E:A3:73:2E:20:48:C2:E0:96:C2:A3:CC:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e2:6d:f4:c4:90:11:69:af:9c:4e:66:ce:62:81:ea:b8:c8: a5:bf:0e:c8:20:cf:7d:7c:ab:60:f5:f5:ca:c4:ad:38:0c:f9: 71:87:54:b9:b5:f9:4a:e3:70:ea:6d:e6:5e:8c:90:6f:6b:bc: 00:77:84:b1:33:76:0e:1a:6c:0a:4f:e2:04:f4:89:b1:76:4f: d6:d7:b2:22:ee:bc:be:e4:c5:0a:7e:4a:6d:4a:b4:6f:9f:90: d1:25:62:b8:1b:ea:b3:25:82:be:92:db:e9:1a:50:d6:64:fa: 58:54:d0:8c:48:18:11:e1:65:03:bd:45:ee:90:9d:af:52:3c: 9f:28:2a:6b:f2:6e:fc:54:23:50:5f:6a:e5:4a:32:76:ad:03: b5:4e:31:de:c5:22:5e:23:ec:02:8d:ce:b1:9f:66:4a:d3:23: 43:7c:e4:11:2e:a2:74:ee:fd:4c:03:8c:61:05:78:78:3e:14: 37:7c:5d:e8:d2:6f:01:16:ec:2f:2c:5e:77:94:19:17:c6:82: e0:9f:77:5e:bd:58:ce:9a:47:a0:21:dd:d1:d6:b6:66:02:19: 1d:09:99:72:9e:0c:34:41:7c:07:71:81:99:d3:c1:9c:86:b7: 64:6a:7f:bc:d9:04:2c:00:60:a6:6b:c3:88:13:46:01:a4:f4: 3f:86:ba:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JctNJE/C5OTw/BNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWQ1NGU3NmItMmVlZS00Yzk2LWE4YmMtNzc3YjNjN2NkNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53crdza7G4BTCVuBEJL9+dIG4i0Vbp2QBjYy 6XCdUoq39/zkgIsmYOiMiHMV+ILZcJ8EV6e/zwzMwbHJcEGL14Bgo5xO3Qh3PGbb BU8xBlVlKb0dX0WUTsqrC6DjViERW8BpO746K7Jqrs69yUEjb1RRh7nsYmhFRCHC /pWeC9wqvPEYbG18XJsQ3ItTXU12MvNuhtbxByLsDwEfB5im8fWxs3gBcBS0EG8q CZ5D+IT3l5dCUeg3kM8wE5i0+tR3FZUE07xtqiwT4IKj4bvJaz8dykzLMgKlTNCx rs29n+Bn131hJFF5IT62mO3hnm6Xhlz8tnoQoAdFtt4TIGz9RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOVHc1D57YAOo3MuIEjC4JbCo8yvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTAxOTg2ZjEtNmFmOC0z MmY1LWI3ZGUtNTg5MTUyZjcyNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFjibfTEkBFpr5xOZs5igeq4yKW/Dsggz318q2D19crErTgM+XGH VLm1+UrjcOpt5l6MkG9rvAB3hLEzdg4abApP4gT0ibF2T9bXsiLuvL7kxQp+Sm1K tG+fkNElYrgb6rMlgr6S2+kaUNZk+lhU0IxIGBHhZQO9Re6Qna9SPJ8oKmvybvxU I1BfauVKMnatA7VOMd7FIl4j7AKNzrGfZkrTI0N85BEuonTu/UwDjGEFeHg+FDd8 XejSbwEW7C8sXneUGRfGguCfd169WM6aR6Ah3dHWtmYCGR0JmXKeDDRBfAdxgZnT wZyGt2Rqf7zZBCwAYKZrw4gTRgGk9D+Guo8= -----END CERTIFICATE-----Generated at Fri Sep 25 08:11:58 2026 by rpki-client