$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa File: 5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa (raw, json) Hash identifier: acVHuT4AlP+5iP5L6En92SVDp7+eDSnsXY2DQkXrb1I= Subject key identifier: BA:48:54:99:87:94:30:7B:37:2F:35:DC:1D:70:B9:DA:3B:0C:B7:EB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79D2F6E6DBDD2A1A92C0F90 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:2f:6e:6d:bd:d2:a1:a9:2c:0f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=879bc697-3393-452f-a4ad-4d91a637cdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:ce:be:bf:36:68:2d:11:08:cf:76:b8:dd: e4:fd:86:b5:34:31:0c:5b:68:1a:c6:6d:0a:e7:05: d8:06:f4:d5:d4:1a:2c:15:f1:35:e7:96:85:1e:d2: 37:5d:03:ac:77:f9:d6:a4:d4:3f:53:22:84:fe:62: cf:1b:df:8d:21:71:c9:1a:cd:5d:7c:c4:3d:29:1e: 13:87:1a:2f:e8:a2:a0:4a:92:df:c0:35:62:13:3b: 67:27:b8:b8:1f:0f:61:0d:91:61:e1:73:e2:f6:5b: b8:dc:13:c9:85:d2:18:e3:4a:6c:ee:ac:12:2a:6d: a1:9a:38:d3:ab:67:df:be:df:5e:73:90:6e:f2:d7: 6a:e3:31:21:51:b0:60:a7:f1:46:42:f5:78:9a:a8: 11:48:fc:e5:71:d4:9d:b5:5e:79:22:0b:88:f4:6c: a4:aa:bd:7d:ac:14:fa:53:61:9d:b5:39:d3:58:eb: 61:c1:bf:1f:b0:f4:eb:6e:95:bc:1f:2b:9f:e4:b8: 54:39:8d:b1:b7:f3:45:1e:b8:95:18:14:c9:3b:18: 09:29:ef:dd:0f:67:73:28:d8:ef:c9:ed:f9:24:d4: ce:a4:23:9c:8b:60:4d:56:8c:09:dc:38:d2:14:b9: d4:35:f3:46:60:23:06:f4:70:69:46:ab:4d:37:6e: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:48:54:99:87:94:30:7B:37:2F:35:DC:1D:70:B9:DA:3B:0C:B7:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:3a:79:46:a8:83:18:ce:ad:97:1e:f8:63:65:81:5c:95:16: 50:fd:23:30:d3:5a:cd:96:e1:6c:15:c5:98:06:dc:51:87:b5: c9:f3:56:37:54:41:44:29:39:f7:c7:45:16:68:2b:79:27:86: d3:5b:72:2a:ed:83:8e:26:1d:8e:38:46:64:55:16:c2:64:72: 59:96:ea:65:71:cd:00:4b:c1:5e:2d:66:2f:77:de:00:3b:17: d5:ae:57:10:ec:66:b8:fd:51:d0:50:6d:2d:3c:22:59:e9:db: 0e:27:ef:cc:83:6b:5c:f6:d5:0b:07:c9:f1:6e:85:f3:bd:69: a6:99:8d:ad:cc:63:4d:02:1c:a2:b0:f4:90:5b:d6:91:e6:2d: 41:40:2e:d3:18:74:6c:2c:98:d2:90:1a:d9:e9:bd:93:cf:29: e0:57:af:52:b4:01:4f:44:ac:70:a0:bd:4e:a2:90:55:ad:ce: c3:18:99:f2:fa:d5:69:96:85:d7:79:56:91:4f:8a:67:f8:01: 3b:83:5b:a3:6d:e7:21:8a:cc:3b:b4:69:f2:d5:7a:f9:e5:2c: 18:82:5f:98:d9:af:e1:13:d4:ad:fe:a7:b0:9d:b6:50:dc:fe: a0:09:f4:1d:78:16:b3:2a:db:16:67:84:80:04:9d:cf:5e:01: 0c:9f:7f:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnS9ubb3SoaksD5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODc5YmM2OTctMzM5My00NTJmLWE0YWQtNGQ5MWE2MzdjZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIjOvr82aC0RCM92uN3k/Ya1NDEMW2gaxm0K 5wXYBvTV1BosFfE155aFHtI3XQOsd/nWpNQ/UyKE/mLPG9+NIXHJGs1dfMQ9KR4T hxov6KKgSpLfwDViEztnJ7i4Hw9hDZFh4XPi9lu43BPJhdIY40ps7qwSKm2hmjjT q2ffvt9ec5Bu8tdq4zEhUbBgp/FGQvV4mqgRSPzlcdSdtV55IguI9Gykqr19rBT6 U2GdtTnTWOthwb8fsPTrbpW8Hyuf5LhUOY2xt/NFHriVGBTJOxgJKe/dD2dzKNjv ye35JNTOpCOci2BNVowJ3DjSFLnUNfNGYCMG9HBpRqtNN24FUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLpIVJmHlDB7Ny813B1wudo7DLfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWJmZmFlNWYtNWNmNi0z YWQ5LThkMDQtNjdiZWY4MTNkMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAQ6eUaogxjOrZce+GNlgVyVFlD9IzDTWs2W4WwVxZgG3FGHtcnz VjdUQUQpOffHRRZoK3knhtNbcirtg44mHY44RmRVFsJkclmW6mVxzQBLwV4tZi93 3gA7F9WuVxDsZrj9UdBQbS08Ilnp2w4n78yDa1z21QsHyfFuhfO9aaaZja3MY00C HKKw9JBb1pHmLUFALtMYdGwsmNKQGtnpvZPPKeBXr1K0AU9ErHCgvU6ikFWtzsMY mfL61WmWhdd5VpFPimf4ATuDW6Nt5yGKzDu0afLVevnlLBiCX5jZr+ET1K3+p7Cd tlDc/qAJ9B14FrMq2xZnhIAEnc9eAQyff4M= -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:18 2026 by rpki-client