$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa File: 69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa (raw, json) Hash identifier: K3ti3pCB6XObFNMqeZ6k8VkiuC31q0BhTL9QPPhJ7KE= Subject key identifier: 39:C2:CE:AA:63:2E:AB:61:81:30:17:6E:29:13:10:EC:95:B7:B3:42 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79D03D496F3C6C728D61A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:03:d4:96:f3:c6:c7:28:d6:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8444c8fa-563c-4c70-b2f8-b1324e3077af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:95:5f:41:0e:ab:4d:58:89:d9:2d:2d:ea:b0: 63:5d:6f:e8:3e:25:96:fb:48:f6:48:f1:c3:55:2f: 76:27:77:d8:c1:e6:bc:59:af:3e:98:4a:e1:50:a7: bf:e3:f8:3d:92:09:ff:2e:f8:23:db:80:20:31:22: 1d:67:31:7b:c0:b0:8d:bc:00:3b:65:c7:77:86:27: 91:48:51:7a:55:0b:09:b6:be:b9:48:4f:6a:48:5c: f8:e9:bf:a9:c7:c7:9b:90:09:2c:7a:b0:e0:f0:40: 27:9c:3a:89:93:70:d2:dd:60:0c:0f:87:3b:df:a1: cd:81:42:9e:49:e7:ff:de:c6:d9:3e:ef:86:b0:ed: e2:2d:fc:fe:59:82:3d:40:4f:c0:94:7e:3d:8c:43: 32:e4:7e:49:f1:40:fd:6b:34:4b:1b:d5:92:b1:6d: fe:36:a6:77:80:07:fb:18:de:d5:d3:b0:1f:b4:e9: 76:f0:2e:73:f5:a8:fd:e6:19:82:c0:c3:a9:c8:02: c9:89:b7:4e:15:d9:3b:7d:9a:87:3c:ae:44:8f:a8: 43:b6:51:08:cd:0c:db:e0:77:d6:df:4b:69:58:60: 6a:84:9e:d6:77:96:13:24:37:b7:bd:42:90:c8:50: 06:ef:91:a0:8d:a6:13:12:a2:e6:0d:25:30:b2:09: 8e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C2:CE:AA:63:2E:AB:61:81:30:17:6E:29:13:10:EC:95:B7:B3:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1d:5d:fe:2b:12:bf:28:d6:2c:b7:87:c7:28:b0:6d:2a:e3: 31:27:93:b8:03:9b:22:90:7a:e8:49:45:21:c2:8d:f3:b7:2b: da:64:60:4b:6a:f9:21:8f:03:77:22:89:bd:30:ff:41:66:18: 80:38:20:39:77:61:6d:2b:e8:7e:ba:ef:bf:58:c3:10:8f:03: 0d:0a:29:86:fe:f9:3f:9e:f5:63:38:7d:66:6a:50:52:ea:4e: 88:d1:3f:c3:88:e9:4a:92:9e:e0:43:d8:f9:c2:6f:ea:95:65: 25:2b:46:e7:65:1a:54:7f:2c:74:45:f4:a9:dc:37:1b:c9:7d: a5:e4:50:55:3c:4e:55:37:3b:24:0a:2a:55:3f:1f:3e:b5:7c: ec:1f:99:71:95:dc:71:ea:5d:0b:e5:f2:69:b2:a4:b9:3e:66: 42:86:cc:cc:c4:1f:d5:ef:e0:eb:7b:7b:6c:17:11:43:b8:f3: 19:dd:21:75:05:6b:46:28:08:51:4b:81:50:8e:b9:7c:ef:dd: 6d:41:9a:18:e0:40:cf:ed:34:8d:3f:57:1c:c9:e7:87:2c:66: 48:bc:d6:d6:bf:fa:c0:f5:b7:e7:96:53:27:28:e8:91:ff:f9: c5:c3:fd:37:9d:9b:44:ed:14:b3:cc:0f:82:38:6e:23:2c:f1: dd:db:e5:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnQPUlvPGxyjWGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODQ0NGM4ZmEtNTYzYy00YzcwLWIyZjgtYjEzMjRlMzA3N2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75VfQQ6rTViJ2S0t6rBjXW/oPiWW+0j2SPHD VS92J3fYwea8Wa8+mErhUKe/4/g9kgn/Lvgj24AgMSIdZzF7wLCNvAA7Zcd3hieR SFF6VQsJtr65SE9qSFz46b+px8ebkAkserDg8EAnnDqJk3DS3WAMD4c736HNgUKe Sef/3sbZPu+GsO3iLfz+WYI9QE/AlH49jEMy5H5J8UD9azRLG9WSsW3+NqZ3gAf7 GN7V07AftOl28C5z9aj95hmCwMOpyALJibdOFdk7fZqHPK5Ej6hDtlEIzQzb4HfW 30tpWGBqhJ7Wd5YTJDe3vUKQyFAG75GgjaYTEqLmDSUwsgmOHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDnCzqpjLqthgTAXbikTEOyVt7NCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjlmOTZjOGMtYTI3YS0z NzE2LWE0YzMtZGZjOGQ4YTJhZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABsdXf4rEr8o1iy3h8cosG0q4zEnk7gDmyKQeuhJRSHCjfO3K9pk YEtq+SGPA3ciib0w/0FmGIA4IDl3YW0r6H66779YwxCPAw0KKYb++T+e9WM4fWZq UFLqTojRP8OI6UqSnuBD2PnCb+qVZSUrRudlGlR/LHRF9KncNxvJfaXkUFU8TlU3 OyQKKlU/Hz61fOwfmXGV3HHqXQvl8mmypLk+ZkKGzMzEH9Xv4Ot7e2wXEUO48xnd IXUFa0YoCFFLgVCOuXzv3W1BmhjgQM/tNI0/VxzJ54csZki81ta/+sD1t+eWUyco 6JH/+cXD/Tedm0TtFLPMD4I4biMs8d3b5Ys= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:33 2026 by rpki-client