$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa File: 7143821d-b959-370f-bcec-f9e5be34ed99.roa (raw, json) Hash identifier: Mc9J7JOCMkuhsTIsVh6OrRqZ/bO4kJJejnTMwwNpncg= Subject key identifier: 4A:0D:19:D7:4A:3F:5A:BF:50:46:D6:77:32:2A:16:57:1E:9F:91:A2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4989F98CA3530EA01BCFA310 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:f9:8c:a3:53:0e:a0:1b:cf:a3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ebb2ed22-9132-4568-98e8-b30bf1ec56d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:ac:7d:fb:10:65:63:86:98:9d:d1:86:92: 31:97:bf:be:81:b3:06:68:a0:e9:54:b5:7c:92:a8: 32:41:d2:a4:54:31:06:e2:86:e8:00:c7:b9:4a:3d: 11:e3:35:ea:e6:4a:89:25:a8:4c:01:a0:57:bc:f9: 5e:8f:ca:78:1e:62:b4:21:09:17:56:94:a2:30:2c: e7:ab:07:c2:86:6c:96:37:e7:fd:6d:41:4f:82:ef: 48:64:c2:4f:c4:02:e8:b1:51:66:ff:83:9c:d3:01: bb:86:8b:cf:70:b2:8c:35:19:5a:bb:27:85:1e:3f: 61:91:06:19:47:0b:9c:da:2c:45:d9:0d:b6:0f:53: 3e:95:59:5a:d9:60:13:22:93:a5:f2:bc:0f:29:7d: 16:e7:b9:dc:26:41:66:5f:51:1b:05:f3:10:3d:da: 8a:a5:c3:de:fc:17:b1:15:10:02:31:6e:2d:61:61: 3a:dc:f9:96:df:0e:5e:57:43:fa:0c:33:7b:c6:6c: 41:00:f0:11:d2:b9:85:4f:de:b9:52:57:4c:15:fc: c0:38:05:37:d3:de:63:5d:7c:78:1c:17:55:67:8b: 8d:2c:07:cd:0b:d0:36:1d:24:43:12:bc:ef:56:44: 22:03:8a:16:f1:85:dd:90:16:81:2e:ff:53:4b:e4: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0D:19:D7:4A:3F:5A:BF:50:46:D6:77:32:2A:16:57:1E:9F:91:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d2:f0:d7:08:b2:73:19:17:b3:7f:d4:ee:11:d6:f8:ef:82: ff:af:f2:3d:c1:9a:db:b3:a0:18:41:b0:c0:35:75:6c:45:e4: 6f:46:10:82:fc:78:e6:7a:be:79:68:88:8b:5c:2b:99:87:79: de:80:30:9d:a1:00:58:7d:b8:a5:cd:31:c5:5e:dd:cd:66:c7: a3:28:4f:8a:dc:8b:9b:07:77:bb:42:79:4f:ab:8a:ee:41:ff: 04:56:c9:ed:cf:e2:29:5b:cc:dd:2b:a0:f4:c7:5c:eb:ce:71: 7f:a2:15:f4:29:42:fe:e9:a2:cf:df:3d:10:e3:71:39:c2:b7: 3e:35:32:c8:94:29:7f:cb:5b:03:36:49:66:41:3d:72:3d:2c: de:ce:13:a6:d3:8d:35:a5:82:46:6d:54:6d:2d:28:4e:b7:07: 4e:82:d3:d9:ab:9b:37:4b:d1:dc:05:79:be:ac:2c:1f:ab:cd: f1:7a:32:76:5c:85:52:e4:ca:ef:d1:9d:5d:80:6e:bd:20:ef: 83:b9:a2:a1:0a:a3:32:46:55:54:2f:6d:1f:f4:1d:0b:c5:83: 79:cb:9c:aa:93:fa:65:f3:ae:91:9b:61:40:1e:2a:ac:87:29: 04:52:ba:a8:05:e8:ed:ba:89:f1:37:1c:01:ca:1e:00:0f:ca: aa:78:97:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JifmMo1MOoBvPoxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWJiMmVkMjItOTEzMi00NTY4LTk4ZTgtYjMwYmYxZWM1NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu6sffsQZWOGmJ3RhpIxl7++gbMGaKDpVLV8 kqgyQdKkVDEG4oboAMe5Sj0R4zXq5kqJJahMAaBXvPlej8p4HmK0IQkXVpSiMCzn qwfChmyWN+f9bUFPgu9IZMJPxALosVFm/4Oc0wG7hovPcLKMNRlauyeFHj9hkQYZ Rwuc2ixF2Q22D1M+lVla2WATIpOl8rwPKX0W57ncJkFmX1EbBfMQPdqKpcPe/Bex FRACMW4tYWE63PmW3w5eV0P6DDN7xmxBAPAR0rmFT965UldMFfzAOAU3095jXXx4 HBdVZ4uNLAfNC9A2HSRDErzvVkQiA4oW8YXdkBaBLv9TS+TO+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEoNGddKP1q/UEbWdzIqFlcen5GiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzE0MzgyMWQtYjk1OS0z NzBmLWJjZWMtZjllNWJlMzRlZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABTS8NcIsnMZF7N/1O4R1vjvgv+v8j3BmtuzoBhBsMA1dWxF5G9G EIL8eOZ6vnloiItcK5mHed6AMJ2hAFh9uKXNMcVe3c1mx6MoT4rci5sHd7tCeU+r iu5B/wRWye3P4ilbzN0roPTHXOvOcX+iFfQpQv7pos/fPRDjcTnCtz41MsiUKX/L WwM2SWZBPXI9LN7OE6bTjTWlgkZtVG0tKE63B06C09mrmzdL0dwFeb6sLB+rzfF6 MnZchVLkyu/RnV2Abr0g74O5oqEKozJGVVQvbR/0HQvFg3nLnKqT+mXzrpGbYUAe KqyHKQRSuqgF6O26ifE3HAHKHgAPyqp4l5c= -----END CERTIFICATE-----Generated at Sun Sep 27 07:41:11 2026 by rpki-client