$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa File: 88e2c01c-1673-3937-8a2e-6b1b9270b195.roa (raw, json) Hash identifier: Q7WdJoTNC7bSI1dOdFoq2B6fd48pI4oRMjmYh3V1fGk= Subject key identifier: 43:5B:D7:6F:BE:BE:86:D8:08:42:C2:9D:3F:17:D5:F5:51:7E:91:EC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49741BC8AD03794245876F48 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:1b:c8:ad:03:79:42:45:87:6f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=08aecaf5-92e4-4d09-8452-98ad0ce4c220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:0b:3a:0e:89:c9:2b:0b:36:77:6f:1a:b9: a9:78:45:d0:bb:eb:87:10:2b:04:f1:22:d7:34:a1: 55:17:85:7c:f4:2c:32:ff:b6:50:a7:39:2c:11:4c: 06:29:ef:f3:1b:4c:2e:e1:d2:84:fc:f3:8c:f5:20: 32:3d:64:93:4b:85:ec:04:1b:63:57:69:34:8e:fd: 81:bb:78:33:b5:66:89:e7:64:c7:b8:9c:4e:36:31: 8c:bf:24:3b:fa:41:44:a5:b3:04:ca:04:13:4d:6e: 7a:2f:85:10:99:39:15:e3:53:4f:83:22:be:b0:9a: 7a:a4:dc:72:4e:41:6c:55:90:7c:2c:b6:74:dd:d2: e6:f9:32:40:21:0c:c6:6b:96:29:3e:25:7f:f4:03: cf:47:e8:cd:2e:9b:4d:a1:0d:6e:3c:fb:c4:94:97: bf:b8:13:18:7a:74:8e:40:49:4e:ed:f0:20:2e:fb: 84:14:36:d0:64:0f:40:e5:80:f5:9b:02:38:da:0d: bc:ee:33:e9:6d:21:21:67:07:1e:40:d9:01:9a:dd: c8:72:ff:2d:e7:ff:e6:c4:56:d7:60:7e:f2:37:8d: d0:13:79:62:fc:93:b3:e5:83:19:f7:6e:f7:d5:bf: 9a:49:04:24:b5:aa:cd:37:bb:99:7f:8d:4f:80:bb: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5B:D7:6F:BE:BE:86:D8:08:42:C2:9D:3F:17:D5:F5:51:7E:91:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c4:fc:a0:e7:51:65:7b:8f:45:76:eb:3c:69:80:d6:ba:80: f3:9a:76:f9:15:98:a8:87:4f:ed:c1:5f:0e:ab:68:f2:b0:dd: 6a:76:c0:2e:f2:23:9b:0b:47:6c:b8:75:e2:8d:ce:bf:ea:c4: c0:79:a8:6c:7f:71:60:1c:8d:6c:9f:ca:9f:38:fb:2a:2b:f1: 7a:1a:30:90:0b:f7:27:76:3c:b2:e9:be:97:a4:4f:d3:54:3c: de:70:31:bf:96:26:e4:da:ed:49:26:33:4b:28:c1:1a:1b:f9: af:aa:37:07:a9:c9:34:d7:c9:8f:b7:0d:51:63:d0:b1:b6:c4: 0b:9f:b4:c3:9f:43:bf:40:a5:ec:b1:1f:f4:62:96:f0:1c:b3: 5c:13:a6:a5:f2:93:40:3a:b1:3a:36:5b:73:7f:a6:07:ae:ee: 5c:41:15:e1:af:9c:de:5a:6a:58:a4:80:3d:9c:6d:7e:f8:3b: 99:de:11:a3:e6:75:eb:2d:be:ca:59:b9:73:d0:cb:d3:a5:bb: d5:b0:4e:1e:b3:2b:ee:bd:67:a7:1e:88:d3:22:8e:fa:fb:bf: cc:e6:5f:a4:51:e4:02:2c:2c:ee:4a:28:3c:8f:16:a4:a1:f8: 6e:4f:4b:e8:58:f3:bf:24:ec:e5:3d:32:f6:29:82:bc:47:76: 7e:39:ff:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdBvIrQN5QkWHb0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDhhZWNhZjUtOTJlNC00ZDA5LTg0NTItOThhZDBjZTRjMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW8LOg6JySsLNndvGrmpeEXQu+uHECsE8SLX NKFVF4V89Cwy/7ZQpzksEUwGKe/zG0wu4dKE/POM9SAyPWSTS4XsBBtjV2k0jv2B u3gztWaJ52THuJxONjGMvyQ7+kFEpbMEygQTTW56L4UQmTkV41NPgyK+sJp6pNxy TkFsVZB8LLZ03dLm+TJAIQzGa5YpPiV/9APPR+jNLptNoQ1uPPvElJe/uBMYenSO QElO7fAgLvuEFDbQZA9A5YD1mwI42g287jPpbSEhZwceQNkBmt3Icv8t5//mxFbX YH7yN43QE3li/JOz5YMZ92731b+aSQQktarNN7uZf41PgLtrewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENb12++vobYCELCnT8X1fVRfpHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODhlMmMwMWMtMTY3My0z OTM3LThhMmUtNmIxYjkyNzBiMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABfE/KDnUWV7j0V26zxpgNa6gPOadvkVmKiHT+3BXw6raPKw3Wp2 wC7yI5sLR2y4deKNzr/qxMB5qGx/cWAcjWyfyp84+yor8XoaMJAL9yd2PLLpvpek T9NUPN5wMb+WJuTa7UkmM0sowRob+a+qNwepyTTXyY+3DVFj0LG2xAuftMOfQ79A peyxH/RilvAcs1wTpqXyk0A6sTo2W3N/pgeu7lxBFeGvnN5aalikgD2cbX74O5ne EaPmdestvspZuXPQy9Olu9WwTh6zK+69Z6ceiNMijvr7v8zmX6RR5AIsLO5KKDyP FqSh+G5PS+hY878k7OU9MvYpgrxHdn45/1o= -----END CERTIFICATE-----Generated at Fri Sep 25 09:17:09 2026 by rpki-client