$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa File: 8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa (raw, json) Hash identifier: EnzJklTHZCfdsJgrCyhu5js3XRFrR+0DK2OnCzCmeDc= Subject key identifier: 2C:4C:80:EE:FF:9F:F0:F5:D5:B9:2E:FA:8D:5F:21:31:7E:3D:51:95 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA7A0CA7BC194D292A9E4AD20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:ca:7b:c1:94:d2:92:a9:e4:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4d854608-e578-40a9-87dc-40c087396a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:96:a8:53:21:6f:01:a7:5d:bb:2e:ba:92: 94:f4:61:05:36:54:12:4b:2f:66:56:de:a7:97:7e: 63:ab:6a:0f:a5:a3:cf:c6:bd:9d:ba:f2:b0:96:2f: 8a:20:31:a8:e2:65:84:7f:49:63:1b:aa:18:ec:dc: ac:0d:20:e9:c9:45:9b:6d:05:e7:e8:5c:5e:7d:fb: 8b:11:8c:74:b5:ec:25:b1:21:38:b7:95:6b:4d:42: d6:54:9c:6b:16:8f:60:c5:d6:d8:42:49:94:a7:4e: 49:65:98:00:e9:e9:5c:80:61:7c:4c:e0:dc:c8:81: 12:88:fa:fa:8d:25:7b:c4:f9:35:50:f8:ba:ac:d7: 4e:a1:32:0c:44:26:35:5d:37:9e:8c:f9:08:0a:d5: ab:ac:2f:2d:82:7f:be:5d:bc:6d:b2:cb:fc:53:ab: c8:83:69:12:e6:a1:94:dd:13:5b:04:55:e5:9c:08: 1b:50:e5:a3:57:34:18:03:1e:2a:e9:ee:53:9f:b3: b2:34:b4:ed:61:9d:5a:36:2e:41:06:a8:3e:63:ea: 2e:0c:5c:6c:5b:d7:e6:3e:c6:13:47:48:be:08:2e: ab:5b:5c:0d:81:1a:14:ec:29:46:e3:e5:cb:6d:5c: ca:8d:c5:86:56:2a:2a:1c:6c:53:40:25:f7:e6:f2: 5e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4C:80:EE:FF:9F:F0:F5:D5:B9:2E:FA:8D:5F:21:31:7E:3D:51:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:54::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5d:02:c2:0a:4e:86:c9:f1:fb:5f:fc:55:85:32:31:c2:4c: ec:d4:20:f5:14:c9:4e:fa:28:34:ca:6d:9b:a1:ee:87:4d:57: ff:4d:74:83:d0:c0:02:b4:48:18:08:58:ee:ac:d1:96:ae:b1: 71:30:a3:0b:4c:c4:41:2f:d3:67:7e:97:0d:ab:d4:e1:09:a5: 61:72:38:97:31:3d:3d:69:3b:d8:18:7c:be:f4:f6:2e:a1:05: 9b:53:e6:4f:30:23:f9:d0:48:5b:b1:6d:97:dd:11:c7:b5:61: 63:f2:5e:31:dd:ec:0e:55:e8:74:84:6b:2f:74:b9:1a:10:41: 1b:3b:9c:5f:62:68:29:42:44:c5:c1:71:49:3b:86:86:e4:e6: ad:e0:bb:6c:d0:f9:82:12:b9:3a:ea:55:60:ac:96:5d:eb:39: 8e:fd:a8:d6:0e:67:ab:2f:6c:50:c5:26:e1:10:6a:30:55:24: 24:ec:38:2c:34:a5:a9:00:ba:e8:bd:e3:21:ec:34:0e:a5:3a: e4:e3:60:14:a7:89:8d:d1:63:a8:50:ba:f4:d6:c8:29:13:ef: 0a:f6:d6:29:19:18:12:83:93:8f:61:54:16:f4:b8:c6:b7:2a: 0a:3b:5b:f3:d6:f3:10:58:41:f9:53:d3:fd:c3:ef:24:df:2d: 18:d7:e4:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noMp7wZTSkqnkrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGQ4NTQ2MDgtZTU3OC00MGE5LTg3ZGMtNDBjMDg3Mzk2YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pCWqFMhbwGnXbsuupKU9GEFNlQSSy9mVt6n l35jq2oPpaPPxr2duvKwli+KIDGo4mWEf0ljG6oY7NysDSDpyUWbbQXn6FxeffuL EYx0tewlsSE4t5VrTULWVJxrFo9gxdbYQkmUp05JZZgA6elcgGF8TODcyIESiPr6 jSV7xPk1UPi6rNdOoTIMRCY1XTeejPkICtWrrC8tgn++Xbxtssv8U6vIg2kS5qGU 3RNbBFXlnAgbUOWjVzQYAx4q6e5Tn7OyNLTtYZ1aNi5BBqg+Y+ouDFxsW9fmPsYT R0i+CC6rW1wNgRoU7ClG4+XLbVzKjcWGVioqHGxTQCX35vJeqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCxMgO7/n/D11bku+o1fITF+PVGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGU5ZmRjMDQtNmQyOS0z NjAwLWE5OGItYTg0OWZmNmQxZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZdAsIKTobJ8ftf/FWFMjHCTOzUIPUUyU76KDTKbZuh7odNV/9N dIPQwAK0SBgIWO6s0ZausXEwowtMxEEv02d+lw2r1OEJpWFyOJcxPT1pO9gYfL70 9i6hBZtT5k8wI/nQSFuxbZfdEce1YWPyXjHd7A5V6HSEay90uRoQQRs7nF9iaClC RMXBcUk7hobk5q3gu2zQ+YISuTrqVWCsll3rOY79qNYOZ6svbFDFJuEQajBVJCTs OCw0pakAuui94yHsNA6lOuTjYBSniY3RY6hQuvTWyCkT7wr21ikZGBKDk49hVBb0 uMa3Kgo7W/PW8xBYQflT0/3D7yTfLRjX5Mw= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:26 2026 by rpki-client