$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa File: 91a41c4e-b0c0-3279-9cb1-3434d5687478.roa (raw, json) Hash identifier: sr23CiEZweL6Ku1tdJoPDLl8jQ5Vs/oQf4FNYI1eGNc= Subject key identifier: 99:BA:A8:70:96:3B:9C:E2:E3:A8:19:86:ED:04:A6:90:F8:19:49:B2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA7A0B7EEF5ACFE35FBD07080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:b7:ee:f5:ac:fe:35:fb:d0:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d3fae24f-ea24-4be6-8a46-bb2b8f45d856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:ac:2d:a5:98:f4:62:8d:2f:57:fe:53:6f: e7:13:3e:4a:47:97:e2:c4:b7:ae:e9:79:e1:84:29: 43:27:11:41:97:7a:ad:f8:1f:6e:ad:91:4b:3b:f6: d3:44:1e:a5:2c:95:16:c0:9e:87:21:c9:30:6c:59: 49:63:3d:16:29:37:f4:22:8a:e7:31:fe:20:7e:3e: f3:30:e5:b9:d2:25:d2:30:af:ee:27:72:92:c7:03: c9:b4:f4:fb:0a:87:2c:68:e7:5b:ff:7a:d5:6f:b3: 8b:02:5b:99:93:28:45:31:93:cc:c2:c4:24:c3:46: 9b:79:d6:ba:da:54:7f:35:e2:4a:2e:9f:56:a3:88: 88:46:64:4c:26:d2:92:49:66:38:73:83:4f:13:9a: 46:a8:74:c8:50:ce:9e:2f:bf:18:4c:3a:93:60:0f: dd:69:9f:8f:c5:c8:04:cc:90:53:43:be:95:cf:3f: 7d:4a:86:c8:43:31:bc:56:a3:a8:f1:6d:50:01:bd: ca:bf:a3:7e:7c:d8:a3:03:95:cc:f6:b3:56:47:bf: b3:d2:85:d5:71:f9:53:77:95:d9:01:40:c9:2e:46: 79:f2:76:f4:02:13:78:6f:dd:12:cb:a5:d9:c0:35: 99:cf:77:a3:73:45:fc:36:ea:3a:a1:e3:4d:d8:90: 6c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BA:A8:70:96:3B:9C:E2:E3:A8:19:86:ED:04:A6:90:F8:19:49:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:dc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:9e:d8:14:7f:65:c6:7d:e0:ba:65:3c:ed:56:2e:c0:bc:b1: 14:01:93:0a:cd:64:ee:2b:a4:02:8d:52:48:9a:96:88:25:e4: 50:91:0f:7d:a5:43:29:9d:7b:97:06:b4:30:3e:ed:23:01:18: c6:14:d8:1b:05:c2:c5:47:5e:64:c5:8b:4b:af:4f:94:25:64: af:8a:4b:28:e5:b2:b9:63:63:2e:0c:70:d0:49:73:4f:b7:91: cb:5d:c6:73:b5:92:37:66:dd:4c:80:2b:6f:63:a8:de:5e:de: 40:fe:eb:9e:aa:57:ee:fe:b7:6c:22:ec:a0:4b:cd:4f:18:f3: 94:85:b0:fd:8f:3b:54:50:62:7f:7d:8d:03:db:a7:cd:44:d3: d9:51:f6:4c:1e:42:79:ce:30:3e:ba:f0:8e:70:91:e8:94:91: 17:e6:9a:13:98:6e:81:0e:76:a2:3e:73:4c:af:05:48:fb:6f: df:45:a6:bb:6f:d3:24:73:99:5b:1f:74:c1:70:e2:06:97:1a: 2c:85:fe:a2:ac:e7:a6:c8:e2:57:91:e2:7a:c2:55:fd:11:1b: 91:bc:9f:c1:53:e2:39:92:af:3a:5b:36:bb:20:5f:f5:68:e8: 96:a0:43:2e:e1:ad:74:8c:ab:f2:03:7e:3a:bf:88:4a:0c:aa: 2d:32:ff:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noLfu9az+NfvQcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDNmYWUyNGYtZWEyNC00YmU2LThhNDYtYmIyYjhmNDVkODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYGsLaWY9GKNL1f+U2/nEz5KR5fixLeu6Xnh hClDJxFBl3qt+B9urZFLO/bTRB6lLJUWwJ6HIckwbFlJYz0WKTf0IornMf4gfj7z MOW50iXSMK/uJ3KSxwPJtPT7CocsaOdb/3rVb7OLAluZkyhFMZPMwsQkw0abeda6 2lR/NeJKLp9Wo4iIRmRMJtKSSWY4c4NPE5pGqHTIUM6eL78YTDqTYA/daZ+PxcgE zJBTQ76Vzz99SobIQzG8VqOo8W1QAb3Kv6N+fNijA5XM9rNWR7+z0oXVcflTd5XZ AUDJLkZ58nb0AhN4b90Sy6XZwDWZz3ejc0X8Nuo6oeNN2JBsgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJm6qHCWO5zi46gZhu0EppD4GUmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTFhNDFjNGUtYjBjMC0z Mjc5LTljYjEtMzQzNGQ1Njg3NDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALOe2BR/ZcZ94LplPO1WLsC8sRQBkwrNZO4rpAKNUkialogl5FCR D32lQymde5cGtDA+7SMBGMYU2BsFwsVHXmTFi0uvT5QlZK+KSyjlsrljYy4McNBJ c0+3kctdxnO1kjdm3UyAK29jqN5e3kD+656qV+7+t2wi7KBLzU8Y85SFsP2PO1RQ Yn99jQPbp81E09lR9kweQnnOMD668I5wkeiUkRfmmhOYboEOdqI+c0yvBUj7b99F prtv0yRzmVsfdMFw4gaXGiyF/qKs56bI4leR4nrCVf0RG5G8n8FT4jmSrzpbNrsg X/Vo6JagQy7hrXSMq/IDfjq/iEoMqi0y/5c= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:26 2026 by rpki-client