$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/951a5c50-6265-3ebc-bbd8-06b4dab77e7c.roa File: 951a5c50-6265-3ebc-bbd8-06b4dab77e7c.roa (raw, json) Hash identifier: z74XW1eEF5iVeC959GbmSn6hEl/zDnXQx/NcnraaF68= Subject key identifier: 2D:DB:73:A3:A6:93:BC:65:71:F7:5E:3A:77:34:42:6D:B1:13:14:1F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79D4085C0A60B6C2306E400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/951a5c50-6265-3ebc-bbd8-06b4dab77e7c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:40:85:c0:a6:0b:6c:23:06:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d78f2d8a-7875-4305-b655-e1d4d91b83e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:95:01:bd:d4:f2:27:c8:f6:0d:f5:f2:19: 0b:10:90:77:b0:b1:57:b0:4f:7d:fb:60:67:4c:ee: 5b:04:bf:83:74:d0:90:b4:26:f0:9c:9a:a1:99:c0: 20:0a:00:9e:49:fb:96:29:67:15:4b:c8:e2:bc:ed: 5b:60:08:7c:7a:63:cb:35:cb:bf:cb:a3:9d:34:c0: 26:36:b3:4c:b7:95:e5:ea:26:5b:07:73:e2:a4:5b: 40:55:d7:29:ce:f9:a0:70:ce:eb:25:7d:1f:7f:12: d3:b7:e4:63:8a:bc:54:5a:f1:a4:26:43:e5:fd:8f: a3:e1:f0:24:cc:62:17:99:77:8e:50:2e:4c:32:75: 7f:ac:72:28:9d:da:f4:07:0e:c1:8b:48:42:c5:62: aa:cd:11:c3:3f:5e:98:9e:bd:cf:3c:7a:b4:3c:cf: 67:30:aa:04:1d:0f:f0:94:25:38:b7:6f:2e:44:33: e3:e2:af:39:10:80:60:1c:fb:9c:7c:68:c7:d8:c9: 64:98:ad:3f:92:46:30:41:f1:d5:ab:96:09:7f:76: aa:19:96:06:57:7d:88:df:50:21:b5:54:c7:40:63: 69:b4:b0:54:51:c6:d0:5d:2f:bd:4f:be:ed:7f:fb: 54:40:f2:8e:90:26:78:36:1c:2e:03:ff:9d:ad:53: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DB:73:A3:A6:93:BC:65:71:F7:5E:3A:77:34:42:6D:B1:13:14:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/951a5c50-6265-3ebc-bbd8-06b4dab77e7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:88:94:e9:1b:b7:02:38:5c:ce:f7:0b:88:bd:c6:d8:31:9b: 3b:a9:15:89:4d:fa:e7:11:e7:5c:65:92:a9:cd:72:06:82:fc: 4f:51:8a:1e:3c:8d:92:af:aa:b9:0a:ba:83:7c:9c:bf:b1:03: c1:06:2d:9e:e6:19:ff:be:c4:5e:4d:40:f7:04:25:26:99:5e: e5:00:88:60:b4:90:19:39:a5:36:5a:b5:61:62:c2:be:3b:b2: d1:34:98:f9:69:93:cd:5d:53:60:cc:e7:07:bc:d9:21:e1:44: 2d:19:f5:25:d0:c6:10:11:63:ee:46:90:47:90:c0:89:a8:b1: 4e:7d:b1:2b:80:0e:19:dc:ae:bf:58:3f:3b:85:2f:d4:b1:2f: 7c:6d:32:34:24:48:af:e9:47:6a:91:ca:55:99:81:0d:cd:ee: c4:eb:fb:40:79:d1:09:1f:9a:c0:65:8d:9a:9d:03:45:d9:37: 01:a4:a5:c6:c3:01:08:54:aa:ca:25:5b:1a:1a:fc:5c:f1:40: 4a:19:9d:02:2e:c4:95:1d:62:90:ee:ce:3b:f8:00:68:7b:3d: 3c:d2:34:7f:c7:e4:f3:5e:00:ca:1a:f7:91:72:a7:dd:3e:29: b2:bf:9d:74:25:10:58:19:62:4a:16:11:c3:de:cf:e6:89:93: 31:a5:09:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnUCFwKYLbCMG5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDc4ZjJkOGEtNzg3NS00MzA1LWI2NTUtZTFkNGQ5MWI4M2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eSVAb3U8ifI9g318hkLEJB3sLFXsE99+2Bn TO5bBL+DdNCQtCbwnJqhmcAgCgCeSfuWKWcVS8jivO1bYAh8emPLNcu/y6OdNMAm NrNMt5Xl6iZbB3PipFtAVdcpzvmgcM7rJX0ffxLTt+RjirxUWvGkJkPl/Y+j4fAk zGIXmXeOUC5MMnV/rHIondr0Bw7Bi0hCxWKqzRHDP16Ynr3PPHq0PM9nMKoEHQ/w lCU4t28uRDPj4q85EIBgHPucfGjH2MlkmK0/kkYwQfHVq5YJf3aqGZYGV32I31Ah tVTHQGNptLBUUcbQXS+9T77tf/tUQPKOkCZ4NhwuA/+drVMxkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC3bc6Omk7xlcfdeOnc0Qm2xExQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTUxYTVjNTAtNjI2NS0z ZWJjLWJiZDgtMDZiNGRhYjc3ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmIlOkbtwI4XM73C4i9xtgxmzupFYlN+ucR51xlkqnNcgaC/E9R ih48jZKvqrkKuoN8nL+xA8EGLZ7mGf++xF5NQPcEJSaZXuUAiGC0kBk5pTZatWFi wr47stE0mPlpk81dU2DM5we82SHhRC0Z9SXQxhARY+5GkEeQwImosU59sSuADhnc rr9YPzuFL9SxL3xtMjQkSK/pR2qRylWZgQ3N7sTr+0B50QkfmsBljZqdA0XZNwGk pcbDAQhUqsolWxoa/FzxQEoZnQIuxJUdYpDuzjv4AGh7PTzSNH/H5PNeAMoa95Fy p90+KbK/nXQlEFgZYkoWEcPez+aJkzGlCSU= -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:17 2026 by rpki-client