$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa File: 954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa (raw, json) Hash identifier: oem5B4eKClITtE6a3mMnmuQZoxximrNQ+CgoU+Wug/Y= Subject key identifier: F0:36:40:98:F9:34:C0:98:B2:E9:AE:7A:0D:67:32:B1:59:43:9B:C2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA7A0C0228A0AFDF892D16E80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:c0:22:8a:0a:fd:f8:92:d1:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cedf46de-b292-4d04-aada-137b60609fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:ab:ce:6d:63:e0:74:09:a7:dd:67:d7:25: f6:40:b6:4d:0e:98:98:fb:78:c2:a3:06:5c:9c:9b: fb:50:55:20:25:59:8c:13:e9:95:55:61:44:de:9c: 8f:4d:5b:3e:6b:d7:6a:9f:ea:dd:d9:e4:b0:90:8d: eb:08:61:5d:fd:19:21:67:95:7e:aa:b4:28:32:45: 0d:9f:62:5f:20:32:d2:de:08:92:25:35:eb:49:1c: 50:54:33:2a:aa:8a:fa:40:87:e2:66:dc:5e:f2:f5: 29:c9:a9:a3:2d:dd:00:ca:75:3d:66:08:8e:4b:f1: 40:cc:3c:4a:16:a1:8b:54:9a:9e:75:93:cd:2b:4b: e6:1f:0f:8f:48:1e:71:f7:85:38:f2:6d:6d:36:eb: 55:16:01:f8:8a:c0:99:bd:82:92:23:ef:ce:0c:fe: 49:3d:c7:f1:9d:9f:a5:d7:1d:08:01:4a:60:62:06: 1d:f5:3f:36:bd:4c:af:c4:8d:11:59:b2:0d:58:ba: e5:60:cb:63:35:e6:0a:08:b7:55:45:1f:21:81:09: ca:a7:ae:8a:f1:53:fb:b1:3f:ff:98:37:6b:bc:ea: 6c:6e:a3:ba:10:40:44:d5:a6:50:dc:b4:1a:19:e9: 7d:49:6e:76:2f:d3:75:56:92:1b:cc:ca:52:bc:ca: 47:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:36:40:98:F9:34:C0:98:B2:E9:AE:7A:0D:67:32:B1:59:43:9B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:53:1d:40:35:eb:56:66:fb:0f:e5:5e:5d:00:fc:27:05:6c: 06:9b:15:d0:39:e1:14:24:b1:85:21:bc:de:57:88:c2:33:d8: 2b:19:26:0c:12:7c:f1:43:d3:0e:75:b2:33:ed:a3:6f:bb:3b: ca:e1:b2:c5:81:ad:6b:31:77:5b:43:5d:b5:b3:86:9e:47:3a: fb:3e:a3:62:3a:c3:7b:eb:e0:21:f8:95:0f:4e:f5:10:5b:80: 08:54:7b:e0:1e:45:c4:b1:ea:77:e4:c6:53:44:92:a9:c3:ed: ba:a6:d2:f9:06:d0:86:2d:0c:e7:fd:cf:cd:64:2d:53:da:6b: 5d:99:66:25:8d:3a:e6:1a:81:09:cb:58:35:5b:c8:3f:0f:7c: 96:a8:86:9a:d3:68:bf:a1:25:66:53:7b:0d:71:af:97:c2:8e: 70:c7:f4:d6:3d:f9:b5:fe:3b:9a:ae:e7:95:0f:bd:5b:66:36: fd:f9:2b:5a:d5:70:10:d1:07:05:3b:86:14:87:89:cc:63:0c: 1c:5a:83:60:80:7a:34:2b:1f:2d:ff:75:6e:42:4a:87:6c:7c: a5:16:1f:7c:ce:03:9d:ce:e4:c7:e7:a2:a5:fc:ae:fa:98:6a: 17:6e:6f:1e:6c:23:d0:23:be:dd:95:14:0a:cf:9e:0e:10:db: f0:69:8b:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noMAiigr9+JLRboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2VkZjQ2ZGUtYjI5Mi00ZDA0LWFhZGEtMTM3YjYwNjA5ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMKrzm1j4HQJp91n1yX2QLZNDpiY+3jCowZc nJv7UFUgJVmME+mVVWFE3pyPTVs+a9dqn+rd2eSwkI3rCGFd/RkhZ5V+qrQoMkUN n2JfIDLS3giSJTXrSRxQVDMqqor6QIfiZtxe8vUpyamjLd0AynU9ZgiOS/FAzDxK FqGLVJqedZPNK0vmHw+PSB5x94U48m1tNutVFgH4isCZvYKSI+/ODP5JPcfxnZ+l 1x0IAUpgYgYd9T82vUyvxI0RWbINWLrlYMtjNeYKCLdVRR8hgQnKp66K8VP7sT// mDdrvOpsbqO6EEBE1aZQ3LQaGel9SW52L9N1VpIbzMpSvMpHiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPA2QJj5NMCYsumueg1nMrFZQ5vCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTU0YzFkYWYtMGI2Yi0z N2QxLWI5ZmItNjc0ODc0NDdjN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADBTHUA161Zm+w/lXl0A/CcFbAabFdA54RQksYUhvN5XiMIz2CsZ JgwSfPFD0w51sjPto2+7O8rhssWBrWsxd1tDXbWzhp5HOvs+o2I6w3vr4CH4lQ9O 9RBbgAhUe+AeRcSx6nfkxlNEkqnD7bqm0vkG0IYtDOf9z81kLVPaa12ZZiWNOuYa gQnLWDVbyD8PfJaohprTaL+hJWZTew1xr5fCjnDH9NY9+bX+O5qu55UPvVtmNv35 K1rVcBDRBwU7hhSHicxjDBxag2CAejQrHy3/dW5CSodsfKUWH3zOA53O5MfnoqX8 rvqYahdubx5sI9Ajvt2VFArPng4Q2/Bpi1g= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:45 2026 by rpki-client