$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa File: 954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa (raw, json) Hash identifier: O1CKMEEUaoFQzplGrDS10ytV7xj/cK4mUODMWC9EJCI= Subject key identifier: 95:9C:67:41:D5:0B:C1:81:35:06:27:6A:FC:32:96:12:39:A8:E1:9F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49893E2432D7439D9E717B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:3e:24:32:d7:43:9d:9e:71:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0f37492a-4ebe-4585-a111-6465f983a798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:3c:b7:22:91:89:6b:46:a8:7e:0f:ce:a8: 9f:89:75:c2:03:79:52:ab:88:fe:c5:68:d3:49:3e: f2:02:4b:4f:1d:68:2a:25:3f:41:2b:73:18:3b:23: 43:16:eb:d8:c9:d1:fc:69:cd:a6:ea:8e:5c:c4:c4: 6d:d2:db:b4:5d:1a:4b:08:dd:8d:80:22:09:a3:b7: da:d7:bc:3c:ac:28:a4:62:a0:46:34:72:3f:f0:9f: 8c:3e:c6:38:99:f6:93:4e:91:4d:89:5f:b9:a9:f9: 46:45:53:2b:26:8d:05:67:71:df:74:54:88:15:28: 75:e2:ff:b2:c3:c3:04:06:a8:fe:67:99:9e:c5:0d: 46:31:49:d2:6b:07:2c:9b:80:a2:46:3c:17:01:1b: 16:9c:2c:5a:e0:a6:21:38:39:6d:d8:e6:3d:80:10: 61:65:be:3c:32:1a:01:ac:d2:64:b9:b8:32:72:19: 82:66:eb:ef:17:4f:7e:90:3d:b4:ff:b4:4f:0c:8a: 55:12:3e:3f:24:85:a6:e5:a8:a0:29:9d:9b:70:23: f6:e9:0a:78:b5:11:99:ef:1c:70:a1:78:a2:d3:49: c9:cd:df:19:29:dd:d2:0f:86:22:c4:03:ac:bf:d3: 47:99:12:70:ca:1d:4e:76:55:45:ca:32:f0:8e:2c: 70:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9C:67:41:D5:0B:C1:81:35:06:27:6A:FC:32:96:12:39:A8:E1:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d5:97:e1:02:52:f1:73:41:2b:b6:c4:cc:f5:16:47:5d:ff: 6e:40:90:9e:1c:51:73:94:02:b1:e2:3c:4c:3a:44:80:64:e0: 1f:c1:76:e9:ce:c8:b0:c1:bb:e5:2b:f9:8f:b5:ea:85:36:7d: 0a:80:f2:11:ce:8d:84:a4:67:93:6f:c4:54:00:15:db:28:a3: eb:69:ea:81:e9:27:fa:a4:cb:54:c8:e0:3f:f6:c4:2b:4a:a8: 96:dd:95:ed:bb:ee:c3:50:f4:03:b6:4f:a8:60:f2:82:bc:cf: 80:32:6f:48:e8:5f:a9:cd:0d:e7:de:87:bf:11:5d:1d:8c:19: 37:ac:5c:a5:12:94:12:0d:f5:0e:dc:f5:85:b6:44:c6:92:4e: 7f:08:7b:e4:b4:38:21:9a:58:80:ef:8b:d0:69:79:b2:0c:dd: e0:ad:dd:bf:5a:d3:8a:ec:c3:3f:21:7d:86:90:52:da:95:c6: 8d:85:d5:96:e3:23:39:80:27:4f:58:4f:9f:8b:fe:f9:00:15: cf:65:22:13:bd:70:ba:6c:ec:ab:25:62:22:ca:b1:01:96:e7: 88:d7:4f:95:e0:ef:c0:d8:29:b7:e1:7d:49:5c:72:7e:99:a5: f8:29:c5:e0:7b:5f:65:03:92:f2:c8:06:9a:4c:f7:6b:82:9e: 67:52:2b:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiT4kMtdDnZ5xe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGYzNzQ5MmEtNGViZS00NTg1LWExMTEtNjQ2NWY5ODNhNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAods8tyKRiWtGqH4PzqifiXXCA3lSq4j+xWjT ST7yAktPHWgqJT9BK3MYOyNDFuvYydH8ac2m6o5cxMRt0tu0XRpLCN2NgCIJo7fa 17w8rCikYqBGNHI/8J+MPsY4mfaTTpFNiV+5qflGRVMrJo0FZ3HfdFSIFSh14v+y w8MEBqj+Z5mexQ1GMUnSawcsm4CiRjwXARsWnCxa4KYhODlt2OY9gBBhZb48MhoB rNJkubgychmCZuvvF09+kD20/7RPDIpVEj4/JIWm5aigKZ2bcCP26Qp4tRGZ7xxw oXii00nJzd8ZKd3SD4YixAOsv9NHmRJwyh1OdlVFyjLwjixwAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJWcZ0HVC8GBNQYnavwylhI5qOGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTU0YzFkYWYtMGI2Yi0z N2QxLWI5ZmItNjc0ODc0NDdjN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHVl+ECUvFzQSu2xMz1Fkdd/25AkJ4cUXOUArHiPEw6RIBk4B/B dunOyLDBu+Ur+Y+16oU2fQqA8hHOjYSkZ5NvxFQAFdsoo+tp6oHpJ/qky1TI4D/2 xCtKqJbdle277sNQ9AO2T6hg8oK8z4Ayb0joX6nNDefeh78RXR2MGTesXKUSlBIN 9Q7c9YW2RMaSTn8Ie+S0OCGaWIDvi9BpebIM3eCt3b9a04rswz8hfYaQUtqVxo2F 1ZbjIzmAJ09YT5+L/vkAFc9lIhO9cLps7KslYiLKsQGW54jXT5Xg78DYKbfhfUlc cn6ZpfgpxeB7X2UDkvLIBppM92uCnmdSKwk= -----END CERTIFICATE-----Generated at Fri Sep 25 15:22:46 2026 by rpki-client