$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa File: 95be4890-2931-3ddc-9628-15449cfd5f27.roa (raw, json) Hash identifier: vsL6gJyJOiVo7tHPWIMO9EpuGj35Ns75x/IoY4FLpzM= Subject key identifier: 08:61:C0:8C:7D:D6:A3:03:8F:89:D0:18:EA:ED:63:F6:DA:92:58:81 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA7A0F0C238A46D5B27C18B40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:f0:c2:38:a4:6d:5b:27:c1:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=816b9b3c-9326-4d51-ae02-1eb0915edbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:06:5f:b4:f4:47:d3:9a:cd:9f:ac:14:6c:88: 80:69:6e:f1:06:36:cf:20:8f:31:0c:4b:45:21:18: b8:32:36:c4:cb:11:13:0a:16:6f:fe:79:2c:e8:c2: 27:05:0d:09:fd:39:82:d1:19:52:f9:83:6a:49:40: 40:7d:d7:6b:14:e2:62:a3:72:13:00:6a:c6:e0:a3: bd:f0:0b:04:0b:f4:13:1f:df:ec:41:e3:3a:b6:40: fa:87:ab:6f:60:8c:76:07:c8:a2:fb:3b:66:e2:37: 5c:43:3e:ec:4e:2c:77:61:c5:91:54:6e:b3:8b:34: f0:c4:12:ef:ce:90:ad:98:3d:0b:74:9c:11:00:30: 0f:e0:a0:a3:78:e2:a6:67:9a:9d:af:34:5b:c7:1b: 24:6f:5e:f6:fb:d9:3e:e2:44:68:06:44:78:8e:96: 7d:5e:16:fa:85:ab:d2:00:fb:bb:bc:fb:26:5b:db: 63:d2:9d:db:91:22:70:c7:44:78:2d:58:e1:30:26: 1d:d7:b9:4e:ec:17:a1:a5:32:0a:92:20:aa:2c:b8: 2d:10:4a:dc:13:f9:a7:15:08:0b:e8:76:0d:71:d9: 87:73:5e:93:d8:b0:06:ad:2d:ef:1c:f6:bc:61:ea: e9:1a:26:7f:50:7b:fb:20:37:d2:cc:87:f3:a8:62: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:61:C0:8C:7D:D6:A3:03:8F:89:D0:18:EA:ED:63:F6:DA:92:58:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:50:21:ab:b4:2d:de:ef:63:90:1e:f5:59:b2:05:29:d1:32: 0a:27:c1:56:2f:4e:ac:84:5c:c7:8d:98:1b:85:9b:07:71:1c: 6a:66:b7:f0:e5:a3:e7:53:aa:44:2f:82:36:35:eb:1e:e1:64: 18:66:4f:52:6d:3c:b9:2f:33:80:61:10:69:ae:ed:01:e8:5d: e3:cf:15:f5:85:fa:b7:a8:ea:b5:52:ed:48:86:9f:1e:42:78: f9:30:ac:8a:c0:9a:c1:e5:09:26:7c:8b:75:05:6d:6c:54:d1: b8:cb:95:a0:64:46:4c:18:b1:49:14:84:d2:0d:bd:d9:ed:43: 82:1c:33:8e:96:92:ab:1d:0f:e7:c5:b5:b4:02:67:94:f3:83: 92:89:4a:e9:1d:08:47:b3:85:7a:36:cb:1b:08:1b:5d:59:a8: a3:ea:f9:6a:71:23:98:08:ef:83:d0:cf:61:16:e8:6e:1a:b5: aa:ba:fb:d2:7e:34:30:ce:65:c4:c1:0a:74:8b:de:b4:da:ea: 48:74:3b:d3:98:8f:25:ce:07:fe:85:5a:bd:44:90:ea:02:1a: 78:ca:f0:84:27:de:f7:e4:7b:b3:08:34:0d:0f:9e:c7:39:b4: 17:26:71:e0:f5:76:0c:3a:d7:a5:32:53:50:ee:05:8c:e8:75: db:f5:c2:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noPDCOKRtWyfBi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODE2YjliM2MtOTMyNi00ZDUxLWFlMDItMWViMDkxNWVkYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQZftPRH05rNn6wUbIiAaW7xBjbPII8xDEtF IRi4MjbEyxETChZv/nks6MInBQ0J/TmC0RlS+YNqSUBAfddrFOJio3ITAGrG4KO9 8AsEC/QTH9/sQeM6tkD6h6tvYIx2B8ii+ztm4jdcQz7sTix3YcWRVG6zizTwxBLv zpCtmD0LdJwRADAP4KCjeOKmZ5qdrzRbxxskb172+9k+4kRoBkR4jpZ9Xhb6havS APu7vPsmW9tj0p3bkSJwx0R4LVjhMCYd17lO7BehpTIKkiCqLLgtEErcE/mnFQgL 6HYNcdmHc16T2LAGrS3vHPa8YerpGiZ/UHv7IDfSzIfzqGICNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAhhwIx91qMDj4nQGOrtY/bakliBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTViZTQ4OTAtMjkzMS0z ZGRjLTk2MjgtMTU0NDljZmQ1ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAARQIau0Ld7vY5Ae9VmyBSnRMgonwVYvTqyEXMeNmBuFmwdxHGpm t/Dlo+dTqkQvgjY16x7hZBhmT1JtPLkvM4BhEGmu7QHoXePPFfWF+reo6rVS7UiG nx5CePkwrIrAmsHlCSZ8i3UFbWxU0bjLlaBkRkwYsUkUhNINvdntQ4IcM46Wkqsd D+fFtbQCZ5Tzg5KJSukdCEezhXo2yxsIG11ZqKPq+WpxI5gI74PQz2EW6G4ataq6 +9J+NDDOZcTBCnSL3rTa6kh0O9OYjyXOB/6FWr1EkOoCGnjK8IQn3vfke7MINA0P nsc5tBcmceD1dgw616UyU1DuBYzoddv1wr4= -----END CERTIFICATE-----Generated at Wed Jul 29 08:14:15 2026 by rpki-client