$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa File: a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa (raw, json) Hash identifier: HecFXWlfc5QoAh+2Py24eg72yBqPIeHTcKUarWpRme4= Subject key identifier: D2:8A:BC:0F:98:39:E6:C4:D2:CE:88:61:61:01:CD:07:4F:86:30:CC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79D28C9DE3A7DE39AA88F40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:28:c9:de:3a:7d:e3:9a:a8:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6d17ffca-0c9e-4bc4-9ed5-7d71d80dfc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:c7:2e:e9:c4:21:37:c2:b2:e7:e7:dd:3c: 3e:0d:29:47:0f:20:77:7c:6e:cd:4f:70:ea:25:b7: c7:36:bd:af:8d:cf:8c:9f:a6:08:9c:3b:14:c7:34: b3:30:3b:b3:08:2a:6b:f7:e2:c2:95:ce:7d:0c:0b: e6:6d:6e:5e:74:33:fe:a0:c4:c5:48:b1:30:ee:43: af:53:18:f3:f3:48:a4:15:5d:e9:29:f0:6b:c5:f2: ca:b5:94:33:2c:9a:fe:62:d4:af:07:90:0f:07:9a: 2a:e2:c4:ea:85:b3:ba:f4:ca:d4:85:6c:c5:74:6a: 12:26:38:1e:f9:91:e1:80:93:cb:40:d3:41:fb:cb: c7:c9:44:75:16:88:f4:1f:a1:54:d3:2f:52:92:a8: 73:b9:3c:1a:23:ec:1a:ff:98:78:35:a6:92:ad:e5: 68:80:c6:fc:6e:be:51:67:7a:6f:91:49:80:55:81: f8:e1:47:dc:a7:dc:27:34:7a:89:95:22:9b:a5:d0: 82:a8:8e:39:1e:d0:13:c4:30:08:e8:e6:b4:74:98: ee:37:68:fe:8b:2b:4c:3b:14:05:6e:6d:e0:eb:03: a3:ba:e3:49:74:8c:f9:db:04:ed:ef:8e:54:58:9f: 42:40:a9:cc:38:31:91:3d:62:0a:54:81:11:b2:62: c4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8A:BC:0F:98:39:E6:C4:D2:CE:88:61:61:01:CD:07:4F:86:30:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:23:42:72:35:58:ac:f8:88:13:9b:57:28:9e:b4:e4:1b:8d: ef:62:9e:e6:bc:00:e7:39:1e:08:ce:5f:8e:31:0b:51:21:d3: 56:f3:28:81:cc:39:0d:c2:12:15:41:56:6e:a7:3b:55:f9:36: 8a:a7:53:de:e5:13:c9:d9:de:f0:73:4e:01:8e:ad:96:39:63: 9d:7d:09:ed:d9:b5:53:a8:5a:db:16:47:65:25:f0:a7:d6:51: 5b:36:39:d4:88:53:a1:7a:7d:b8:ab:ca:10:d4:4f:96:fa:38: f1:79:f5:51:b8:65:4a:32:a0:36:f7:ab:65:96:25:3b:e2:ad: 82:9e:bb:17:57:3f:49:a5:19:c4:4b:4c:0d:2b:70:8e:71:9a: 76:c1:dc:6d:9a:09:df:99:36:de:d2:ef:d7:85:18:90:3e:94: 62:68:ec:31:46:f0:ae:4b:89:6c:64:83:99:10:13:00:0a:b8: 12:10:1a:ef:33:1f:28:b7:ee:a1:8b:ce:99:b0:46:4a:79:b5: 07:72:f9:c6:a0:de:c7:6c:6d:00:32:c5:88:79:c1:55:e4:27: 7e:68:c5:43:70:64:07:ba:4a:c9:f5:cd:8f:cc:ca:d3:87:d9: 3f:ac:d9:e2:49:c5:c8:a3:cf:14:1f:78:b2:de:fa:35:32:79: 8b:4c:09:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnSjJ3jp945qoj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmQxN2ZmY2EtMGM5ZS00YmM0LTllZDUtN2Q3MWQ4MGRmYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI3HLunEITfCsufn3Tw+DSlHDyB3fG7NT3Dq JbfHNr2vjc+Mn6YInDsUxzSzMDuzCCpr9+LClc59DAvmbW5edDP+oMTFSLEw7kOv Uxjz80ikFV3pKfBrxfLKtZQzLJr+YtSvB5APB5oq4sTqhbO69MrUhWzFdGoSJjge +ZHhgJPLQNNB+8vHyUR1Foj0H6FU0y9SkqhzuTwaI+wa/5h4NaaSreVogMb8br5R Z3pvkUmAVYH44Ufcp9wnNHqJlSKbpdCCqI45HtATxDAI6Oa0dJjuN2j+iytMOxQF bm3g6wOjuuNJdIz52wTt745UWJ9CQKnMODGRPWIKVIERsmLEHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNKKvA+YOebE0s6IYWEBzQdPhjDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTBjYzg0MWUtYWE2ZS0z NDMyLWFmMjYtNjE2MjFmOGFiM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABojQnI1WKz4iBObVyietOQbje9inua8AOc5HgjOX44xC1Eh01bz KIHMOQ3CEhVBVm6nO1X5NoqnU97lE8nZ3vBzTgGOrZY5Y519Ce3ZtVOoWtsWR2Ul 8KfWUVs2OdSIU6F6fbiryhDUT5b6OPF59VG4ZUoyoDb3q2WWJTvirYKeuxdXP0ml GcRLTA0rcI5xmnbB3G2aCd+ZNt7S79eFGJA+lGJo7DFG8K5LiWxkg5kQEwAKuBIQ Gu8zHyi37qGLzpmwRkp5tQdy+cag3sdsbQAyxYh5wVXkJ35oxUNwZAe6Ssn1zY/M ytOH2T+s2eJJxcijzxQfeLLe+jUyeYtMCeo= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:39 2026 by rpki-client