$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa File: a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa (raw, json) Hash identifier: du7WNLAXqtYmvhLdf2nGTKryJVHdNFGPBq/nikQV/Co= Subject key identifier: A3:CC:E4:3A:79:78:DD:C3:67:7A:E6:99:1D:52:9C:B9:B5:69:82:28 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79D05568E478343F1ACB480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:05:56:8e:47:83:43:f1:ac:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=23485339-f043-402c-b69a-c39295c7ef6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:99:70:e3:13:6c:07:d0:0b:02:3d:31:fb: fd:6d:4f:4b:e4:0b:29:af:e9:f8:5a:d4:23:11:b4: 90:66:2e:33:b5:69:43:12:48:4e:01:1d:f7:fe:53: cc:e3:dc:1a:a8:b3:8e:a2:5d:89:c4:ad:7a:23:14: 0e:d7:19:a8:79:d6:4c:e6:ee:2e:c3:ad:e1:ee:a4: cb:44:21:bb:eb:82:03:31:7b:af:55:7d:ca:83:3f: cb:e7:83:98:d0:51:97:ef:8d:5f:68:9e:b1:da:47: 3e:5f:ef:fe:63:70:07:75:5a:30:23:4a:42:2b:d2: 3b:c0:d9:5a:17:a3:f2:84:f5:be:a3:db:76:54:d9: 13:cd:3f:89:b4:65:c7:dd:94:01:67:68:46:fa:df: 7f:46:21:13:3f:9c:bf:fe:d1:1c:a3:de:06:16:88: 45:f1:25:58:95:14:83:e8:c2:e4:48:d2:9a:3d:e3: d2:a3:8e:d4:72:e1:2f:c5:eb:c9:f7:1a:23:7d:0b: d1:13:a4:8d:eb:83:21:7a:49:db:3c:39:92:c0:75: cf:dc:90:2d:7e:96:a7:b3:ce:09:1f:2d:eb:5d:b2: b0:49:9f:02:03:cd:24:af:f7:6f:44:a7:1a:dd:6f: aa:43:be:ee:ff:74:63:61:19:b7:5e:46:25:5e:68: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CC:E4:3A:79:78:DD:C3:67:7A:E6:99:1D:52:9C:B9:B5:69:82:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7f:d7:3d:35:22:25:b5:14:14:7f:52:58:b4:7c:7d:f9:23: 32:39:e9:97:c2:f6:c3:54:a7:15:b9:8c:85:09:09:e3:64:d1: a5:60:95:b3:63:0a:1b:9c:7d:07:90:a9:6c:6c:64:f7:b8:23: 89:1f:10:dc:70:e0:e9:f6:ae:7b:97:58:a5:65:57:42:98:51: 6a:cf:14:29:b3:6b:3d:13:9c:46:e3:bf:ce:7f:c9:e0:6d:d4: 4f:8c:67:4f:64:b9:64:04:68:3c:71:17:59:76:df:e9:4c:8c: 08:3d:98:b4:10:e7:50:05:a7:7f:3d:45:75:09:43:bf:9c:93: 99:df:5e:e8:60:ab:47:76:be:3d:50:f5:b2:bb:93:fd:7e:b3: 63:5e:99:b3:6d:4b:4d:f1:f4:b3:81:5c:25:3e:26:86:36:27: 9d:11:1f:68:8d:66:34:3f:a9:9b:5b:bd:07:1c:7c:30:e6:2e: 4c:d8:8f:1e:a0:1b:1a:6e:0f:fb:05:98:6c:22:e5:96:e8:93: 6f:4f:d6:e2:6f:7b:58:dd:52:f1:b9:e8:d0:06:36:0f:c7:47: 10:30:ae:c5:a4:ae:f2:f4:6a:31:48:d9:75:0f:c7:cc:d5:76: 74:e9:67:86:f9:51:26:7a:5a:9f:d8:02:f7:14:55:ca:0a:26: 89:7b:50:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnQVWjkeDQ/GstIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjM0ODUzMzktZjA0My00MDJjLWI2OWEtYzM5Mjk1YzdlZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3SZcOMTbAfQCwI9Mfv9bU9L5Aspr+n4WtQj EbSQZi4ztWlDEkhOAR33/lPM49waqLOOol2JxK16IxQO1xmoedZM5u4uw63h7qTL RCG764IDMXuvVX3Kgz/L54OY0FGX741faJ6x2kc+X+/+Y3AHdVowI0pCK9I7wNla F6PyhPW+o9t2VNkTzT+JtGXH3ZQBZ2hG+t9/RiETP5y//tEco94GFohF8SVYlRSD 6MLkSNKaPePSo47UcuEvxevJ9xojfQvRE6SN64MheknbPDmSwHXP3JAtfpans84J Hy3rXbKwSZ8CA80kr/dvRKca3W+qQ77u/3RjYRm3XkYlXmjInQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKPM5Dp5eN3DZ3rmmR1SnLm1aYIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTJhYzc0ZDgtYzVkNC0z Y2NmLWI3Y2UtMmE4NjgxM2FkMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABp/1z01IiW1FBR/Uli0fH35IzI56ZfC9sNUpxW5jIUJCeNk0aVg lbNjChucfQeQqWxsZPe4I4kfENxw4On2rnuXWKVlV0KYUWrPFCmzaz0TnEbjv85/ yeBt1E+MZ09kuWQEaDxxF1l23+lMjAg9mLQQ51AFp389RXUJQ7+ck5nfXuhgq0d2 vj1Q9bK7k/1+s2NembNtS03x9LOBXCU+JoY2J50RH2iNZjQ/qZtbvQccfDDmLkzY jx6gGxpuD/sFmGwi5Zbok29P1uJve1jdUvG56NAGNg/HRxAwrsWkrvL0ajFI2XUP x8zVdnTpZ4b5USZ6Wp/YAvcUVcoKJol7UL8= -----END CERTIFICATE-----Generated at Wed Jul 29 09:05:54 2026 by rpki-client