$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa File: a5e600de-f326-3392-a8c2-4489902db132.roa (raw, json) Hash identifier: 7lfLRwZM5nb9MFIUCphA/7Zwzf/DYFYS9cniZBKd82c= Subject key identifier: B6:95:0F:B8:68:38:76:D8:12:70:E5:E0:E5:0C:B9:31:21:55:BE:F4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C7E9AD5E7AF967D4FF800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 2001:500:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:7e:9a:d5:e7:af:96:7d:4f:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5f048822-dcd8-4d8c-a97d-febfa093938b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:ea:a2:f9:ed:bf:53:ed:c2:bf:79:6b:88: 97:ca:99:d5:57:6e:07:85:d6:09:27:66:b0:23:f1: 76:3a:c1:2e:a7:73:26:ac:e9:b7:be:82:8f:c6:8c: 18:7f:c1:67:80:46:9b:b3:8a:47:a2:bc:d4:c3:d0: 7d:aa:14:0b:b4:40:37:6b:3b:d4:6e:9c:7e:e8:20: df:d0:17:4a:98:31:2f:84:fb:4d:98:58:fc:56:22: 2a:b4:98:de:d4:b6:fe:d7:4a:d2:f8:d2:88:30:94: ff:53:54:d8:f3:7d:7d:f1:b5:64:fb:fd:21:33:4d: 14:bd:33:ce:9f:a1:d5:66:62:29:dc:d2:3c:c4:a2: cd:4c:e7:d5:90:aa:25:49:e2:cd:3f:f8:a5:13:e0: 2e:98:c9:d1:5a:ae:66:50:ae:b5:db:54:41:44:29: b3:6b:d1:40:83:b0:37:55:36:cc:b4:d6:22:99:77: 79:b1:3f:03:cb:46:67:b2:ae:fa:d4:0c:2a:3d:2a: 5f:4a:5f:19:9b:37:c8:82:6f:81:15:aa:cd:9b:ca: 1c:67:32:41:0f:62:45:e8:67:36:b8:8d:3c:ce:4a: a0:8d:d5:bd:03:f2:5d:a5:b1:26:d6:9a:d5:f6:08: 61:73:97:3a:99:72:53:70:81:45:99:5c:e8:7c:01: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:95:0F:B8:68:38:76:D8:12:70:E5:E0:E5:0C:B9:31:21:55:BE:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:19:ca:71:c7:fa:60:4b:19:21:c7:70:a4:82:fb:b6:4f:c1: cf:be:5f:ef:2a:66:4c:43:5c:68:87:49:8a:ed:be:34:01:e9: 37:86:98:bd:57:98:7c:25:bb:0a:48:e2:56:b1:e8:04:af:4d: 00:33:1a:e7:7a:dd:2f:e0:f9:cf:ae:46:77:69:18:60:0c:60: bc:49:34:37:b7:73:66:3a:b3:66:f9:0d:c2:89:01:4d:1a:86: 2d:c0:fe:b8:0c:ef:6f:80:45:7e:63:b5:f2:61:37:0a:e0:3d: 48:0c:31:f2:47:7d:73:ea:4c:03:08:70:3e:24:d4:a7:7d:81: b1:a2:e5:f7:86:7f:12:2f:f4:ca:74:4a:d7:d6:23:66:d6:30: 22:94:8d:0f:22:92:2c:14:c0:4e:66:67:20:88:5e:2a:11:9f: d1:f5:b9:c0:e3:74:7a:53:0b:31:84:9a:66:80:b3:33:71:4e: c9:a8:44:fb:b9:a7:50:e0:45:c3:f5:ad:c6:92:f6:ce:4e:7d: c3:dd:d5:24:28:a0:42:60:61:70:5c:df:06:56:82:85:77:a3: 64:45:a6:40:d1:a9:09:7d:fa:fd:95:5d:28:41:00:bd:90:6a: 38:52:bc:90:56:1d:41:d1:40:20:fc:c5:10:26:37:ec:dc:31: 2d:9e:fb:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnH6a1eevln1P+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWYwNDg4MjItZGNkOC00ZDhjLWE5N2QtZmViZmEwOTM5MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOjqovntv1Ptwr95a4iXypnVV24HhdYJJ2aw I/F2OsEup3MmrOm3voKPxowYf8FngEabs4pHorzUw9B9qhQLtEA3azvUbpx+6CDf 0BdKmDEvhPtNmFj8ViIqtJje1Lb+10rS+NKIMJT/U1TY83198bVk+/0hM00UvTPO n6HVZmIp3NI8xKLNTOfVkKolSeLNP/ilE+AumMnRWq5mUK6121RBRCmza9FAg7A3 VTbMtNYimXd5sT8Dy0Znsq761AwqPSpfSl8ZmzfIgm+BFarNm8ocZzJBD2JF6Gc2 uI08zkqgjdW9A/JdpbEm1prV9ghhc5c6mXJTcIFFmVzofAHjywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLaVD7hoOHbYEnDl4OUMuTEhVb70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTVlNjAwZGUtZjMyNi0z MzkyLWE4YzItNDQ4OTkwMmRiMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIwZynHH+mBLGSHHcKSC+7ZPwc++X+8qZkxDXGiHSYrtvjQB6TeG mL1XmHwluwpI4lax6ASvTQAzGud63S/g+c+uRndpGGAMYLxJNDe3c2Y6s2b5DcKJ AU0ahi3A/rgM72+ARX5jtfJhNwrgPUgMMfJHfXPqTAMIcD4k1Kd9gbGi5feGfxIv 9Mp0StfWI2bWMCKUjQ8ikiwUwE5mZyCIXioRn9H1ucDjdHpTCzGEmmaAszNxTsmo RPu5p1DgRcP1rcaS9s5OfcPd1SQooEJgYXBc3wZWgoV3o2RFpkDRqQl9+v2VXShB AL2QajhSvJBWHUHRQCD8xRAmN+zcMS2e+/k= -----END CERTIFICATE-----Generated at Wed Jul 29 06:58:53 2026 by rpki-client