$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a715ae04-027d-33a5-a29e-1a770fb32675.roa File: a715ae04-027d-33a5-a29e-1a770fb32675.roa (raw, json) Hash identifier: IVVB71Q4unMNGGDmlmi0Ox2pZyJ+WWpMr1Z6V/zsrYs= Subject key identifier: 42:A4:3E:90:EB:4F:1A:11:06:B5:AA:7A:66:F0:10:B0:D7:19:B0:F3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CA3F4FA7F80C591A77500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a715ae04-027d-33a5-a29e-1a770fb32675.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 2001:500:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:a3:f4:fa:7f:80:c5:91:a7:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5dcfe87d-e887-4a48-9c3d-fca1e98ef0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:85:b8:86:05:8a:9a:3b:ee:0e:1b:43:e3: ec:77:c9:d8:3b:b2:ca:5a:e1:6e:df:57:26:c4:22: c6:db:75:dc:91:f7:d2:3e:c8:79:fb:c8:64:15:16: 9f:86:9b:ed:de:09:68:09:60:4b:64:bb:3b:e4:42: ce:07:7a:2b:69:c4:64:be:d9:e8:8f:2a:0a:eb:f0: f4:09:b9:e8:c1:51:ab:24:e1:bf:53:ea:db:2e:2f: 06:c2:c8:9d:1e:5e:30:63:23:d6:3d:8c:63:09:84: a4:03:16:3c:6f:54:5d:12:1e:c3:7f:23:61:ca:e4: c8:3c:1d:29:ab:62:b7:0d:56:74:e9:03:81:2d:94: 84:b4:ec:96:fc:83:74:0e:36:0a:d6:89:17:39:5b: 40:8f:ca:00:57:45:81:23:27:62:1e:dc:24:ad:6d: 9a:14:24:ec:89:df:57:5a:f8:2e:ef:5e:47:14:3e: e7:aa:c6:59:09:a0:6c:f3:18:a4:8b:3c:55:97:75: 9e:48:51:1f:6d:ef:de:50:01:80:8e:a4:95:e7:bb: f1:01:bb:bb:36:1a:e7:12:d1:1f:b0:79:9d:ff:1e: 15:03:42:f9:69:f5:aa:f1:f4:a1:69:fe:32:f2:73: 83:39:56:b3:a8:80:52:32:72:11:27:32:4b:dc:97: 5a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A4:3E:90:EB:4F:1A:11:06:B5:AA:7A:66:F0:10:B0:D7:19:B0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a715ae04-027d-33a5-a29e-1a770fb32675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:44::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:93:58:7d:17:38:47:f7:71:8a:e5:21:ab:35:ba:70:a7:0c: c3:26:2e:dd:52:5e:33:86:12:14:8e:4f:9d:86:7d:9d:ba:d7: 37:90:a5:3f:b9:fe:39:f7:fd:13:37:c4:b1:b0:61:d7:9c:98: b3:5b:33:53:40:6d:6f:8c:85:fe:e2:a0:cb:d0:e6:6b:89:5a: 91:47:54:61:8a:29:88:4c:24:7b:4a:7e:cc:8e:ac:32:db:1b: b6:d4:08:fd:82:c6:41:85:37:c5:08:45:df:a2:3d:2d:b9:6d: ae:56:5c:d0:79:a1:00:2c:7a:ab:85:ce:ba:b7:91:26:4d:93: 25:a3:4a:34:b1:b8:f0:c6:dd:0d:0b:38:b9:72:49:61:2c:cc: 3f:68:79:56:4f:6d:82:b9:8d:6e:40:8b:50:ee:a6:36:89:cb: 42:a2:94:8f:4e:bc:98:07:e9:ec:1d:5f:ec:e8:56:45:0c:2b: 8a:18:e5:2f:8b:91:a8:1f:c6:04:97:b0:63:c8:c6:18:03:eb: c3:5f:71:31:b8:56:dc:d0:4f:e6:f2:02:5b:92:78:35:d5:ec: 88:73:e2:50:d4:fa:37:2f:29:fa:cd:52:e9:48:53:4f:30:5c: 26:30:49:41:a0:51:72:78:f4:9d:ae:43:f3:2a:3a:06:71:49: 95:bf:14:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnKP0+n+AxZGndQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWRjZmU4N2QtZTg4Ny00YTQ4LTljM2QtZmNhMWU5OGVmMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzyFuIYFipo77g4bQ+Psd8nYO7LKWuFu31cm xCLG23XckffSPsh5+8hkFRafhpvt3gloCWBLZLs75ELOB3oracRkvtnojyoK6/D0 CbnowVGrJOG/U+rbLi8GwsidHl4wYyPWPYxjCYSkAxY8b1RdEh7DfyNhyuTIPB0p q2K3DVZ06QOBLZSEtOyW/IN0DjYK1okXOVtAj8oAV0WBIydiHtwkrW2aFCTsid9X Wvgu715HFD7nqsZZCaBs8xikizxVl3WeSFEfbe/eUAGAjqSV57vxAbu7NhrnEtEf sHmd/x4VA0L5afWq8fShaf4y8nODOVazqIBSMnIRJzJL3JdaDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEKkPpDrTxoRBrWqembwELDXGbDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTcxNWFlMDQtMDI3ZC0z M2E1LWEyOWUtMWE3NzBmYjMyNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC+TWH0XOEf3cYrlIas1unCnDMMmLt1SXjOGEhSOT52GfZ261zeQ pT+5/jn3/RM3xLGwYdecmLNbM1NAbW+Mhf7ioMvQ5muJWpFHVGGKKYhMJHtKfsyO rDLbG7bUCP2CxkGFN8UIRd+iPS25ba5WXNB5oQAsequFzrq3kSZNkyWjSjSxuPDG 3Q0LOLlySWEszD9oeVZPbYK5jW5Ai1DupjaJy0KilI9OvJgH6ewdX+zoVkUMK4oY 5S+LkagfxgSXsGPIxhgD68NfcTG4VtzQT+byAluSeDXV7Ihz4lDU+jcvKfrNUulI U08wXCYwSUGgUXJ49J2uQ/MqOgZxSZW/FKE= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:38 2026 by rpki-client