$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8f8b674-1337-3905-9e06-024d28c6206a.roa File: a8f8b674-1337-3905-9e06-024d28c6206a.roa (raw, json) Hash identifier: Tp8VtGbRvIwGd5CRgdjvsmWAnJPY5wJAY1wXHY9F8zM= Subject key identifier: 47:23:9B:52:96:1E:EC:CE:17:83:5F:82:83:FE:3C:FA:FF:7F:79:C5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CDC9B3BEDF46AF8AF8FE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8f8b674-1337-3905-9e06-024d28c6206a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:dc:9b:3b:ed:f4:6a:f8:af:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=345b475a-0deb-4118-b425-c2f73de938ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:ba:37:e0:8e:5b:1e:09:a8:aa:31:b2:2d: 39:38:4f:b0:bf:d3:8c:0a:33:87:9b:a2:59:d7:d3: 46:e2:d6:39:15:94:13:71:be:6d:d2:c5:26:d1:48: 82:07:25:b6:d9:6e:54:03:c9:a8:d0:bf:aa:cc:d1: 5b:19:ee:48:64:3a:89:98:7e:ed:d5:c0:74:b6:76: 63:7e:2b:4a:d7:d7:63:27:ee:4d:62:0c:82:c1:0f: 1a:ee:37:37:d8:cf:c2:fc:a8:0f:2b:6d:0b:25:d5: 74:39:b4:dc:05:dc:64:f0:ac:61:d1:db:e8:aa:9d: 88:33:e9:a5:0d:6b:bf:4a:aa:13:20:10:c9:88:f6: 5d:b6:eb:3f:78:f6:fd:5f:1c:fd:1e:df:41:96:ff: 50:89:e9:b4:04:23:b3:bc:f4:f7:0b:b9:4e:fb:fc: 12:2e:d2:4c:7e:d0:65:e4:46:b1:b7:72:b4:bd:eb: 89:7d:53:7c:a9:4c:60:ed:c2:0c:ae:97:a0:df:52: 42:e6:a2:83:98:9e:9a:dd:6e:02:3c:47:7d:2f:4c: 20:3c:5c:60:56:f4:90:94:87:89:5b:a4:63:a5:d3: ae:10:65:19:36:8d:e6:41:99:50:65:94:26:4d:39: f2:93:09:f3:45:c2:12:9a:53:9e:d4:f2:43:a2:e7: d3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:23:9B:52:96:1E:EC:CE:17:83:5F:82:83:FE:3C:FA:FF:7F:79:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8f8b674-1337-3905-9e06-024d28c6206a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:53:46:dd:b4:98:99:a3:03:48:47:79:fa:9f:bc:67:f9:9b: 31:9c:d1:a2:f6:cc:80:bd:21:34:83:9f:2c:99:6d:c2:f2:78: be:99:48:98:b1:5b:db:35:19:73:05:8b:b6:20:6c:98:03:20: ca:e4:77:30:58:dd:16:58:ff:fa:54:07:be:f4:68:22:fc:ed: e4:00:bd:38:ef:1f:b1:0c:ef:9d:6e:8c:d2:b8:03:53:fe:59: 4f:3b:20:ae:11:8f:d2:ef:6e:80:88:4a:0d:c7:da:bc:b6:6c: 0a:29:5e:64:14:55:b5:4b:12:00:a7:67:c8:da:16:10:1b:f3: e6:a2:53:1e:a0:fa:d1:4b:bd:a1:2c:ff:dd:d3:1d:14:de:bc: 73:4b:30:87:8d:55:f7:7d:96:2f:61:b9:28:de:16:f7:af:15: 81:0d:bb:88:1e:15:67:04:55:f8:f0:0f:dc:54:b3:95:d1:ae: 6b:3c:91:a8:98:fb:75:bb:7c:72:7c:c0:df:af:d4:c0:f6:b8: 7f:0f:74:66:95:10:0d:a2:8b:28:ce:39:37:40:0d:ce:38:0c: ce:2f:53:36:c1:42:7f:d5:3c:8e:42:8a:4a:1b:3d:af:ce:84: 4e:03:04:ce:7e:a5:3c:71:8e:fe:09:36:41:1c:17:06:cc:c3: e2:84:e3:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnNybO+30avivj+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzQ1YjQ3NWEtMGRlYi00MTE4LWI0MjUtYzJmNzNkZTkzOGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpO6N+COWx4JqKoxsi05OE+wv9OMCjOHm6JZ 19NG4tY5FZQTcb5t0sUm0UiCByW22W5UA8mo0L+qzNFbGe5IZDqJmH7t1cB0tnZj fitK19djJ+5NYgyCwQ8a7jc32M/C/KgPK20LJdV0ObTcBdxk8Kxh0dvoqp2IM+ml DWu/SqoTIBDJiPZdtus/ePb9Xxz9Ht9Blv9Qiem0BCOzvPT3C7lO+/wSLtJMftBl 5Eaxt3K0veuJfVN8qUxg7cIMrpeg31JC5qKDmJ6a3W4CPEd9L0wgPFxgVvSQlIeJ W6RjpdOuEGUZNo3mQZlQZZQmTTnykwnzRcISmlOe1PJDoufT4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEcjm1KWHuzOF4NfgoP+PPr/f3nFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYThmOGI2NzQtMTMzNy0z OTA1LTllMDYtMDI0ZDI4YzYyMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChTRt20mJmjA0hHefqfvGf5mzGc0aL2zIC9ITSDnyyZbcLyeL6Z SJixW9s1GXMFi7YgbJgDIMrkdzBY3RZY//pUB770aCL87eQAvTjvH7EM751ujNK4 A1P+WU87IK4Rj9LvboCISg3H2ry2bAopXmQUVbVLEgCnZ8jaFhAb8+aiUx6g+tFL vaEs/93THRTevHNLMIeNVfd9li9huSjeFvevFYENu4geFWcEVfjwD9xUs5XRrms8 kaiY+3W7fHJ8wN+v1MD2uH8PdGaVEA2iiyjOOTdADc44DM4vUzbBQn/VPI5Cikob Pa/OhE4DBM5+pTxxjv4JNkEcFwbMw+KE40I= -----END CERTIFICATE-----Generated at Wed Jul 29 08:14:10 2026 by rpki-client