$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa File: ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa (raw, json) Hash identifier: W0qTTO+5axT+GyKrhTzYdmamOVz3Yz/V1JPCNZCF3bs= Subject key identifier: 07:B4:46:86:B6:FE:D2:50:0D:04:2D:9C:DD:F2:F4:D9:C7:12:14:20 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CF614BC8B0006117F0000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:f6:14:bc:8b:00:06:11:7f:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b8c61a59-0c83-4486-9f21-d9120ee6918c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a3:9e:75:10:99:21:c9:1c:7a:3a:32:12:be: dd:82:84:82:a7:5d:f1:e4:b1:89:f3:5e:e3:85:aa: 11:db:58:f0:8c:e6:fc:34:a8:31:ff:01:35:3a:12: b4:ab:34:f0:48:e5:d3:3f:d1:de:78:12:70:84:b4: a9:55:90:78:28:69:48:de:9a:25:ee:39:e7:4a:51: 54:13:90:12:f6:d4:c0:21:46:96:62:83:d9:6c:4b: b1:e9:c3:36:c6:52:e9:f1:1b:21:c6:5b:73:28:04: 62:a6:1b:23:37:9e:6b:fb:a2:64:55:50:4e:03:b8: f9:a9:43:dd:a8:12:35:bb:27:c1:9c:19:f6:99:4a: fe:82:6f:b8:ad:cf:84:18:9f:63:24:9b:e1:24:1a: 7b:d9:17:63:f3:2c:64:59:73:c1:49:4e:de:8e:45: 65:22:e6:62:65:14:0b:df:8a:fc:99:8b:3d:bb:b3: 48:e5:45:52:ed:be:dd:00:eb:2a:3b:eb:0c:f7:be: 2f:af:94:1c:98:4d:52:23:0e:fc:bd:13:87:a4:64: 2d:1d:86:7d:e6:98:42:cc:b0:8a:29:e4:16:47:8f: b1:95:43:aa:13:4e:fd:7b:33:0e:e0:79:af:fe:ea: 2d:78:6d:ca:83:99:84:26:b6:d0:c2:a8:62:22:61: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B4:46:86:B6:FE:D2:50:0D:04:2D:9C:DD:F2:F4:D9:C7:12:14:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:74:e2:3c:1c:60:9e:21:f6:b1:85:9f:5d:07:43:b9:56:e9: 9b:4a:c5:80:c1:c7:10:90:6a:56:5f:a7:88:4c:5d:29:e0:fb: fe:89:22:70:1c:74:53:41:65:c9:ac:57:7c:c3:36:9b:19:84: 34:5b:23:cf:56:47:c7:d6:88:7a:b6:52:f5:d2:01:eb:18:92: fb:02:30:14:db:24:f5:37:87:19:6e:71:44:89:02:f8:15:47: b9:9f:e4:1f:6c:a1:99:cf:83:76:da:af:28:0b:91:53:19:c5: 86:b9:5e:23:6b:b4:fe:5b:41:1a:5e:43:e5:19:82:9f:c4:00: 8d:92:8f:a6:21:e8:b2:6b:ef:bd:dd:8e:c0:b0:ad:63:25:e7: e1:e1:38:9f:2a:74:02:ae:f4:63:b1:6a:52:8a:90:ab:65:b7: f3:1e:8d:01:63:14:42:7a:81:be:19:e7:83:e9:b0:bf:f5:13: 98:8a:9f:e2:df:16:92:19:42:85:c8:be:99:1c:80:e4:a0:49: ff:12:c5:c7:03:07:36:4b:93:29:3e:0d:8c:8f:fb:3c:8b:ef: 5a:e9:c9:93:2a:00:48:fd:65:4c:1e:c4:35:df:21:50:de:1f: f6:0f:8b:01:58:a6:e5:7e:77:af:a6:3c:5c:3e:60:4c:87:00: 9c:13:2a:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnPYUvIsABhF/AAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjhjNjFhNTktMGM4My00NDg2LTlmMjEtZDkxMjBlZTY5MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qOedRCZIckcejoyEr7dgoSCp13x5LGJ817j haoR21jwjOb8NKgx/wE1OhK0qzTwSOXTP9HeeBJwhLSpVZB4KGlI3pol7jnnSlFU E5AS9tTAIUaWYoPZbEux6cM2xlLp8RshxltzKARiphsjN55r+6JkVVBOA7j5qUPd qBI1uyfBnBn2mUr+gm+4rc+EGJ9jJJvhJBp72Rdj8yxkWXPBSU7ejkVlIuZiZRQL 34r8mYs9u7NI5UVS7b7dAOsqO+sM974vr5QcmE1SIw78vROHpGQtHYZ95phCzLCK KeQWR4+xlUOqE079ezMO4Hmv/uoteG3Kg5mEJrbQwqhiImG46wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAe0Roa2/tJQDQQtnN3y9NnHEhQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2E1N2Y4YWUtMzc4Ny0z OTgyLWI0MjMtZWEzNWJiZjQyYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKt04jwcYJ4h9rGFn10HQ7lW6ZtKxYDBxxCQalZfp4hMXSng+/6J InAcdFNBZcmsV3zDNpsZhDRbI89WR8fWiHq2UvXSAesYkvsCMBTbJPU3hxlucUSJ AvgVR7mf5B9soZnPg3barygLkVMZxYa5XiNrtP5bQRpeQ+UZgp/EAI2Sj6Yh6LJr 773djsCwrWMl5+HhOJ8qdAKu9GOxalKKkKtlt/MejQFjFEJ6gb4Z54PpsL/1E5iK n+LfFpIZQoXIvpkcgOSgSf8SxccDBzZLkyk+DYyP+zyL71rpyZMqAEj9ZUwexDXf IVDeH/YPiwFYpuV+d6+mPFw+YEyHAJwTKmk= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:55 2026 by rpki-client