$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa File: ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa (raw, json) Hash identifier: sRmqFRcGWTGTf+Uo3ivkN2fFGZuIGuo943myqXAQ2MA= Subject key identifier: D6:20:64:07:89:81:B0:A8:72:9C:5D:B9:58:34:D1:2F:F8:A1:D9:9B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79D2744AC19DBB3F522B180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:27:44:ac:19:db:b3:f5:22:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9f20fcb5-06d5-4614-a8d1-fae68af8cf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:91:c0:d0:62:d9:b9:65:12:6f:f5:bb:94:4f: 65:95:98:99:c9:cf:d6:24:7b:4c:c9:f0:22:a9:26: ee:ed:f7:6d:14:2e:5f:59:b3:67:83:87:cc:92:1e: e1:f5:95:a4:d2:7e:69:6f:3d:a1:6d:fc:1b:c2:41: 1f:d8:ab:a8:0c:e8:eb:69:4b:13:da:2e:cc:d1:44: 30:79:44:44:a7:db:18:3d:70:f8:97:2f:b5:2d:21: 1d:a4:6e:ff:55:06:28:cf:88:a3:5b:89:ea:82:2d: a9:05:98:03:3d:0a:4d:8a:57:a1:5b:64:05:34:91: c1:2e:90:bf:f6:16:68:ad:63:fd:1c:2f:fb:4e:8c: 78:54:3c:d5:7f:17:f1:43:b4:8b:50:8c:3c:0f:4b: ff:6d:b2:dc:d8:25:7f:64:75:45:98:0a:6d:fc:a4: 71:23:80:4a:03:b7:8c:de:1d:2b:d5:23:14:2b:f1: d5:15:c5:ac:07:65:b7:ce:5e:31:03:e3:81:3d:2a: 9a:72:a9:2d:68:af:78:3a:21:51:d2:e7:bd:0d:2d: c3:d1:ee:fd:20:38:7e:4f:69:ac:89:be:15:f5:1d: 93:94:23:34:06:a8:1c:18:9b:56:4a:4f:1c:1e:03: 3f:a8:9c:2b:03:c2:01:86:98:c0:27:be:9d:4c:ce: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:20:64:07:89:81:B0:A8:72:9C:5D:B9:58:34:D1:2F:F8:A1:D9:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:fc:1f:b9:db:af:14:a0:b3:a1:a6:9b:ff:8e:10:bb:90:7d: 1d:36:27:b3:49:37:04:20:ab:db:61:3d:b0:e6:e8:b1:62:e3: 9d:ab:0c:88:83:49:19:ac:e5:83:32:d5:48:89:88:53:27:b8: bf:02:f2:85:3e:ee:57:1e:00:3c:21:4a:b5:30:04:35:0a:03: 23:05:0a:4a:6e:1a:70:51:c5:18:ac:16:bb:f1:56:bf:23:de: ee:1e:16:e9:07:38:0a:3c:d7:50:73:af:39:69:c2:46:b2:59: 43:df:92:7e:1e:ab:93:d1:15:d1:ef:40:ad:c3:0f:b7:07:9b: 69:b3:6e:15:dd:4f:8b:cd:96:24:6b:e9:57:f0:58:0c:ad:6c: 89:53:10:e4:5a:22:95:a3:ab:df:78:d2:1e:35:6a:d8:6f:9b: fe:da:d3:23:2c:42:2e:b3:f8:4b:91:3f:cc:5a:45:78:c6:89: 44:16:08:2a:5d:bb:2a:40:6a:6e:53:7a:53:8e:88:03:d0:9c: 58:27:01:d1:98:71:02:85:7f:c5:f3:c3:5b:3a:17:d2:fd:6d: 50:2c:1e:83:db:dc:e8:13:96:3e:ce:c2:53:1a:ac:2e:99:51: 93:0b:a7:43:5e:46:6c:75:84:70:ca:2c:d2:65:d4:11:a0:b3: eb:b7:3e:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnSdErBnbs/UisYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWYyMGZjYjUtMDZkNS00NjE0LWE4ZDEtZmFlNjhhZjhjZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJHA0GLZuWUSb/W7lE9llZiZyc/WJHtMyfAi qSbu7fdtFC5fWbNng4fMkh7h9ZWk0n5pbz2hbfwbwkEf2KuoDOjraUsT2i7M0UQw eUREp9sYPXD4ly+1LSEdpG7/VQYoz4ijW4nqgi2pBZgDPQpNilehW2QFNJHBLpC/ 9hZorWP9HC/7Tox4VDzVfxfxQ7SLUIw8D0v/bbLc2CV/ZHVFmApt/KRxI4BKA7eM 3h0r1SMUK/HVFcWsB2W3zl4xA+OBPSqacqktaK94OiFR0ue9DS3D0e79IDh+T2ms ib4V9R2TlCM0BqgcGJtWSk8cHgM/qJwrA8IBhpjAJ76dTM4rkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNYgZAeJgbCocpxduVg00S/4odmbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2U1Y2M5NjgtYzU5Zi0z MzZkLWFlZWEtMDllNzNjZjIyZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE38H7nbrxSgs6Gmm/+OELuQfR02J7NJNwQgq9thPbDm6LFi452r DIiDSRms5YMy1UiJiFMnuL8C8oU+7lceADwhSrUwBDUKAyMFCkpuGnBRxRisFrvx Vr8j3u4eFukHOAo811BzrzlpwkayWUPfkn4eq5PRFdHvQK3DD7cHm2mzbhXdT4vN liRr6VfwWAytbIlTEORaIpWjq9940h41athvm/7a0yMsQi6z+EuRP8xaRXjGiUQW CCpduypAam5TelOOiAPQnFgnAdGYcQKFf8Xzw1s6F9L9bVAsHoPb3OgTlj7OwlMa rC6ZUZMLp0NeRmx1hHDKLNJl1BGgs+u3PkY= -----END CERTIFICATE-----Generated at Wed Jul 29 10:09:17 2026 by rpki-client