$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa File: cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa (raw, json) Hash identifier: qQ/1gElgSsNnguUi0J46FlT89+HUBl2IzMdgSagop0c= Subject key identifier: 31:AD:0B:90:A1:F5:B0:12:6C:E6:EE:C2:F0:FF:A7:E0:49:A0:DE:E5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498BB14DB1A85F81D788D060 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b1:4d:b1:a8:5f:81:d7:88:d0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9b5684d9-abbd-4312-8b36-4e3ba63a1e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:a9:69:ef:e6:1b:8f:11:63:8d:5f:8b:c1: 15:84:e2:8e:e6:26:67:ba:58:b3:24:35:dc:b4:87: d3:de:f4:1d:bc:cf:de:74:b2:c6:f0:69:da:2c:18: 4d:0b:6b:d5:09:ed:8c:ae:77:41:ab:80:1a:ce:2d: 6f:63:2a:a1:5b:bc:5e:c8:87:82:b1:77:8a:87:fa: 1f:2c:9f:fa:9d:f9:10:75:45:79:4d:3e:84:c4:f3: be:7f:5e:15:9c:93:b1:48:07:01:88:5c:92:73:aa: a2:10:40:6b:6f:57:4a:cd:98:c1:48:2a:f7:06:45: b4:d4:25:3e:08:79:8b:af:43:38:63:68:71:25:f0: be:cd:5e:9f:00:36:1a:74:64:e7:88:e4:f7:49:95: 07:45:3d:51:2c:ae:0b:42:5e:85:18:33:c1:b1:3e: c0:9d:51:03:9a:2c:ac:ea:7a:c4:4a:17:b2:4b:dc: 66:b8:56:00:14:9e:cc:27:ca:91:af:7c:0c:2c:e9: 7b:5c:61:a4:d9:f8:10:80:9c:c4:9d:fa:49:fa:72: 68:36:31:58:b7:c9:c8:41:5b:49:bd:e1:a5:62:f0: cb:d2:d4:d5:fe:e9:90:a7:fb:fb:38:cc:b1:3c:b7: da:00:63:0e:b7:79:6c:8d:ea:d6:e9:c5:3f:89:98: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AD:0B:90:A1:F5:B0:12:6C:E6:EE:C2:F0:FF:A7:E0:49:A0:DE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5e:93:cc:9d:04:5c:89:91:66:4f:3a:47:36:1e:c7:f4:6f: 79:3d:c6:83:02:4b:a2:18:ce:42:3f:5e:fc:e2:9f:9d:2e:ec: 07:f2:51:43:21:e9:b3:5f:ce:eb:34:04:5a:69:84:4b:5d:5c: 56:85:4a:d6:d9:bd:42:72:f4:10:12:63:a5:12:78:9f:65:aa: 93:03:45:20:03:c8:01:cf:73:eb:eb:88:08:69:26:d1:55:cf: da:27:fa:82:d2:b0:08:bc:1c:38:f3:60:ab:b9:8e:d6:d6:b7: 95:e7:af:26:3c:db:1c:51:0b:a1:1c:2f:00:fc:9f:94:74:b9: f4:58:76:59:08:7b:72:5d:a9:39:bf:83:0e:03:5d:97:6f:17: 9c:6b:c6:03:f0:4a:5b:9f:e6:2b:c5:81:aa:2e:ed:1f:f5:ed: fa:55:9b:12:13:d9:bf:85:48:cf:cd:6c:fa:32:15:b1:b0:61: bf:62:af:71:3d:b4:de:0b:bf:10:82:df:4e:1c:f5:0b:86:71: 12:d6:46:f7:65:23:88:ac:08:f0:f3:00:cb:f1:be:bf:f6:72: 55:b0:24:b2:0d:a8:eb:8d:ac:2d:34:40:8c:a1:3c:31:dc:07: 4a:2b:b6:75:4f:34:00:02:60:96:47:f0:c6:49:0a:7c:95:81: a4:be:a3:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji7FNsahfgdeI0GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWI1Njg0ZDktYWJiZC00MzEyLThiMzYtNGUzYmE2M2ExZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBupae/mG48RY41fi8EVhOKO5iZnulizJDXc tIfT3vQdvM/edLLG8GnaLBhNC2vVCe2MrndBq4Aazi1vYyqhW7xeyIeCsXeKh/of LJ/6nfkQdUV5TT6ExPO+f14VnJOxSAcBiFySc6qiEEBrb1dKzZjBSCr3BkW01CU+ CHmLr0M4Y2hxJfC+zV6fADYadGTniOT3SZUHRT1RLK4LQl6FGDPBsT7AnVEDmiys 6nrESheyS9xmuFYAFJ7MJ8qRr3wMLOl7XGGk2fgQgJzEnfpJ+nJoNjFYt8nIQVtJ veGlYvDL0tTV/umQp/v7OMyxPLfaAGMOt3lsjerW6cU/iZiF/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGtC5Ch9bASbObuwvD/p+BJoN7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2Y5M2JjNzgtNDhjMy0z YzY2LWI4ZjktNjMyZWMyOTExNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5ek8ydBFyJkWZPOkc2Hsf0b3k9xoMCS6IYzkI/Xvzin50u7Afy UUMh6bNfzus0BFpphEtdXFaFStbZvUJy9BASY6USeJ9lqpMDRSADyAHPc+vriAhp JtFVz9on+oLSsAi8HDjzYKu5jtbWt5XnryY82xxRC6EcLwD8n5R0ufRYdlkIe3Jd qTm/gw4DXZdvF5xrxgPwSluf5ivFgaou7R/17fpVmxIT2b+FSM/NbPoyFbGwYb9i r3E9tN4LvxCC304c9QuGcRLWRvdlI4isCPDzAMvxvr/2clWwJLINqOuNrC00QIyh PDHcB0ortnVPNAACYJZH8MZJCnyVgaS+o1w= -----END CERTIFICATE-----Generated at Fri Sep 25 22:38:59 2026 by rpki-client