$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa File: d9cef5d4-90dd-347d-bc06-d594b04e0496.roa (raw, json) Hash identifier: bVaRrG+aTe/zAgLT1/oAbOcWfmCsLGwFVNvWlDo7K7w= Subject key identifier: 75:29:13:09:D8:C9:1C:DC:1A:27:37:62:ED:2C:AF:5F:0E:91:42:E3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79D0837D106F2856FB5B140 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 2001:500:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:08:37:d1:06:f2:85:6f:b5:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c9c9aa74-30cb-427c-af98-94d95d831e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:df:b3:97:e7:85:87:91:75:39:ae:18:cf: 62:dd:4c:08:74:af:b9:5f:84:7f:54:db:ec:27:49: ba:14:0a:09:c8:3f:cc:a0:6b:21:7c:f4:d5:c4:5f: 40:0f:a0:50:b1:b7:ce:f8:74:69:26:c3:a7:cb:32: fc:2c:64:2d:8a:19:d8:1a:a3:0e:d9:e3:95:7f:c5: 0c:ea:0f:87:14:6b:dc:51:3f:a9:67:24:b6:e1:69: 9c:a9:4a:d1:21:9c:9d:78:22:6d:e7:c2:d5:4f:15: 66:d1:8a:2d:d2:bc:c8:4f:c2:3e:b4:71:75:f7:1a: 26:a6:8a:50:31:ce:96:bc:90:2d:6c:10:80:c8:01: a0:62:31:6a:c6:5b:87:11:8a:55:d6:df:db:d3:e2: 0a:5b:94:12:d2:9b:87:54:50:65:2f:9a:f7:3c:e4: ae:d4:0c:c3:a1:ee:28:33:c6:04:7a:09:98:ab:f0: 6d:82:0c:f2:9b:c6:0f:58:94:be:8c:20:e5:01:a9: 5a:5e:eb:9f:89:84:72:77:9d:8d:c7:2e:22:42:21: 4a:95:41:6b:8c:0d:a0:0f:a9:8a:e8:af:b1:6f:a3: 19:af:8b:e8:76:99:e8:cf:4d:e4:59:11:3e:ce:de: e5:2b:75:6b:9e:04:6a:f3:ba:34:90:08:e6:1d:fd: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:29:13:09:D8:C9:1C:DC:1A:27:37:62:ED:2C:AF:5F:0E:91:42:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:97:f4:e8:ff:6e:63:ac:d1:78:73:34:f7:ef:52:13:01:e3: bf:14:1f:8b:28:90:d9:7d:a0:c5:36:c5:be:58:a1:b8:ad:b2: 92:76:c4:9a:aa:06:d9:18:57:8e:b5:84:8a:55:e0:15:e4:23: 3f:59:48:a7:06:4a:d5:a6:40:e5:04:1b:47:40:6f:6c:de:bc: 5e:23:0d:6e:82:41:1b:07:01:6e:78:e7:f6:35:1f:fe:c2:cb: c0:20:b6:22:61:87:37:f7:90:97:ea:60:64:49:16:6b:bd:72: c1:f7:22:6c:a2:33:6b:e0:23:7e:48:b2:79:ae:9a:26:94:ef: 91:4b:93:f1:89:20:99:09:e8:af:f3:64:70:ca:7e:89:00:c5: db:d5:7e:3f:15:52:5b:ea:35:d8:c2:58:1b:4a:96:d8:2a:1e: 87:9c:57:f0:73:d3:d0:f1:3f:3e:f4:9a:33:28:9d:3e:da:ec: b1:8c:39:0c:76:9d:92:ca:6d:8f:3a:b0:40:ca:e2:ae:d2:86: bb:f0:1c:56:4e:63:df:3d:46:73:84:b7:f9:84:38:3e:46:d7: 37:99:17:9e:56:c5:b7:89:a9:30:3a:33:d2:b0:d8:c2:9e:73: 6e:0a:1a:46:6b:93:b8:cb:20:be:5d:8e:87:d4:29:79:0f:e7: 2b:0f:39:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnQg30QbyhW+1sUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzljOWFhNzQtMzBjYi00MjdjLWFmOTgtOTRkOTVkODMxZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVbfs5fnhYeRdTmuGM9i3UwIdK+5X4R/VNvs J0m6FAoJyD/MoGshfPTVxF9AD6BQsbfO+HRpJsOnyzL8LGQtihnYGqMO2eOVf8UM 6g+HFGvcUT+pZyS24WmcqUrRIZydeCJt58LVTxVm0Yot0rzIT8I+tHF19xompopQ Mc6WvJAtbBCAyAGgYjFqxluHEYpV1t/b0+IKW5QS0puHVFBlL5r3POSu1AzDoe4o M8YEegmYq/Btggzym8YPWJS+jCDlAalaXuufiYRyd52Nxy4iQiFKlUFrjA2gD6mK 6K+xb6MZr4vodpnoz03kWRE+zt7lK3VrngRq87o0kAjmHf0mjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHUpEwnYyRzcGic3Yu0sr18OkULjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDljZWY1ZDQtOTBkZC0z NDdkLWJjMDYtZDU5NGIwNGUwNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALGX9Oj/bmOs0XhzNPfvUhMB478UH4sokNl9oMU2xb5YobitspJ2 xJqqBtkYV461hIpV4BXkIz9ZSKcGStWmQOUEG0dAb2zevF4jDW6CQRsHAW545/Y1 H/7Cy8AgtiJhhzf3kJfqYGRJFmu9csH3ImyiM2vgI35IsnmumiaU75FLk/GJIJkJ 6K/zZHDKfokAxdvVfj8VUlvqNdjCWBtKltgqHoecV/Bz09DxPz70mjMonT7a7LGM OQx2nZLKbY86sEDK4q7ShrvwHFZOY989RnOEt/mEOD5G1zeZF55WxbeJqTA6M9Kw 2MKec24KGkZrk7jLIL5djofUKXkP5ysPOd4= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:54 2026 by rpki-client