$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa File: d9cef5d4-90dd-347d-bc06-d594b04e0496.roa (raw, json) Hash identifier: 36m6YMcU3DQDnMGyOnDhkIZGLvIdfDo2n4TCn86HlDM= Subject key identifier: C3:07:30:3C:82:20:85:8E:16:B6:E2:8E:06:14:44:26:EE:90:3D:B2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49739477E2CCEAB928532960 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:94:77:e2:cc:ea:b9:28:53:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f81f7d88-d036-44b2-9b77-108274336a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:f0:b5:e1:9d:9b:86:93:94:6f:f0:68:a1: 0d:9e:f7:02:cf:b6:e8:77:bb:46:b6:fa:93:c0:9f: eb:41:05:a8:6a:aa:b8:28:00:4a:41:e7:4a:f5:d8: 88:ff:44:7a:8b:34:be:84:78:85:9c:1d:20:9a:2b: d8:9b:a2:73:72:78:88:d0:20:d5:2a:09:91:c2:b9: bd:21:34:30:21:11:87:91:54:f3:dc:9b:d8:a8:08: 28:6b:17:2f:35:3b:67:d4:7b:37:0f:74:48:d1:c5: f3:c4:77:77:e1:3e:75:de:28:69:3e:a1:3a:6e:ab: 62:1c:02:33:a6:9e:8e:ce:e6:f4:78:65:e6:d2:b2: c9:a3:0a:29:fe:6a:95:b6:bc:b8:43:74:64:e7:bc: a3:77:2b:4e:07:6d:ab:10:70:c3:cd:8c:dd:18:61: fb:66:90:f7:51:02:ea:be:85:65:ce:9d:ac:a3:55: 64:12:5e:93:fa:f8:56:35:f9:14:0c:14:02:db:6e: 4c:e5:3c:b7:2c:cb:7e:cd:38:6a:32:d5:31:1f:ce: 61:56:16:0e:76:71:c1:e1:7f:6c:ed:83:d8:f4:d9: eb:6c:6b:ac:b4:ff:0c:fc:e6:d6:f7:8c:3d:dc:b6: b6:b2:23:18:45:73:2a:41:3e:c5:92:40:1f:2d:ff: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:07:30:3C:82:20:85:8E:16:B6:E2:8E:06:14:44:26:EE:90:3D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d9cef5d4-90dd-347d-bc06-d594b04e0496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b0:46:66:cb:2c:80:45:70:2c:6e:72:62:58:79:b0:99:66: 21:c6:d2:38:b1:06:2c:c4:67:de:e3:03:3c:96:bb:cc:38:4c: dd:32:0d:85:a9:83:ab:ed:be:5d:12:90:0a:fe:b9:47:21:26: 6a:e2:a7:7c:2e:24:81:98:e1:a3:3e:ce:92:a1:97:ec:ed:e5: c9:96:83:2a:af:49:96:83:90:81:61:28:c0:b7:37:57:e1:f8: 82:0d:83:37:27:45:45:1d:4f:04:1e:d1:1f:55:24:2a:4f:63: c7:59:7b:d3:19:c1:36:7d:ae:6c:8f:80:3e:21:ae:4d:3e:15: f4:8d:20:04:6f:bd:db:9f:5a:5a:98:d8:0d:f0:93:54:ea:7b: a1:af:07:b2:cf:a3:a5:13:09:e0:05:ff:94:4b:7e:c5:56:e9: c3:58:fa:c2:35:8b:37:24:15:ab:48:cc:50:98:44:6d:bf:b3: 8a:15:ec:ba:99:4d:b4:95:70:98:07:d7:1e:a8:91:aa:18:7f: 5b:24:9d:6d:8a:fd:90:4d:89:2b:02:7d:b7:bb:74:f9:47:f9: 7f:98:81:cc:6c:bc:b7:ff:0b:0f:fc:9b:77:6c:ae:f1:21:0a: ab:84:54:77:40:aa:33:f5:9c:8f:3c:5a:a2:35:0a:92:07:e9: ea:06:05:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc5R34szquShTKWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjgxZjdkODgtZDAzNi00NGIyLTliNzctMTA4Mjc0MzM2YTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUzwteGdm4aTlG/waKENnvcCz7bod7tGtvqT wJ/rQQWoaqq4KABKQedK9diI/0R6izS+hHiFnB0gmivYm6JzcniI0CDVKgmRwrm9 ITQwIRGHkVTz3JvYqAgoaxcvNTtn1Hs3D3RI0cXzxHd34T513ihpPqE6bqtiHAIz pp6Ozub0eGXm0rLJowop/mqVtry4Q3Rk57yjdytOB22rEHDDzYzdGGH7ZpD3UQLq voVlzp2so1VkEl6T+vhWNfkUDBQC225M5Ty3LMt+zThqMtUxH85hVhYOdnHB4X9s 7YPY9NnrbGustP8M/ObW94w93La2siMYRXMqQT7FkkAfLf/d/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMMHMDyCIIWOFrbijgYURCbukD2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDljZWY1ZDQtOTBkZC0z NDdkLWJjMDYtZDU5NGIwNGUwNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH2wRmbLLIBFcCxucmJYebCZZiHG0jixBizEZ97jAzyWu8w4TN0y DYWpg6vtvl0SkAr+uUchJmrip3wuJIGY4aM+zpKhl+zt5cmWgyqvSZaDkIFhKMC3 N1fh+IINgzcnRUUdTwQe0R9VJCpPY8dZe9MZwTZ9rmyPgD4hrk0+FfSNIARvvduf WlqY2A3wk1Tqe6GvB7LPo6UTCeAF/5RLfsVW6cNY+sI1izckFatIzFCYRG2/s4oV 7LqZTbSVcJgH1x6okaoYf1sknW2K/ZBNiSsCfbe7dPlH+X+YgcxsvLf/Cw/8m3ds rvEhCquEVHdAqjP1nI88WqI1CpIH6eoGBes= -----END CERTIFICATE-----Generated at Fri Sep 25 18:32:40 2026 by rpki-client