$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa File: de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa (raw, json) Hash identifier: N/JhVG+wAynq1yHXpH4JX2Lk0ySlFqImz9JzOCARZA4= Subject key identifier: BD:6C:E1:33:4F:79:A4:DD:4F:D3:BD:25:99:B2:8D:8B:EB:D7:27:3E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49731BC055DFBE6568D86FC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:1b:c0:55:df:be:65:68:d8:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1490f151-55ca-41b0-a2a9-7857a1ab32ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:df:32:56:b5:31:ca:12:90:4e:a3:cf:f5: 03:e6:27:f6:bb:be:95:3b:63:62:fb:cc:60:f1:37: 32:0b:76:a4:a3:be:82:ff:c5:7f:46:60:8d:77:c7: 3d:06:b5:4f:f7:20:ee:8c:23:6e:ab:60:c6:7d:9a: 7d:1a:ec:d6:45:9c:d4:6c:da:d6:84:ac:57:e8:d2: 09:83:e2:b3:51:e9:77:74:5c:fe:13:e6:3b:3a:29: bf:3e:13:2f:7c:aa:3a:b5:e2:77:d5:e0:7d:a3:37: 40:82:95:ba:d5:d8:eb:dc:28:e3:a2:1f:a4:87:f5: ef:7c:91:76:d3:22:ce:ff:50:a5:a6:e1:33:ec:dc: 1a:80:ec:14:8a:b2:06:f2:c5:95:49:aa:68:3d:fe: 19:84:07:38:3e:ed:d6:78:06:ae:40:86:02:9a:af: 87:cc:09:65:7d:44:e3:bb:f4:ca:5c:aa:57:7b:72: 18:c0:20:46:56:86:8c:51:d3:75:23:0f:30:37:4b: 75:9a:22:49:85:73:ff:38:25:3d:b3:a6:77:91:2a: 22:43:1e:b9:6a:57:35:b6:c7:26:60:6a:42:34:43: 4c:b3:87:2d:db:e6:d3:2b:b6:85:7c:c7:92:c6:d0: ee:54:f1:36:5d:58:90:91:a9:78:49:4a:c2:64:9a: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6C:E1:33:4F:79:A4:DD:4F:D3:BD:25:99:B2:8D:8B:EB:D7:27:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2b:6d:b0:ae:7b:b7:55:6f:85:a3:e9:a3:45:4f:a4:fc:b8: af:87:68:67:27:2d:45:55:c4:d7:8b:12:87:6d:68:80:85:33: 6e:9a:98:bc:99:7f:b3:5a:5f:d7:7b:20:bd:3d:94:74:17:d7: a4:d3:4d:a9:98:ea:a4:cd:3b:61:31:d0:6f:ff:c1:e9:76:4f: 5a:37:85:4e:5d:75:0e:57:66:aa:a1:2d:4f:c2:20:be:40:2d: c5:b4:6d:25:e8:39:5b:98:60:1a:75:e7:b0:c4:f0:8f:e5:4f: 9d:7c:8f:81:68:b7:c0:3e:9f:ac:c7:ae:98:c7:d2:a6:e0:40: 85:85:1d:8f:4c:5e:b3:65:79:c6:0b:14:4d:75:f5:76:bc:6b: 40:11:b8:71:b4:f6:e8:0b:d4:7d:e7:b7:2d:ee:99:c3:62:7e: b8:94:1f:d4:c2:79:40:8d:58:8e:f7:56:a6:37:5d:ad:f0:c5: fa:a8:bf:d5:c7:76:48:63:84:f3:27:7c:d0:fc:28:48:6c:c8: 37:50:e6:11:d4:37:1a:e8:94:e7:46:73:b3:a3:5b:ac:47:30: 0d:6a:fb:01:66:a8:6b:d3:07:81:e3:9b:f7:5f:17:9b:54:16: ad:5d:5b:ce:25:6c:eb:cb:d6:7a:b1:fe:9d:fb:3a:47:82:26: cf:e4:73:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcxvAVd++ZWjYb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTQ5MGYxNTEtNTVjYS00MWIwLWEyYTktNzg1N2ExYWIzMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6jfMla1McoSkE6jz/UD5if2u76VO2Ni+8xg 8TcyC3ako76C/8V/RmCNd8c9BrVP9yDujCNuq2DGfZp9GuzWRZzUbNrWhKxX6NIJ g+KzUel3dFz+E+Y7Oim/PhMvfKo6teJ31eB9ozdAgpW61djr3Cjjoh+kh/XvfJF2 0yLO/1ClpuEz7NwagOwUirIG8sWVSapoPf4ZhAc4Pu3WeAauQIYCmq+HzAllfUTj u/TKXKpXe3IYwCBGVoaMUdN1Iw8wN0t1miJJhXP/OCU9s6Z3kSoiQx65alc1tscm YGpCNENMs4ct2+bTK7aFfMeSxtDuVPE2XViQkal4SUrCZJqKuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1s4TNPeaTdT9O9JZmyjYvr1yc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGU5MjEzZDYtNmJhMC0z NjI1LWFjOWMtMDNlMGQ2YzI1MTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQrbbCue7dVb4Wj6aNFT6T8uK+HaGcnLUVVxNeLEodtaICFM26a mLyZf7NaX9d7IL09lHQX16TTTamY6qTNO2Ex0G//wel2T1o3hU5ddQ5XZqqhLU/C IL5ALcW0bSXoOVuYYBp157DE8I/lT518j4Fot8A+n6zHrpjH0qbgQIWFHY9MXrNl ecYLFE119Xa8a0ARuHG09ugL1H3nty3umcNifriUH9TCeUCNWI73VqY3Xa3wxfqo v9XHdkhjhPMnfND8KEhsyDdQ5hHUNxrolOdGc7OjW6xHMA1q+wFmqGvTB4Hjm/df F5tUFq1dW84lbOvL1nqx/p37OkeCJs/kc7w= -----END CERTIFICATE-----Generated at Fri Sep 25 08:08:16 2026 by rpki-client