$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd3730f-437a-38b8-b3dd-014d835d2e54.roa File: 3cd3730f-437a-38b8-b3dd-014d835d2e54.roa (raw, json) Hash identifier: eRm7dnEBEQSMkuzXO7fBISL2uJdgousp5UKkwXMIcro= Subject key identifier: 54:A9:B5:8E:F9:6D:48:CB:9C:E0:21:46:A9:E9:E0:8D:9E:4F:98:29 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498AA03DC9AA71939A4C0900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd3730f-437a-38b8-b3dd-014d835d2e54.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 2001:500:a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:a0:3d:c9:aa:71:93:9a:4c:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2d081a5e-5af0-4f8a-bb5c-c6b31b85f7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c6:70:14:3c:ae:67:50:90:c6:1c:19:74:d7: d9:d7:05:05:5d:90:a5:13:4b:83:8c:6c:8c:94:66: c3:a6:33:54:7d:0c:4c:88:3c:f1:7b:0a:9f:b4:ff: 10:d0:2d:03:ad:1d:18:b5:f9:bb:6a:32:c1:de:e7: 87:82:fd:74:1f:60:73:80:db:20:3a:a4:a8:82:8c: 4f:1d:5e:b3:c7:cd:1d:a3:a6:b8:57:4c:a2:f1:0b: 6a:39:6b:29:43:62:06:0a:43:48:f8:b0:93:a6:f6: da:b0:aa:12:e5:21:e9:5e:47:c1:d5:8e:67:58:96: 5d:37:4d:47:10:dd:b8:1a:73:cb:59:73:79:a2:5f: 31:d5:93:e4:47:3e:cc:47:dd:dc:22:96:0e:d7:02: 44:d3:44:87:2f:f7:9c:99:26:2a:c5:87:e9:c4:82: 4a:a9:7b:cd:37:e6:f1:62:a7:b0:73:a5:d5:df:a5: 28:16:f5:f5:20:a4:68:81:65:c5:d2:0f:56:54:2f: dc:03:3a:fb:b7:f4:21:57:b4:2f:9e:34:5d:28:f5: 23:ea:15:67:df:cc:aa:da:f7:5b:4f:c9:e9:2f:8e: 1b:f6:29:c2:55:1d:b7:bd:1e:51:8b:e6:7c:b6:b7: 11:5b:88:75:02:7f:4b:f3:06:16:8c:8e:62:39:27: e8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A9:B5:8E:F9:6D:48:CB:9C:E0:21:46:A9:E9:E0:8D:9E:4F:98:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd3730f-437a-38b8-b3dd-014d835d2e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ff:ac:77:07:4c:93:5b:e0:35:54:d8:2d:d3:34:e6:34:d4: 88:37:e9:ff:c7:79:1e:95:8e:67:3b:ae:8f:71:92:47:4d:da: d6:92:1e:22:56:30:88:fb:56:b6:26:a9:2d:e2:ea:6b:b9:b4: 2b:fa:af:a3:d0:7b:f5:a6:7a:00:5d:1e:b8:dc:73:68:95:7e: 6d:51:31:e7:21:41:bb:3f:00:e1:72:c9:94:b3:cf:46:14:fc: 98:e5:cc:fd:c7:e9:a1:7e:84:8d:55:7e:82:c5:9e:ae:4c:78: b8:cf:8d:4b:25:5b:e5:43:8f:f2:90:06:60:d5:a4:14:1d:d7: ee:e2:f4:84:e1:86:76:b3:c3:7a:78:65:e6:d6:64:68:05:88: e9:c0:0e:8c:a1:f2:45:ab:c4:97:ba:36:ca:6d:9d:bf:21:e8: 6e:2f:10:30:3f:d4:18:cc:98:60:1f:52:87:2e:51:9e:af:db: dd:a4:55:b9:3a:fd:0c:67:a8:e2:8e:28:89:a5:64:d5:bd:bb: a9:04:7d:c1:ba:55:1a:1b:7e:4b:6c:09:b5:96:4b:2e:15:fb: 59:99:76:25:00:69:a2:55:7d:39:3a:e5:46:d9:90:83:aa:79: 6a:f8:d5:52:f0:d7:e8:f9:a0:d0:e4:85:85:d1:29:ae:8a:55: df:26:84:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiqA9yapxk5pMCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmQwODFhNWUtNWFmMC00ZjhhLWJiNWMtYzZiMzFiODVmN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcZwFDyuZ1CQxhwZdNfZ1wUFXZClE0uDjGyM lGbDpjNUfQxMiDzxewqftP8Q0C0DrR0Ytfm7ajLB3ueHgv10H2BzgNsgOqSogoxP HV6zx80do6a4V0yi8QtqOWspQ2IGCkNI+LCTpvbasKoS5SHpXkfB1Y5nWJZdN01H EN24GnPLWXN5ol8x1ZPkRz7MR93cIpYO1wJE00SHL/ecmSYqxYfpxIJKqXvNN+bx Yqewc6XV36UoFvX1IKRogWXF0g9WVC/cAzr7t/QhV7QvnjRdKPUj6hVn38yq2vdb T8npL44b9inCVR23vR5Ri+Z8trcRW4h1An9L8wYWjI5iOSfolwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFSptY75bUjLnOAhRqnp4I2eT5gpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NkMzczMGYtNDM3YS0z OGI4LWIzZGQtMDE0ZDgzNWQyZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABH/rHcHTJNb4DVU2C3TNOY01Ig36f/HeR6Vjmc7ro9xkkdN2taS HiJWMIj7VrYmqS3i6mu5tCv6r6PQe/WmegBdHrjcc2iVfm1RMechQbs/AOFyyZSz z0YU/JjlzP3H6aF+hI1VfoLFnq5MeLjPjUslW+VDj/KQBmDVpBQd1+7i9IThhnaz w3p4ZebWZGgFiOnADoyh8kWrxJe6Nsptnb8h6G4vEDA/1BjMmGAfUocuUZ6v292k Vbk6/QxnqOKOKImlZNW9u6kEfcG6VRobfktsCbWWSy4V+1mZdiUAaaJVfTk65UbZ kIOqeWr41VLw1+j5oNDkhYXRKa6KVd8mhFA= -----END CERTIFICATE-----Generated at Fri Sep 25 22:48:21 2026 by rpki-client