$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/70324e2c-97e2-38b4-8a29-b74a347765c6.roa File: 70324e2c-97e2-38b4-8a29-b74a347765c6.roa (raw, json) Hash identifier: YB1KEHv1tC/iV7fSBJs3NH8SoagyS3z/AFOyNuRxFc8= Subject key identifier: 23:CF:20:DA:27:1B:B8:E6:75:25:75:E0:54:8C:CD:CC:4E:A4:3C:A5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972DDDF97C116203758B540 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/70324e2c-97e2-38b4-8a29-b74a347765c6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:dd:df:97:c1:16:20:37:58:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=07c6a8dc-8347-47c0-9b81-5f80e8b17c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:be:22:d4:a3:53:cd:3b:47:dd:6c:34:a1:3d: e7:00:72:9e:11:64:e2:bc:d1:47:89:3f:b2:c3:46: 5e:3d:38:7a:48:2b:ee:1f:02:36:01:a0:94:81:05: 9e:c4:12:02:03:5e:29:19:80:75:13:28:b6:a8:2c: ae:55:f2:ba:58:1f:95:a0:9e:d6:77:06:58:40:8a: fb:9c:cf:89:95:d2:8c:bd:8d:5d:7a:81:d6:47:f2: ce:0c:c7:58:63:ee:51:99:e5:67:3d:f2:e0:fc:47: 91:41:26:66:1d:1c:6d:64:70:86:e6:06:07:80:3f: 6a:c9:28:3d:0e:7b:5c:28:cb:eb:5a:0a:34:de:8b: 44:a4:7b:5b:2b:fb:77:29:3b:69:de:2e:01:d1:3b: e7:14:49:68:d4:5d:77:50:31:da:c0:fd:b0:4b:51: 0b:d9:87:71:6c:f4:73:a1:e5:3c:b5:db:6d:90:b4: cd:5b:a8:75:18:ea:85:6b:a1:c6:ff:ab:85:a7:cd: f3:08:5b:9e:21:63:86:4c:e8:e4:0e:db:c0:95:88: 45:16:31:b7:e5:9f:e8:be:99:22:54:75:29:4a:04: 50:1e:5a:4e:20:5e:f9:41:79:47:9f:61:b6:2d:3f: dd:e9:4f:fd:e1:a8:b5:ce:3b:d7:ad:f0:d4:d1:2c: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:20:DA:27:1B:B8:E6:75:25:75:E0:54:8C:CD:CC:4E:A4:3C:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/70324e2c-97e2-38b4-8a29-b74a347765c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0c:cb:ba:35:a4:f2:f8:37:fd:07:52:87:a5:7c:52:0e:c6: 84:42:1d:30:fd:69:30:aa:98:ce:6f:92:3a:61:98:50:98:7b: 7e:3e:b4:9a:0c:fe:7d:7f:6e:e8:d3:68:6a:57:7c:a1:eb:e4: 4d:99:46:12:9e:14:df:e0:42:a3:be:0b:73:06:c4:70:72:ed: c1:f4:50:50:77:50:e9:fc:18:ad:bd:65:6b:01:4c:d8:38:53: 7a:27:83:fd:73:d9:a4:d2:9b:af:4a:4b:3a:f3:bc:a8:6d:1c: 3c:08:83:52:0d:b0:90:f9:84:97:29:54:73:8d:e8:72:e1:64: e6:a2:62:7c:1d:ed:88:07:16:b6:d1:5b:c8:e6:24:3e:23:fb: 14:3b:1a:6c:56:5a:48:6e:98:25:4d:41:36:6f:3b:5f:68:09: c2:92:2a:93:bd:aa:f9:55:4d:78:bd:08:98:b7:87:f8:bb:66: fb:64:81:96:06:7f:01:2c:a0:3c:16:65:d3:6c:ef:33:c1:da: a6:5a:b1:34:cc:0a:ee:e7:99:5c:dc:6d:8f:48:de:72:8e:17: 66:00:b2:0a:e9:f8:dd:17:53:7f:eb:1d:63:58:3b:48:86:60: ad:86:eb:19:58:22:56:0e:0b:87:23:c7:ab:40:b2:57:83:64: ec:a1:b8:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jct3fl8EWIDdYtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDdjNmE4ZGMtODM0Ny00N2MwLTliODEtNWY4MGU4YjE3YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg74i1KNTzTtH3Ww0oT3nAHKeEWTivNFHiT+y w0ZePTh6SCvuHwI2AaCUgQWexBICA14pGYB1Eyi2qCyuVfK6WB+VoJ7WdwZYQIr7 nM+JldKMvY1deoHWR/LODMdYY+5RmeVnPfLg/EeRQSZmHRxtZHCG5gYHgD9qySg9 DntcKMvrWgo03otEpHtbK/t3KTtp3i4B0TvnFElo1F13UDHawP2wS1EL2YdxbPRz oeU8tdttkLTNW6h1GOqFa6HG/6uFp83zCFueIWOGTOjkDtvAlYhFFjG35Z/ovpki VHUpSgRQHlpOIF75QXlHn2G2LT/d6U/94ai1zjvXrfDU0Sy1jQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCPPINonG7jmdSV14FSMzcxOpDylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzAzMjRlMmMtOTdlMi0z OGI0LThhMjktYjc0YTM0Nzc2NWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJIMy7o1pPL4N/0HUoelfFIOxoRCHTD9aTCqmM5vkjphmFCYe34+ tJoM/n1/bujTaGpXfKHr5E2ZRhKeFN/gQqO+C3MGxHBy7cH0UFB3UOn8GK29ZWsB TNg4U3ong/1z2aTSm69KSzrzvKhtHDwIg1INsJD5hJcpVHON6HLhZOaiYnwd7YgH FrbRW8jmJD4j+xQ7GmxWWkhumCVNQTZvO19oCcKSKpO9qvlVTXi9CJi3h/i7Zvtk gZYGfwEsoDwWZdNs7zPB2qZasTTMCu7nmVzcbY9I3nKOF2YAsgrp+N0XU3/rHWNY O0iGYK2G6xlYIlYOC4cjx6tAsleDZOyhuBQ= -----END CERTIFICATE-----Generated at Fri Sep 25 09:13:34 2026 by rpki-client