$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa File: d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa (raw, json) Hash identifier: lQk5F0ss7L8Tip6TWeD8GP3fzSC8c4v9WqRypzNq0DE= Subject key identifier: EA:AE:6F:9D:A8:73:A6:31:8E:9C:C7:5C:70:96:84:80:29:2B:48:1B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498A99027A6994FF9F41A540 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:99:02:7a:69:94:ff:9f:41:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5a836492-e8d9-4249-a01c-ae5a8e49153c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7a:36:13:8b:af:71:cc:3e:3c:e4:bd:3f:74: a2:02:9f:49:38:63:df:73:7c:d3:e7:b1:a2:8e:d2: 78:91:7e:20:07:32:30:e8:96:3e:4d:80:71:08:d8: 79:bf:a1:2d:00:36:57:eb:d6:7e:bd:cc:65:0e:a9: c4:04:4f:d4:e1:43:8c:44:c7:82:39:2d:62:c9:0b: 1c:e2:68:9b:1c:5f:53:ad:f4:75:74:5d:7a:61:59: 4a:07:20:e2:df:49:5f:b3:f9:d8:60:09:cb:56:14: 9d:a6:16:86:c1:53:2d:fd:ff:74:17:55:0c:35:6d: 98:81:00:b1:b9:a1:4f:58:e2:4d:e4:21:d9:85:9b: d8:0a:60:82:42:8b:7a:4b:a9:27:74:23:0b:8d:8e: e9:17:4a:ce:80:32:35:af:35:23:f2:3c:4b:6a:6e: 33:28:58:7f:9d:68:c1:56:30:fc:a1:e2:18:bc:01: e0:51:c0:4f:2b:b0:9e:8e:c2:e0:b0:15:8a:3f:3e: dc:10:9c:fc:7d:a2:3c:36:6b:f2:2d:57:ad:9f:20: d6:41:64:91:8a:97:90:46:62:e3:b5:63:80:fc:0a: 7e:54:11:77:79:8f:dd:14:e4:bc:b1:ab:44:e2:99: 07:ff:83:8c:2e:87:a4:19:81:c1:a8:2c:fd:54:08: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AE:6F:9D:A8:73:A6:31:8E:9C:C7:5C:70:96:84:80:29:2B:48:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:af:f4:02:bc:41:e3:af:38:1e:d7:76:d4:95:51:43:e8:2a: bd:2c:c8:63:77:be:44:6c:44:8f:cc:57:f2:38:ea:be:2c:75: 6c:0f:e4:9c:6e:98:65:47:e4:41:2c:c1:72:7d:0b:22:19:31: 8c:a6:b0:e4:4d:d3:fc:81:a9:8d:3c:ba:bd:59:8c:63:3e:f7: 38:8d:56:2a:1c:4e:8d:9e:fb:7b:87:90:ef:04:92:0e:3f:1e: f6:cd:f8:f0:02:b9:e7:44:58:00:3c:1a:f8:ba:34:2f:56:26: 0d:31:9a:8a:c8:57:41:4d:d7:42:d4:39:ac:87:13:41:7a:e4: 4a:6a:e7:eb:68:eb:01:0e:7d:03:b1:7e:5a:2f:bb:c3:a5:2c: 72:45:2a:a6:0c:99:62:12:20:80:05:30:32:14:14:2f:2b:6c: 12:31:5b:b9:02:8a:56:34:6c:f8:1f:53:75:5e:f6:44:72:56: 88:11:3d:d4:c4:ec:6a:a1:31:aa:6c:17:f8:e0:1a:0c:5e:12: a8:3f:06:75:40:12:77:c2:9c:e0:8e:97:20:20:2b:c3:c0:59: 9e:a5:f6:be:7e:87:a5:4f:c1:13:c1:99:a4:cf:dc:46:88:1d: e4:d9:39:bf:3a:34:1e:38:3b:cc:3e:04:1f:15:31:3f:07:95: fe:02:a8:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JipkCemmU/59BpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWE4MzY0OTItZThkOS00MjQ5LWEwMWMtYWU1YThlNDkxNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXo2E4uvccw+POS9P3SiAp9JOGPfc3zT57Gi jtJ4kX4gBzIw6JY+TYBxCNh5v6EtADZX69Z+vcxlDqnEBE/U4UOMRMeCOS1iyQsc 4mibHF9TrfR1dF16YVlKByDi30lfs/nYYAnLVhSdphaGwVMt/f90F1UMNW2YgQCx uaFPWOJN5CHZhZvYCmCCQot6S6kndCMLjY7pF0rOgDI1rzUj8jxLam4zKFh/nWjB VjD8oeIYvAHgUcBPK7CejsLgsBWKPz7cEJz8faI8NmvyLVetnyDWQWSRipeQRmLj tWOA/Ap+VBF3eY/dFOS8satE4pkH/4OMLoekGYHBqCz9VAh/VwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOqub52oc6YxjpzHXHCWhIApK0gbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDJkODU0ZWQtNjI5NC0z MmIwLThjNzctNDEzZDUxZmU1YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEmv9AK8QeOvOB7XdtSVUUPoKr0syGN3vkRsRI/MV/I46r4sdWwP 5JxumGVH5EEswXJ9CyIZMYymsORN0/yBqY08ur1ZjGM+9ziNViocTo2e+3uHkO8E kg4/HvbN+PACuedEWAA8Gvi6NC9WJg0xmorIV0FN10LUOayHE0F65Epq5+to6wEO fQOxflovu8OlLHJFKqYMmWISIIAFMDIUFC8rbBIxW7kCilY0bPgfU3Ve9kRyVogR PdTE7GqhMapsF/jgGgxeEqg/BnVAEnfCnOCOlyAgK8PAWZ6l9r5+h6VPwRPBmaTP 3EaIHeTZOb86NB44O8w+BB8VMT8Hlf4CqFo= -----END CERTIFICATE-----Generated at Fri Sep 25 19:56:44 2026 by rpki-client