$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa File: d7b76d36-d31b-377f-98aa-7d8bea972932.roa (raw, json) Hash identifier: rPrHxnFCyX0vYhw/caWFSyHPst45URbW6GHCSp9Aluo= Subject key identifier: 71:17:26:11:A0:A4:0C:82:7E:F9:6B:EA:5A:D0:D2:BD:21:17:96:78 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49731BB582AB9F1C606AFC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:1b:b5:82:ab:9f:1c:60:6a:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2fb1d952-4713-4178-9cfc-488fddd76fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4b:8a:dc:03:a9:b1:cb:43:7c:c4:b9:91:8e: 8a:88:3d:93:44:73:48:dd:92:b2:f0:6c:f1:cf:54: bb:e6:dc:04:ce:c9:1d:65:b8:9a:1f:0d:2e:36:36: e4:ef:66:c7:e9:ff:1c:90:cc:3b:09:aa:ba:2c:53: 9b:a6:83:37:b1:27:ab:cb:b4:ac:4f:8b:66:9e:14: 4f:72:22:68:d0:b6:66:d0:ef:7d:0d:35:af:42:94: 49:7e:5b:61:bc:e6:c1:9e:d9:6f:f2:63:45:c3:3e: fb:7f:ea:8d:1d:e6:55:f3:7e:af:6b:28:f9:4b:8a: 48:89:1f:06:02:a8:4d:7a:f6:7f:21:15:82:70:2b: fe:73:75:c3:4d:b0:99:4d:16:9d:11:3d:41:00:2a: 3f:bc:82:0a:1a:46:10:f4:aa:a3:a4:5b:42:00:45: 1b:ea:83:00:39:7e:31:df:51:27:c0:b4:5d:d3:2b: f9:84:80:71:c5:07:a5:77:dc:f0:ea:b8:0a:a2:27: 3e:30:1d:ce:5d:8e:5e:5c:bc:a1:d7:9c:77:86:48: fe:71:02:94:50:09:fd:31:23:34:bf:e9:f0:89:ec: 21:57:7d:f9:02:65:f1:46:70:96:c0:b5:96:df:6f: f9:58:2c:1b:78:19:13:43:ea:82:22:b1:6e:e1:d0: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:17:26:11:A0:A4:0C:82:7E:F9:6B:EA:5A:D0:D2:BD:21:17:96:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ba:84:45:c0:92:16:29:00:4f:fc:8e:f9:b7:b8:d7:65:3a: be:43:fc:bc:df:27:61:d0:0f:7a:71:a9:00:bc:58:c5:25:6e: de:18:a5:6e:12:b7:7e:22:37:c8:41:4e:f7:a6:a7:e6:3c:d1: 08:46:e5:b4:77:c4:05:d3:0c:2a:45:43:ae:0f:8e:a0:f1:9f: 89:b5:ee:93:f2:c1:5e:fc:61:7a:2d:45:e8:46:5c:45:e6:4e: 37:0c:65:e8:85:62:49:66:93:e2:50:3e:a9:b8:a4:0f:9b:cb: 2a:97:c3:01:e9:13:b0:bf:27:d2:9e:b8:a8:95:7b:c8:b9:1a: 98:d2:83:f8:1e:8d:a9:de:aa:c6:52:52:75:0e:2d:c7:8d:ec: 72:51:07:d1:cc:6c:37:c0:ea:75:bc:07:96:5a:0f:72:46:39: 7b:e9:1a:6f:16:54:19:8f:da:d2:47:45:84:45:44:78:42:80: 65:60:84:57:47:70:9e:dd:b1:d4:cc:af:60:5b:a5:3d:83:e7: b6:92:0e:21:a2:54:8c:7f:0c:98:d4:19:29:d5:f1:91:5c:cd: 61:0b:5f:3b:76:e0:ae:d7:61:7c:38:ad:09:41:16:b0:76:fd: dc:36:9a:31:7d:8d:2c:60:04:4c:43:08:4c:01:a1:a1:83:4a: b8:c4:3f:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jcxu1gqufHGBq/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmZiMWQ5NTItNDcxMy00MTc4LTljZmMtNDg4ZmRkZDc2ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikuK3AOpsctDfMS5kY6KiD2TRHNI3ZKy8Gzx z1S75twEzskdZbiaHw0uNjbk72bH6f8ckMw7Caq6LFObpoM3sSery7SsT4tmnhRP ciJo0LZm0O99DTWvQpRJflthvObBntlv8mNFwz77f+qNHeZV836vayj5S4pIiR8G AqhNevZ/IRWCcCv+c3XDTbCZTRadET1BACo/vIIKGkYQ9KqjpFtCAEUb6oMAOX4x 31EnwLRd0yv5hIBxxQeld9zw6rgKoic+MB3OXY5eXLyh15x3hkj+cQKUUAn9MSM0 v+nwiewhV335AmXxRnCWwLWW32/5WCwbeBkTQ+qCIrFu4dCNJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHEXJhGgpAyCfvlr6lrQ0r0hF5Z4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDdiNzZkMzYtZDMxYi0z NzdmLTk4YWEtN2Q4YmVhOTcyOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI26hEXAkhYpAE/8jvm3uNdlOr5D/LzfJ2HQD3pxqQC8WMUlbt4Y pW4St34iN8hBTvemp+Y80QhG5bR3xAXTDCpFQ64PjqDxn4m17pPywV78YXotRehG XEXmTjcMZeiFYklmk+JQPqm4pA+byyqXwwHpE7C/J9KeuKiVe8i5GpjSg/gejane qsZSUnUOLceN7HJRB9HMbDfA6nW8B5ZaD3JGOXvpGm8WVBmP2tJHRYRFRHhCgGVg hFdHcJ7dsdTMr2BbpT2D57aSDiGiVIx/DJjUGSnV8ZFczWELXzt24K7XYXw4rQlB FrB2/dw2mjF9jSxgBExDCEwBoaGDSrjEP6g= -----END CERTIFICATE-----Generated at Fri Sep 25 22:32:26 2026 by rpki-client