$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2bac057-f69e-34d6-9882-0daa2d4dd96e.roa File: e2bac057-f69e-34d6-9882-0daa2d4dd96e.roa (raw, json) Hash identifier: /Jv/BG5zvVZexRwupYMW1FgykG+imStRCM2RnJZobFo= Subject key identifier: AC:E1:24:86:A4:2A:6C:B4:F2:7B:B3:DF:23:AB:4F:41:B9:9F:08:E4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972B05CC545BE691879A880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2bac057-f69e-34d6-9882-0daa2d4dd96e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 2001:500:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b0:5c:c5:45:be:69:18:79:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=311a18bc-9072-4ca7-9b6b-26e2d943c07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:f5:07:9e:94:3d:dc:2a:2d:39:78:58:0f: 05:64:a8:09:16:02:83:5f:e9:a9:15:90:6e:35:d9: 79:b0:d9:4c:57:29:50:cf:ee:d1:e9:27:0b:53:98: be:c1:9d:44:82:23:88:27:5b:fd:31:64:22:c4:9d: cb:ce:b8:72:d7:95:bc:ea:ed:69:07:60:80:f4:5d: 6a:4b:1b:0d:4d:e5:b4:98:f7:22:96:2f:fe:7d:de: b5:33:35:27:ad:d2:74:92:85:e1:de:d2:44:a7:5c: 9f:90:56:51:3b:8d:cb:aa:1b:3e:49:06:a4:0b:91: 89:2c:60:f9:8e:e7:3f:45:72:bf:1f:8d:93:29:2d: 2d:00:77:55:b1:9b:97:09:00:82:e2:39:6b:c8:09: 3e:a3:74:58:32:a3:84:5c:21:b2:56:5a:6c:a7:ff: b6:c5:78:26:e8:b7:f7:5e:f4:a9:b7:6e:d4:de:ef: c7:7d:d9:49:12:e5:68:f4:db:1b:df:f6:5c:15:db: 49:4f:b2:5a:3b:dc:cb:9e:7d:3a:8b:dc:0b:0e:a6: c6:4b:02:d2:86:44:6b:e2:bb:bb:7c:85:61:c5:eb: 98:97:65:bd:1e:88:8f:60:7b:3e:d9:50:bf:07:eb: 8c:04:77:39:1a:94:89:6c:e4:cc:3a:25:6c:75:03: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E1:24:86:A4:2A:6C:B4:F2:7B:B3:DF:23:AB:4F:41:B9:9F:08:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2bac057-f69e-34d6-9882-0daa2d4dd96e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:91:f3:22:57:47:c7:3b:35:b6:e8:c0:41:cd:eb:d8:51:83: 8f:15:3b:12:9e:b3:91:fa:6d:48:0e:7f:7c:64:be:28:e5:0f: 11:84:54:81:32:21:63:cf:fd:16:f9:21:0a:bd:32:54:15:07: cd:91:0a:ae:0b:3c:2f:89:a2:e3:e2:22:7b:e1:c6:d9:86:ee: 90:39:c8:cc:2e:66:78:61:80:b9:c3:e8:1d:71:21:5f:51:2d: 9e:55:2e:37:20:cc:6d:50:f4:5e:8e:2e:24:13:b9:b4:bb:78: 8a:56:de:fc:37:db:e4:d8:df:fc:94:60:ce:cc:f5:4f:e3:2a: 8a:b9:1c:d0:c2:b0:15:34:26:f0:31:48:4b:b5:27:88:93:06: 70:8a:cb:24:e1:68:d0:23:e3:f4:0d:6b:35:9d:5e:57:52:de: 9d:c6:b7:91:aa:32:8e:20:b8:32:d1:15:a3:f1:ee:f2:4c:90: ff:31:cd:3b:b3:d7:a8:f4:fb:5f:b9:41:8c:0f:6d:84:41:85: fd:b1:0a:86:f5:7b:8e:64:9d:89:e1:31:65:c3:4b:42:c3:94: b7:dc:29:8e:c3:da:65:dc:ab:11:ee:d9:70:14:42:05:5d:07: fa:4a:b4:d2:46:c4:7b:fa:7f:73:3a:10:fa:42:51:d8:f0:66: 6e:4e:92:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcrBcxUW+aRh5qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzExYTE4YmMtOTA3Mi00Y2E3LTliNmItMjZlMmQ5NDNjMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc31B56UPdwqLTl4WA8FZKgJFgKDX+mpFZBu Ndl5sNlMVylQz+7R6ScLU5i+wZ1EgiOIJ1v9MWQixJ3Lzrhy15W86u1pB2CA9F1q SxsNTeW0mPcili/+fd61MzUnrdJ0koXh3tJEp1yfkFZRO43Lqhs+SQakC5GJLGD5 juc/RXK/H42TKS0tAHdVsZuXCQCC4jlryAk+o3RYMqOEXCGyVlpsp/+2xXgm6Lf3 XvSpt27U3u/HfdlJEuVo9Nsb3/ZcFdtJT7JaO9zLnn06i9wLDqbGSwLShkRr4ru7 fIVhxeuYl2W9HoiPYHs+2VC/B+uMBHc5GpSJbOTMOiVsdQOFkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKzhJIakKmy08nuz3yOrT0G5nwjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTJiYWMwNTctZjY5ZS0z NGQ2LTk4ODItMGRhYTJkNGRkOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOR8yJXR8c7NbbowEHN69hRg48VOxKes5H6bUgOf3xkvijlDxGE VIEyIWPP/Rb5IQq9MlQVB82RCq4LPC+JouPiInvhxtmG7pA5yMwuZnhhgLnD6B1x IV9RLZ5VLjcgzG1Q9F6OLiQTubS7eIpW3vw32+TY3/yUYM7M9U/jKoq5HNDCsBU0 JvAxSEu1J4iTBnCKyyThaNAj4/QNazWdXldS3p3Gt5GqMo4guDLRFaPx7vJMkP8x zTuz16j0+1+5QYwPbYRBhf2xCob1e45knYnhMWXDS0LDlLfcKY7D2mXcqxHu2XAU QgVdB/pKtNJGxHv6f3M6EPpCUdjwZm5OkiA= -----END CERTIFICATE-----Generated at Fri Sep 25 22:08:06 2026 by rpki-client