$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d231a0-5597-3a08-9e86-7c7079d184e2.roa File: e3d231a0-5597-3a08-9e86-7c7079d184e2.roa (raw, json) Hash identifier: g0Iwcuh6FBGsNVaHXJ2VtNa2tviFq2LQHqYNtrVVC7E= Subject key identifier: 5E:9F:C6:A8:B7:2D:34:9B:7B:66:78:0F:5F:0E:AD:F7:95:8A:BC:5F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498ACACE003E14835D632340 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d231a0-5597-3a08-9e86-7c7079d184e2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 2001:500:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:ca:ce:00:3e:14:83:5d:63:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aa9da961-16fc-46c9-9b7b-dcc9b6363b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b7:0f:75:58:1b:cd:8d:82:d5:ba:eb:52:8e: 5d:52:4d:24:23:da:5b:de:d2:d8:64:7c:46:50:f2: 8f:91:7e:8c:b9:3d:0b:07:27:52:a8:33:99:ea:10: a2:1a:bf:63:16:0c:fd:1f:c1:63:ed:4a:2a:b0:db: cf:f1:d0:c4:b6:3c:66:02:e2:80:c2:7f:dc:39:33: 63:6e:db:22:4f:d6:83:d0:2f:0b:26:a9:10:ab:c6: fe:f9:fa:16:24:aa:da:ee:51:27:0a:7c:06:15:7f: 18:7f:17:15:2b:2e:a3:86:d3:03:c1:2f:fa:f7:da: 74:5d:bd:cd:85:b3:8e:4d:63:cf:e9:31:9c:2c:a0: 0b:b0:c8:99:ba:5f:fb:6b:df:16:ce:df:cf:ac:3f: 21:98:fd:df:2b:f0:75:2a:81:fb:b9:71:88:43:31: 46:73:94:20:9f:50:b7:d8:15:4e:ed:5b:db:d0:51: 05:f7:c9:51:c0:58:dc:a8:74:56:67:67:c0:c2:49: fb:5b:6a:db:48:db:a1:89:e4:07:16:a2:e6:d8:79: c1:f6:f2:4f:71:14:4e:6c:36:46:b3:23:52:d5:50: 94:e7:cf:f3:12:2b:f6:dc:22:ac:1a:b0:23:f2:e1: 01:04:e9:12:b9:61:8e:f3:97:ba:99:b4:25:9f:3e: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9F:C6:A8:B7:2D:34:9B:7B:66:78:0F:5F:0E:AD:F7:95:8A:BC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d231a0-5597-3a08-9e86-7c7079d184e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:51:e9:be:6c:66:99:c1:2a:66:bf:57:02:cd:4f:af:6b:a1: c1:72:87:a9:46:e7:84:9b:94:cd:e2:48:b4:c7:6c:6f:89:52: 39:24:51:e8:ee:cd:2b:ab:57:87:20:22:80:ad:a4:9c:17:8b: da:82:6e:f0:c9:8f:33:14:14:8a:21:12:d9:92:23:56:24:b9: 20:1c:fe:d7:af:b2:a9:71:50:dd:a7:27:bb:22:60:a2:9b:c6: e2:bc:8b:42:37:2a:a9:82:30:1b:19:26:99:75:2a:6b:a0:e3: ff:34:91:e2:96:a8:0e:47:d3:11:1e:b4:ff:52:b8:52:12:d4: 62:3c:e0:b3:8d:d1:2c:88:fe:c9:8d:57:6b:21:9b:d2:d8:79: 3f:e6:d6:9b:62:cc:cd:77:d6:0a:d2:cb:73:73:f5:a7:db:7d: e0:9b:d7:22:25:d3:5a:35:26:cb:42:0a:ac:26:54:af:7c:5f: e7:8f:33:8c:9a:6b:b8:ca:85:38:e0:a4:fd:55:b7:d8:e7:a5: ea:89:cc:1a:23:47:4e:a0:2e:a7:5c:83:1b:de:65:63:01:4a: fa:7d:16:f2:b0:18:8f:14:78:41:cd:06:50:5e:5d:75:3e:d8: 81:ce:05:2f:91:6f:3d:d5:36:79:c3:7c:ab:ec:03:a9:de:6b: bc:22:d9:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JisrOAD4Ug11jI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWE5ZGE5NjEtMTZmYy00NmM5LTliN2ItZGNjOWI2MzYzYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rcPdVgbzY2C1brrUo5dUk0kI9pb3tLYZHxG UPKPkX6MuT0LBydSqDOZ6hCiGr9jFgz9H8Fj7UoqsNvP8dDEtjxmAuKAwn/cOTNj btsiT9aD0C8LJqkQq8b++foWJKra7lEnCnwGFX8YfxcVKy6jhtMDwS/699p0Xb3N hbOOTWPP6TGcLKALsMiZul/7a98Wzt/PrD8hmP3fK/B1KoH7uXGIQzFGc5Qgn1C3 2BVO7Vvb0FEF98lRwFjcqHRWZ2fAwkn7W2rbSNuhieQHFqLm2HnB9vJPcRRObDZG syNS1VCU58/zEiv23CKsGrAj8uEBBOkSuWGO85e6mbQlnz4rmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF6fxqi3LTSbe2Z4D18OrfeVirxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTNkMjMxYTAtNTU5Ny0z YTA4LTllODYtN2M3MDc5ZDE4NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMVR6b5sZpnBKma/VwLNT69rocFyh6lG54SblM3iSLTHbG+JUjkk UejuzSurV4cgIoCtpJwXi9qCbvDJjzMUFIohEtmSI1YkuSAc/tevsqlxUN2nJ7si YKKbxuK8i0I3KqmCMBsZJpl1Kmug4/80keKWqA5H0xEetP9SuFIS1GI84LON0SyI /smNV2shm9LYeT/m1ptizM131grSy3Nz9afbfeCb1yIl01o1JstCCqwmVK98X+eP M4yaa7jKhTjgpP1Vt9jnpeqJzBojR06gLqdcgxveZWMBSvp9FvKwGI8UeEHNBlBe XXU+2IHOBS+Rbz3VNnnDfKvsA6nea7wi2cU= -----END CERTIFICATE-----Generated at Fri Sep 25 16:37:02 2026 by rpki-client