$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa File: 07137d18-ea2a-3814-9a59-8ee61677f7c2.roa (raw, json) Hash identifier: IvqAWI8TX4KwG6U9TZ53LgDlSpXV9ZEWhp/Vz8CtqHc= Subject key identifier: 27:6A:41:C3:25:F2:50:09:C7:8D:44:EA:D3:62:46:5E:02:FC:78:04 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F71ED830673BE46FAB2135B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 198260 IP address blocks: 2001:500:f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:83:06:73:be:46:fa:b2:13:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=43983e50-f398-4b71-b0b6-9c75edcb2458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:f8:cd:4e:f4:b2:67:7a:4f:8c:eb:c6:89: a0:66:4b:61:78:42:8c:8d:37:a0:05:49:96:59:27: e1:e3:8f:12:97:1c:d8:07:f2:b9:eb:d6:8e:da:fe: ae:ca:49:29:11:c1:5f:9e:b0:f6:19:35:65:f3:5d: 89:88:7f:aa:88:99:7c:72:88:25:8a:c9:b3:47:27: 9f:eb:bd:cc:e4:b5:de:7e:8a:e8:02:10:5a:e8:a4: e2:f5:97:11:67:c1:2a:f7:8b:a6:04:57:20:47:b6: a1:01:b3:9a:6c:e2:ac:91:74:81:97:47:82:17:42: e0:6e:63:03:02:49:3c:f3:68:f8:11:4b:7a:3d:6a: 14:ce:48:1a:6c:2a:37:f0:33:48:fa:96:0f:a3:89: a1:c0:20:19:d8:65:6e:32:00:e8:0d:6b:c7:8b:6b: fe:9c:ba:3b:c5:74:d3:6b:ec:de:80:0d:ed:bf:19: 53:d1:c9:75:4c:46:e4:35:d7:97:a1:42:88:4c:9e: 96:36:4f:5e:fe:ef:ff:99:9f:35:ce:20:70:ee:77: 50:6a:f8:9c:bb:e8:c4:44:da:1c:42:c4:7c:2b:31: 67:e7:bb:3a:5d:60:8b:92:14:2b:9b:15:23:c4:30: 30:e5:79:2f:1f:06:d6:33:2b:2c:e2:a2:e4:28:89: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6A:41:C3:25:F2:50:09:C7:8D:44:EA:D3:62:46:5E:02:FC:78:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:02:c2:29:11:f0:61:5d:e9:07:9b:1e:2b:ae:5a:4f:52:93: 4a:f5:87:ee:3b:c5:b6:92:7e:68:3a:1b:4a:5f:2e:92:bf:de: eb:84:5a:a6:91:a7:c7:43:aa:f6:15:8e:29:c9:11:69:16:94: 02:e2:a8:52:a4:f7:9a:6b:52:36:09:65:ce:ba:5e:0f:ee:4f: e5:bf:2e:03:e3:86:36:76:bb:4e:b1:e7:a4:68:a5:67:f9:d2: df:51:58:3d:d2:d5:ae:80:e0:fc:ca:43:1d:e7:5e:21:29:d9: a4:f2:90:39:59:b8:23:eb:38:d7:4d:91:4d:74:d7:6e:fb:90: 32:20:6e:7d:f3:2c:80:71:f6:90:70:d0:e1:25:81:be:41:cf: 6c:2f:80:11:2c:89:4d:74:a5:6e:da:49:9d:23:64:d0:33:85: 67:5f:4b:09:53:de:73:0c:fa:34:f8:d9:85:72:b2:21:7b:60: 59:32:96:bb:5a:33:92:64:a4:98:a5:c8:52:21:9e:ee:2a:a3: f3:f6:60:22:c9:91:ca:b5:d4:9b:97:3e:b4:da:ae:b8:e9:97: 2f:f2:d5:e6:69:31:fa:f6:01:6a:b3:d0:68:0c:f2:f9:95:23: 86:cf:00:d9:1b:c9:0f:87:2b:7e:e8:01:fa:2f:cc:45:0d:c6: 3c:9f:f6:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9x7YMGc75G+rITW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NDM5ODNlNTAtZjM5OC00YjcxLWIwYjYtOWM3NWVkY2IyNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ir4zU70smd6T4zrxomgZktheEKMjTegBUmW WSfh448SlxzYB/K569aO2v6uykkpEcFfnrD2GTVl812JiH+qiJl8coglismzRyef 673M5LXeforoAhBa6KTi9ZcRZ8Eq94umBFcgR7ahAbOabOKskXSBl0eCF0LgbmMD Akk882j4EUt6PWoUzkgabCo38DNI+pYPo4mhwCAZ2GVuMgDoDWvHi2v+nLo7xXTT a+zegA3tvxlT0cl1TEbkNdeXoUKITJ6WNk9e/u//mZ81ziBw7ndQavicu+jERNoc QsR8KzFn57s6XWCLkhQrmxUjxDAw5XkvHwbWMyss4qLkKImf5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCdqQcMl8lAJx41E6tNiRl4C/HgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDcxMzdkMTgtZWEyYS0z ODE0LTlhNTktOGVlNjE2NzdmN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL8CwikR8GFd6QebHiuuWk9Sk0r1h+47xbaSfmg6G0pfLpK/3uuE WqaRp8dDqvYVjinJEWkWlALiqFKk95prUjYJZc66Xg/uT+W/LgPjhjZ2u06x56Ro pWf50t9RWD3S1a6A4PzKQx3nXiEp2aTykDlZuCPrONdNkU101277kDIgbn3zLIBx 9pBw0OElgb5Bz2wvgBEsiU10pW7aSZ0jZNAzhWdfSwlT3nMM+jT42YVysiF7YFky lrtaM5JkpJilyFIhnu4qo/P2YCLJkcq11JuXPrTarrjply/y1eZpMfr2AWqz0GgM 8vmVI4bPANkbyQ+HK37oAfovzEUNxjyf9ns= -----END CERTIFICATE-----Generated at Sun Oct 11 06:14:12 2026 by rpki-client