$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa File: f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa (raw, json) Hash identifier: lHuYVnjGCsH5EOmQ5GaB9C82N0bigpRU7jt2K0mDAgI= Subject key identifier: FF:A7:66:1A:64:2A:AF:02:4E:8D:FB:0B:93:1F:90:D1:06:5B:B9:75 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F71EDBE04D65EF091144A46E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 13901 IP address blocks: 2001:500:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:be:04:d6:5e:f0:91:14:4a:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=f96bdd2d-c85d-4f65-abbb-ece017cc732b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:4c:e2:27:52:74:02:b1:2a:99:71:85:75: a7:fd:4b:c9:ad:3a:b6:2a:35:48:3f:75:28:c4:f3: 32:e2:e7:c1:fe:7d:15:34:d8:42:6e:ff:44:72:10: a1:b2:51:24:d5:b7:6b:75:d9:40:76:e8:81:e9:e6: c2:cd:45:d6:fa:e9:31:20:43:35:37:4e:52:82:c8: 08:fe:c4:f2:48:64:80:78:a0:9e:63:08:d1:06:ac: 6f:ec:ec:b7:66:38:6c:ed:40:d1:ef:ed:fc:2f:1f: 0f:f5:10:20:d2:9a:7b:f4:bb:27:38:c4:77:26:3a: cf:6f:80:36:c5:ac:3c:c4:dd:f6:4b:47:74:2b:85: 0f:c2:44:95:4c:4b:9f:52:30:7f:37:cf:74:db:65: fd:dc:6f:43:5f:52:18:43:c9:6c:71:c9:c5:d1:7a: 86:dd:cc:50:51:24:9a:c8:a7:c9:72:bb:e2:6a:48: 91:f5:ab:ed:cb:e7:aa:e7:67:c4:79:e5:e0:1e:97: 22:9e:d8:28:b2:1b:a7:b1:09:1a:96:f8:8b:8b:c3: 80:f9:89:18:64:7b:66:21:a8:fa:b4:b8:4b:c6:c0: a2:20:d8:99:a5:0d:18:4b:0b:35:8f:79:05:50:a3: 3e:4f:bc:6b:29:c0:99:a4:7a:25:63:e6:21:80:d0: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A7:66:1A:64:2A:AF:02:4E:8D:FB:0B:93:1F:90:D1:06:5B:B9:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a8:f4:bc:8f:5f:18:c2:23:25:52:7a:b9:02:5f:80:54:ef: 35:f1:f3:e8:19:97:41:b5:2d:3f:dd:06:1d:95:33:13:28:8b: e7:06:9c:22:8d:c6:e5:bc:5a:16:c8:6b:6b:73:1a:3c:8a:8a: e2:d2:91:32:17:64:86:c8:fb:70:9a:a9:7d:73:59:6f:92:54: 58:7e:b0:75:bf:f8:4e:61:0d:b4:8b:78:82:22:a5:88:cb:09: 57:4e:21:84:78:fc:f5:bd:5c:fe:2a:4e:ca:1e:45:87:24:27: 32:a2:49:72:7d:b0:88:e9:dd:52:c8:c5:a2:3f:18:40:a0:e9: 73:79:5a:c3:fe:16:ea:20:b9:84:b6:e8:8a:57:cd:4a:e3:ff: 96:66:ba:c4:30:a1:5b:61:46:43:2c:be:16:3c:3a:ed:08:e3: 62:c8:3f:1d:57:20:b1:5e:35:26:19:39:2b:af:b0:ba:5f:ec: 83:55:7f:54:48:28:6e:e5:fe:34:9f:90:08:81:22:e2:ad:70: 37:9b:74:4f:69:a1:9a:f0:0b:ce:cf:8f:77:21:7b:d0:bf:d1: 9a:9d:bc:9f:5c:60:aa:a5:e7:14:36:63:c7:54:e2:b5:c3:f4: 67:4c:6a:e0:d1:c4:72:40:99:1f:23:eb:ea:1d:a1:99:33:03: bf:2d:a5:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9x7b4E1l7wkRRKRuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk Zjk2YmRkMmQtYzg1ZC00ZjY1LWFiYmItZWNlMDE3Y2M3MzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1RM4idSdAKxKplxhXWn/UvJrTq2KjVIP3Uo xPMy4ufB/n0VNNhCbv9EchChslEk1bdrddlAduiB6ebCzUXW+ukxIEM1N05SgsgI /sTySGSAeKCeYwjRBqxv7Oy3Zjhs7UDR7+38Lx8P9RAg0pp79LsnOMR3JjrPb4A2 xaw8xN32S0d0K4UPwkSVTEufUjB/N89022X93G9DX1IYQ8lsccnF0XqG3cxQUSSa yKfJcrviakiR9avty+eq52fEeeXgHpcintgoshunsQkalviLi8OA+YkYZHtmIaj6 tLhLxsCiINiZpQ0YSws1j3kFUKM+T7xrKcCZpHolY+YhgNDW0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP+nZhpkKq8CTo37C5MfkNEGW7l1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjBhNjQyNjYtZmFmZS0z NTUzLThiYjEtODliYjljMWE3M2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKo9LyPXxjCIyVSerkCX4BU7zXx8+gZl0G1LT/dBh2VMxMoi+cG nCKNxuW8WhbIa2tzGjyKiuLSkTIXZIbI+3CaqX1zWW+SVFh+sHW/+E5hDbSLeIIi pYjLCVdOIYR4/PW9XP4qTsoeRYckJzKiSXJ9sIjp3VLIxaI/GECg6XN5WsP+Fuog uYS26IpXzUrj/5ZmusQwoVthRkMsvhY8Ou0I42LIPx1XILFeNSYZOSuvsLpf7INV f1RIKG7l/jSfkAiBIuKtcDebdE9poZrwC87Pj3che9C/0ZqdvJ9cYKql5xQ2Y8dU 4rXD9GdMauDRxHJAmR8j6+odoZkzA78tpbI= -----END CERTIFICATE-----Generated at Sun Oct 11 06:21:53 2026 by rpki-client