$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0274c4e5-72a5-3fda-ae9d-37ba2e970e11.roa File: 0274c4e5-72a5-3fda-ae9d-37ba2e970e11.roa (raw, json) Hash identifier: wjI/calPA7vBEs0wDn0msxlmxStGxshY8GOJIN0weXs= Subject key identifier: 86:C1:F5:F4:DC:8A:5B:4E:52:C8:1F:67:E1:7A:A7:FE:A3:01:24:B3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E1305A0659809EB2766880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0274c4e5-72a5-3fda-ae9d-37ba2e970e11.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:30:5a:06:59:80:9e:b2:76:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f8208335-707f-49a7-8572-074b7e07bbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6a:e6:3e:5b:71:f8:03:f8:86:cc:40:e6:9e: b4:6c:a7:d7:9c:f7:51:38:77:5e:60:30:71:e6:aa: 91:29:a9:5b:68:7d:4a:7b:08:46:e5:5b:69:66:da: ed:35:51:f4:9d:e7:a5:8c:db:71:f5:2a:cd:6c:f5: 0f:fc:15:e4:c6:11:4b:40:54:fc:8f:d1:67:85:5c: 97:27:79:09:11:4b:0f:01:93:09:03:3a:1d:a1:60: 81:14:d7:de:c8:ee:1b:c5:bc:4b:14:bf:d6:07:7b: 01:1c:92:4c:98:ad:db:4b:85:62:f8:25:cc:f2:1b: d1:b7:14:70:21:bc:32:32:20:1d:58:4f:54:1b:86: 65:65:0b:ad:5f:de:20:b1:f2:a8:e1:0e:22:18:f4: 3d:f7:e7:89:ce:cc:b5:8e:2c:ce:a2:60:23:c5:6a: 20:9b:b7:75:11:a8:0c:d7:5e:b1:1b:e1:22:f1:59: fa:89:9a:9a:4b:3e:c9:d5:3a:8f:ef:53:8c:97:36: 72:d0:da:2d:a6:da:6d:d3:12:f1:3e:30:fd:42:99: f3:3c:bc:1b:ca:44:4e:d0:cf:3c:87:f4:78:1e:2f: 1f:7f:f3:e4:60:de:21:e4:6f:61:c3:01:14:f7:ab: a7:ff:e6:58:9c:2d:29:79:83:d5:a7:38:c9:94:8e: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C1:F5:F4:DC:8A:5B:4E:52:C8:1F:67:E1:7A:A7:FE:A3:01:24:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0274c4e5-72a5-3fda-ae9d-37ba2e970e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:49:b7:67:23:4f:46:9d:91:cc:e0:27:f1:0f:f9:67:30:b9: fc:50:b9:cd:bc:42:76:e0:72:95:97:e8:67:fd:e5:01:0a:88: 79:e4:c6:18:1f:e2:3c:c9:2f:37:21:a3:80:c8:3f:3a:a1:13: 60:70:c3:bc:af:20:b8:65:fc:c7:65:cc:7e:2f:c4:0c:6c:b1: d0:5a:47:0a:3f:10:43:46:bd:49:02:75:ff:4b:76:c5:cf:fa: 4d:64:ee:11:e1:72:83:e3:0d:50:38:f6:f0:0e:8d:a0:a2:76: 7d:b4:4c:50:f8:2c:e9:d9:76:38:8c:60:95:ae:77:0e:12:f9: b0:b6:bb:de:f4:b2:e3:ae:ac:23:e2:db:69:4f:ed:03:51:ac: d0:57:97:51:90:cb:9e:aa:e5:bd:e3:e7:d5:2e:32:c5:e8:50: e8:ff:4a:30:08:ad:ad:fd:88:7e:93:f4:79:1e:f7:2b:f4:35: ef:14:b5:00:82:5d:f6:a1:8f:e7:73:2d:40:d0:64:f6:38:ce: 96:61:15:06:58:99:6f:f5:93:06:81:ea:e0:99:08:f0:aa:4b: 89:01:68:90:99:1b:82:af:d5:87:e5:96:04:3d:cb:25:67:56: f1:13:0b:0d:92:2a:38:8e:00:50:24:22:9c:ec:7f:56:5d:de: c8:29:dc:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4TBaBlmAnrJ2aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjgyMDgzMzUtNzA3Zi00OWE3LTg1NzItMDc0YjdlMDdiYmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGrmPltx+AP4hsxA5p60bKfXnPdROHdeYDBx 5qqRKalbaH1KewhG5VtpZtrtNVH0neeljNtx9SrNbPUP/BXkxhFLQFT8j9FnhVyX J3kJEUsPAZMJAzodoWCBFNfeyO4bxbxLFL/WB3sBHJJMmK3bS4Vi+CXM8hvRtxRw IbwyMiAdWE9UG4ZlZQutX94gsfKo4Q4iGPQ99+eJzsy1jizOomAjxWogm7d1EagM 116xG+Ei8Vn6iZqaSz7J1TqP71OMlzZy0Notptpt0xLxPjD9QpnzPLwbykRO0M88 h/R4Hi8ff/PkYN4h5G9hwwEU96un/+ZYnC0peYPVpzjJlI4ZFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIbB9fTciltOUsgfZ+F6p/6jASSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDI3NGM0ZTUtNzJhNS0z ZmRhLWFlOWQtMzdiYTJlOTcwZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNJt2cjT0adkczgJ/EP+WcwufxQuc28QnbgcpWX6Gf95QEKiHnk xhgf4jzJLzcho4DIPzqhE2Bww7yvILhl/MdlzH4vxAxssdBaRwo/EENGvUkCdf9L dsXP+k1k7hHhcoPjDVA49vAOjaCidn20TFD4LOnZdjiMYJWudw4S+bC2u970suOu rCPi22lP7QNRrNBXl1GQy56q5b3j59UuMsXoUOj/SjAIra39iH6T9Hke9yv0Ne8U tQCCXfahj+dzLUDQZPY4zpZhFQZYmW/1kwaB6uCZCPCqS4kBaJCZG4Kv1YfllgQ9 yyVnVvETCw2SKjiOAFAkIpzsf1Zd3sgp3Kc= -----END CERTIFICATE-----Generated at Thu Mar 26 20:58:34 2026 by rpki-client