$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa File: 08891ef8-25ed-318c-973b-a8f9d9331675.roa (raw, json) Hash identifier: DZRApgVL5eEMTkaz+csq9nZM0IQkuLIs+0x4XTVglFk= Subject key identifier: BE:AB:15:0F:FC:20:99:24:51:C6:B7:93:48:90:DA:B9:F2:60:64:72 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF793F5BC07612E7FC1400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:79:3f:5b:c0:76:12:e7:fc:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f2d5ac8c-aea6-4a65-82d1-2c3fd2685446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d4:75:d7:b7:82:8b:26:5c:4b:45:af:70:ab: 9b:d3:59:fd:06:eb:26:85:17:80:a3:fb:f2:99:d5: d1:90:db:54:e9:59:76:98:90:47:34:b6:cd:24:8f: 24:e6:93:30:eb:a1:de:54:1c:9b:99:f6:7e:5b:ea: a0:ea:29:ac:fb:d8:59:4a:bf:36:8b:ce:1c:be:d9: f7:73:a2:21:0a:63:3b:a3:55:e8:08:a8:f4:41:f4: 02:09:ce:88:45:e0:97:c9:65:5f:35:c5:3e:5b:5f: 15:8b:f1:48:71:46:75:ee:46:e2:f4:22:fc:8a:b2: 68:61:d3:c2:c3:61:20:87:2b:d8:72:09:b6:91:9c: 74:bf:61:fd:7b:4b:e8:19:33:bd:f8:03:cb:7d:90: 4a:ab:b6:4d:51:e2:9c:ba:ca:01:5a:45:73:88:d4: 5d:94:1b:b9:4d:1c:9e:72:90:59:ab:2f:c7:8b:91: 48:4e:be:56:f3:ad:6a:ce:0f:ce:80:ae:88:31:e5: 42:2f:a5:2c:16:78:41:3e:58:a8:61:7e:b2:18:d7: 0d:5c:4e:79:20:87:13:89:2f:96:52:9a:cf:ef:bb: 96:ba:c1:96:c2:3f:b6:35:cb:af:e1:8d:22:4f:36: 6f:b5:3b:ec:52:28:f8:f1:f6:74:81:c4:ff:33:bc: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AB:15:0F:FC:20:99:24:51:C6:B7:93:48:90:DA:B9:F2:60:64:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:e0:ab:03:c2:31:89:e2:63:89:68:9b:59:2b:ed:dc:08:85: 37:92:33:e3:bf:8b:80:83:54:d1:45:ed:67:e1:ec:88:aa:7d: f1:77:5f:33:61:01:4a:01:30:a4:d5:94:61:d2:9e:d3:32:60: 7d:2c:4f:bd:5f:93:30:1d:7f:84:a5:71:a7:e3:a1:2f:c8:e4: ba:bf:67:4d:f5:2a:3f:7c:48:b2:16:30:2c:d5:ae:88:7c:9b: dc:ac:c7:8c:30:0b:8e:5b:c0:05:d3:b4:d1:1b:1b:1f:61:9e: 6a:bd:77:3d:d7:40:1b:29:8d:c7:0f:ef:49:27:d9:92:cd:e7: 01:f5:c2:54:47:da:cf:05:04:59:2b:20:2a:00:b2:1e:57:61: fa:3c:48:80:92:29:72:c6:d2:f5:3d:6c:4f:4a:d4:77:0b:bf: b2:8c:5d:56:bb:66:11:2f:42:38:94:35:08:51:47:34:7d:83: 07:0f:f5:49:16:e0:61:36:48:b3:98:d8:79:a4:e5:ec:32:0f: 13:4b:78:56:75:4b:80:db:c3:48:86:3a:51:1e:32:ed:1d:61: 6c:e0:74:bd:3d:8e:69:6f:08:e0:8a:51:d4:e0:2f:3d:1a:48: 28:17:93:d8:97:eb:da:57:7b:2a:2f:0d:95:9f:8d:46:2d:f6: e7:35:22:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k33k/W8B2Euf8FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjJkNWFjOGMtYWVhNi00YTY1LTgyZDEtMmMzZmQyNjg1NDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19R117eCiyZcS0WvcKub01n9BusmhReAo/vy mdXRkNtU6Vl2mJBHNLbNJI8k5pMw66HeVBybmfZ+W+qg6ims+9hZSr82i84cvtn3 c6IhCmM7o1XoCKj0QfQCCc6IReCXyWVfNcU+W18Vi/FIcUZ17kbi9CL8irJoYdPC w2EghyvYcgm2kZx0v2H9e0voGTO9+APLfZBKq7ZNUeKcusoBWkVziNRdlBu5TRye cpBZqy/Hi5FITr5W861qzg/OgK6IMeVCL6UsFnhBPlioYX6yGNcNXE55IIcTiS+W UprP77uWusGWwj+2Ncuv4Y0iTzZvtTvsUij48fZ0gcT/M7zp9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL6rFQ/8IJkkUca3k0iQ2rnyYGRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDg4OTFlZjgtMjVlZC0z MThjLTk3M2ItYThmOWQ5MzMxNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALLgqwPCMYniY4lom1kr7dwIhTeSM+O/i4CDVNFF7Wfh7IiqffF3 XzNhAUoBMKTVlGHSntMyYH0sT71fkzAdf4SlcafjoS/I5Lq/Z031Kj98SLIWMCzV roh8m9ysx4wwC45bwAXTtNEbGx9hnmq9dz3XQBspjccP70kn2ZLN5wH1wlRH2s8F BFkrICoAsh5XYfo8SICSKXLG0vU9bE9K1HcLv7KMXVa7ZhEvQjiUNQhRRzR9gwcP 9UkW4GE2SLOY2Hmk5ewyDxNLeFZ1S4Dbw0iGOlEeMu0dYWzgdL09jmlvCOCKUdTg Lz0aSCgXk9iX69pXeyovDZWfjUYt9uc1Im0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:52 2026 by rpki-client