$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa File: 11cdd2e2-39fe-3cac-a71b-b6844486d252.roa (raw, json) Hash identifier: XGGEa2EsS/KdemUEBofs4wravXdccWqwHDbjK+FP1jM= Subject key identifier: C4:21:E2:8C:2A:DE:16:F9:F4:AC:33:FC:23:14:0B:D2:42:37:82:6E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E12D911E067A1A89633A60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2d:91:1e:06:7a:1a:89:63:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7ec6d2fc-e8c8-4db1-8cf5-3e9a5e2c2110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f6:ff:06:ba:e5:96:c8:45:da:83:81:c1:75: 8b:36:21:0b:72:9a:dd:1a:12:55:cf:dd:ac:fc:b5: 98:0e:4a:bc:8c:9d:77:24:60:c6:39:1f:a1:f5:d9: 02:08:e1:14:93:93:07:56:6e:c3:9a:5c:db:45:6e: a6:97:d4:11:ed:f2:cb:c3:f0:50:6e:bd:3e:3d:09: de:89:94:b5:97:7c:91:00:0c:9c:56:fd:e5:9b:f0: 78:f8:91:68:21:a5:a4:34:dd:8d:f3:d9:f2:d0:71: 6d:cb:3b:03:00:88:01:c4:d1:f6:61:15:7e:c4:7b: 6c:ac:c9:60:c1:b8:25:59:4c:8f:a0:fb:67:c9:dc: 95:57:c6:34:f4:d1:df:7b:32:7a:4a:1d:db:ff:bd: 4f:99:fa:0e:51:6a:3f:63:b6:40:bf:43:57:b8:43: c6:49:84:ab:2c:b9:fc:17:d6:8d:d0:ad:18:36:c8: 5e:ed:6e:a5:e7:7b:e2:e8:7e:95:f2:23:82:13:09: 62:3a:60:79:32:36:31:91:39:ba:e3:51:6b:76:2b: 51:4d:9e:6c:7e:47:66:0e:43:45:de:66:8d:15:e3: cb:22:22:b6:64:ae:25:d3:05:19:f0:b3:f0:c2:69: b8:b1:91:90:fd:7b:bf:14:f3:0d:15:f6:51:f6:df: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:21:E2:8C:2A:DE:16:F9:F4:AC:33:FC:23:14:0B:D2:42:37:82:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f6:bd:4a:a6:88:bb:f3:c7:b4:72:c5:82:b9:2d:09:ea:8b: ad:8d:d5:5a:0b:09:fb:b1:e2:99:18:f1:6c:b9:5e:01:75:aa: 1e:a0:84:89:9e:c0:b8:9d:da:af:8d:6c:0f:30:98:7c:ce:98: 4a:61:8a:77:bd:c4:a9:40:d8:5e:f3:e9:bb:73:20:19:d7:de: 74:1b:32:1a:1b:66:f7:81:8e:1a:86:bf:6c:2a:55:42:a0:08: 22:b8:75:d9:9e:99:de:41:a2:16:86:e9:1d:8e:ec:7f:00:ad: 60:a9:4a:2c:ca:7c:32:12:89:08:47:a2:a9:72:67:ee:fe:31: 3b:09:68:55:f5:fe:20:9e:5e:b8:8f:23:19:59:6e:ca:1d:fe: b9:3f:b9:0e:14:b8:12:a6:8e:44:ea:f6:bb:61:29:3e:ac:ef: 9e:49:b4:66:af:e0:c5:40:ec:bd:f7:01:3a:32:9f:59:cb:46: 0d:74:35:da:84:88:05:f8:fe:95:df:60:e2:5c:3f:4a:3d:d4: d0:6b:95:78:47:11:68:64:a5:c2:ae:68:60:5f:da:11:57:5a: 15:84:a6:64:82:22:96:a3:24:69:86:28:5f:c1:63:6b:73:0c: 95:af:b5:06:b6:bf:a0:bd:e4:3c:6e:1c:65:03:13:56:b0:43: 6a:50:4e:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4S2RHgZ6GoljOmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2VjNmQyZmMtZThjOC00ZGIxLThjZjUtM2U5YTVlMmMyMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/b/BrrllshF2oOBwXWLNiELcprdGhJVz92s /LWYDkq8jJ13JGDGOR+h9dkCCOEUk5MHVm7DmlzbRW6ml9QR7fLLw/BQbr0+PQne iZS1l3yRAAycVv3lm/B4+JFoIaWkNN2N89ny0HFtyzsDAIgBxNH2YRV+xHtsrMlg wbglWUyPoPtnydyVV8Y09NHfezJ6Sh3b/71PmfoOUWo/Y7ZAv0NXuEPGSYSrLLn8 F9aN0K0YNshe7W6l53vi6H6V8iOCEwliOmB5MjYxkTm641FrditRTZ5sfkdmDkNF 3maNFePLIiK2ZK4l0wUZ8LPwwmm4sZGQ/Xu/FPMNFfZR9t+RAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMQh4owq3hb59Kwz/CMUC9JCN4JuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTFjZGQyZTItMzlmZS0z Y2FjLWE3MWItYjY4NDQ0ODZkMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFn2vUqmiLvzx7RyxYK5LQnqi62N1VoLCfux4pkY8Wy5XgF1qh6g hImewLid2q+NbA8wmHzOmEphine9xKlA2F7z6btzIBnX3nQbMhobZveBjhqGv2wq VUKgCCK4ddmemd5BohaG6R2O7H8ArWCpSizKfDISiQhHoqlyZ+7+MTsJaFX1/iCe XriPIxlZbsod/rk/uQ4UuBKmjkTq9rthKT6s755JtGav4MVA7L33AToyn1nLRg10 NdqEiAX4/pXfYOJcP0o91NBrlXhHEWhkpcKuaGBf2hFXWhWEpmSCIpajJGmGKF/B Y2tzDJWvtQa2v6C95DxuHGUDE1awQ2pQTgc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:16 2026 by rpki-client