$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/16fad676-ca50-3750-a36b-089250678313.roa File: 16fad676-ca50-3750-a36b-089250678313.roa (raw, json) Hash identifier: gMRlfBD8yju1HMwHZSkbCBpfVkw5BFsIX8xNoPV+kDU= Subject key identifier: C4:8D:DD:40:20:6E:2B:F7:44:15:CE:1F:6E:B0:7B:12:87:81:6D:D8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E10D776EF25233D74E7C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/16fad676-ca50-3750-a36b-089250678313.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0d:77:6e:f2:52:33:d7:4e:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5e860489-976c-4696-9552-818ad26a4533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:d2:89:07:5e:21:57:b1:31:ad:4e:fb:26: 4b:53:0c:92:a3:e4:d4:c1:c0:0f:f4:eb:a8:e7:bc: f1:98:08:bb:be:65:cb:e1:e5:ab:47:60:ed:10:d9: 8b:b1:f8:61:f2:f0:7e:e0:81:bc:17:7c:f1:21:b2: 99:12:7d:9f:11:1a:16:0b:a5:63:39:6f:8a:cc:20: 13:16:a4:5f:8e:e7:2e:a9:fa:92:b3:2e:c0:28:84: 67:60:7f:1e:5d:e2:21:64:3f:0b:6e:cc:bb:38:3d: 50:30:6b:58:9d:da:4a:93:c4:64:58:6f:cb:15:15: 7b:50:c0:09:53:03:90:6b:4b:81:27:de:af:2a:55: b1:c1:d8:29:8d:44:a1:67:6c:41:71:d5:ac:36:2b: f0:ec:2f:3d:64:d3:d9:39:89:7f:f7:ca:55:b5:84: 78:34:76:84:c0:4e:9b:27:1c:d1:b6:34:27:c3:4d: 63:4d:7e:3f:aa:48:92:23:94:1c:95:3c:6a:f9:cd: 23:1b:88:80:4c:34:4b:44:92:bf:1d:30:41:27:7f: f2:69:03:78:40:34:a9:c1:92:de:c8:9b:ef:a4:3d: f0:1e:03:19:b7:51:2b:06:37:de:93:a6:af:7e:48: 13:50:45:a6:cd:bb:8a:20:2a:4e:be:a6:c2:26:a0: b0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8D:DD:40:20:6E:2B:F7:44:15:CE:1F:6E:B0:7B:12:87:81:6D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/16fad676-ca50-3750-a36b-089250678313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:1e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:10:f6:c3:68:11:ba:b6:f5:13:60:7c:a2:b9:5a:b0:2e:6c: cf:54:80:32:ce:2f:ca:79:64:3a:b1:92:cd:53:34:f8:60:10: 8f:8f:92:9d:ab:6d:82:89:39:0d:1e:1b:31:5d:c2:19:58:7a: fa:e8:45:4a:4e:50:3f:d1:38:b9:23:bc:8f:5d:dd:30:11:8d: eb:d5:84:37:66:72:9e:f3:55:16:8c:a6:d7:bd:19:31:1e:11: 9e:c8:b1:f9:e4:f5:08:5a:cd:69:8e:80:3d:4c:e4:f2:69:da: 12:af:42:d2:64:51:29:64:9a:2d:1b:9b:44:cf:85:86:2b:5c: ba:0f:9c:72:48:52:d4:af:c5:30:ee:3b:99:48:24:81:e2:26: f1:b6:63:d9:56:36:5d:9f:be:e1:fa:fb:01:39:b2:b8:3e:5d: 31:98:e0:44:da:62:25:54:c9:54:85:38:e2:0b:15:4b:be:49: 91:4b:ce:ab:0d:f9:7b:54:0c:78:24:90:67:9c:76:e8:ac:b5: 2f:de:bc:4b:d5:ad:04:64:50:89:14:32:b6:02:63:74:54:37: 73:52:3f:63:64:4b:d0:d3:7b:b5:bc:d2:fc:48:4a:e9:4d:ca: ca:de:4e:1a:93:00:da:bd:81:49:21:78:86:59:e2:6e:f7:7a: cd:d8:e4:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4Q13bvJSM9dOfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWU4NjA0ODktOTc2Yy00Njk2LTk1NTItODE4YWQyNmE0NTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH3SiQdeIVexMa1O+yZLUwySo+TUwcAP9Ouo 57zxmAi7vmXL4eWrR2DtENmLsfhh8vB+4IG8F3zxIbKZEn2fERoWC6VjOW+KzCAT FqRfjucuqfqSsy7AKIRnYH8eXeIhZD8Lbsy7OD1QMGtYndpKk8RkWG/LFRV7UMAJ UwOQa0uBJ96vKlWxwdgpjUShZ2xBcdWsNivw7C89ZNPZOYl/98pVtYR4NHaEwE6b JxzRtjQnw01jTX4/qkiSI5QclTxq+c0jG4iATDRLRJK/HTBBJ3/yaQN4QDSpwZLe yJvvpD3wHgMZt1ErBjfek6avfkgTUEWmzbuKICpOvqbCJqCw+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMSN3UAgbiv3RBXOH26wexKHgW3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTZmYWQ2NzYtY2E1MC0z NzUwLWEzNmItMDg5MjUwNjc4MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEgQ9sNoEbq29RNgfKK5WrAubM9UgDLOL8p5ZDqxks1TNPhgEI+P kp2rbYKJOQ0eGzFdwhlYevroRUpOUD/ROLkjvI9d3TARjevVhDdmcp7zVRaMpte9 GTEeEZ7Isfnk9QhazWmOgD1M5PJp2hKvQtJkUSlkmi0bm0TPhYYrXLoPnHJIUtSv xTDuO5lIJIHiJvG2Y9lWNl2fvuH6+wE5srg+XTGY4ETaYiVUyVSFOOILFUu+SZFL zqsN+XtUDHgkkGecduistS/evEvVrQRkUIkUMrYCY3RUN3NSP2NkS9DTe7W80vxI SulNysreThqTANq9gUkheIZZ4m73es3Y5Lc= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:36 2026 by rpki-client