$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa File: 186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa (raw, json) Hash identifier: 5eUy6+/AeNXlT5OSaHybZJ7yfj0itPhO+55Vv/hVkdA= Subject key identifier: D3:E6:02:36:D3:91:E3:D8:2C:D0:90:EF:C9:E4:AF:EA:79:E4:E6:75 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF708A3AF924339A8E679C Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:70:8a:3a:f9:24:33:9a:8e:67:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2aee166f-3f70-4108-bbe8-8003ce1ddbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:eb:93:55:6a:0f:09:3d:89:7b:f9:77:00:cd: 29:af:e3:e5:7f:07:7a:2c:73:f8:9e:89:20:4f:ac: 99:0f:e6:8e:18:39:fb:80:81:ad:33:87:00:78:f9: 62:2b:e4:0b:6d:4d:c4:a6:9a:a9:78:10:db:16:72: 7c:a2:61:e9:11:be:3e:8e:a2:27:5b:fe:39:1a:5e: ec:89:35:8b:48:9d:3f:44:58:91:f6:9e:7e:82:32: 0b:f7:60:2e:73:ca:16:ca:81:02:6a:15:c5:27:44: 2d:18:85:81:6c:51:02:7a:6c:50:22:1c:f0:69:57: 8a:85:cf:5d:69:99:69:63:c5:82:0f:07:59:ce:19: a5:84:91:97:33:2e:ca:37:c7:44:79:0f:45:8c:e5: 58:64:64:46:e7:2c:16:8d:54:61:6b:f5:5c:4c:e9: b6:11:f9:84:ce:ac:9d:2e:8a:c2:54:1b:44:83:0f: 47:88:d9:db:f6:48:d2:ae:30:48:d7:46:0c:7a:3e: 4e:b7:6f:f5:21:6c:44:61:4b:1a:2d:e2:1f:d2:dc: c0:57:91:38:d4:c8:f1:ea:26:91:73:14:0e:dc:d5: e8:7a:9a:72:26:40:53:9c:97:34:7b:06:5d:8b:a0: bb:aa:6b:4b:62:32:18:03:7c:8e:b3:1a:f1:59:c7: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E6:02:36:D3:91:E3:D8:2C:D0:90:EF:C9:E4:AF:EA:79:E4:E6:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:1f:0b:19:75:ab:72:42:bc:be:88:f5:15:7b:70:13:d3:f7: 1d:96:ac:c3:bb:8b:25:a8:db:94:8e:f9:fa:ba:23:cd:4c:9f: a7:1f:01:e8:09:dc:24:85:37:a2:58:4a:69:90:50:87:82:56: a0:36:42:a2:9f:02:fd:46:4c:e2:c9:dd:08:11:05:5d:84:68: 7f:77:f0:3a:fb:be:69:8b:f4:6c:3c:ac:d7:25:89:8d:8a:ea: 34:ea:7d:31:cf:73:67:db:7e:bf:df:cc:a8:dc:9d:4c:cd:35: 7a:46:97:29:cd:f1:b4:45:89:88:6b:36:9d:63:cb:38:a6:be: 80:49:08:09:81:eb:c5:69:dc:74:57:62:2c:53:dd:ef:ae:b6: f2:c2:ba:11:70:9c:d7:b2:79:99:9f:74:7f:d7:08:cf:39:11: 67:c2:d7:18:94:ea:ea:75:65:ee:7d:10:39:d1:cb:c8:28:9e: a7:30:40:4e:52:fc:d7:70:81:99:c9:b0:63:c4:46:07:a3:27: 2e:05:d2:2e:09:65:ef:3f:ea:bf:2b:6e:7e:72:1c:07:90:17: 0e:f8:59:0a:98:39:54:93:24:9c:fc:ea:87:13:c6:c9:c3:a9: de:7f:de:28:ec:95:a5:66:f6:59:12:f7:74:18:87:44:19:26: a2:b2:cb:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k33CKOvkkM5qOZ5wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmFlZTE2NmYtM2Y3MC00MTA4LWJiZTgtODAwM2NlMWRkYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OuTVWoPCT2Je/l3AM0pr+Plfwd6LHP4nokg T6yZD+aOGDn7gIGtM4cAePliK+QLbU3EppqpeBDbFnJ8omHpEb4+jqInW/45Gl7s iTWLSJ0/RFiR9p5+gjIL92Auc8oWyoECahXFJ0QtGIWBbFECemxQIhzwaVeKhc9d aZlpY8WCDwdZzhmlhJGXMy7KN8dEeQ9FjOVYZGRG5ywWjVRha/VcTOm2EfmEzqyd LorCVBtEgw9HiNnb9kjSrjBI10YMej5Ot2/1IWxEYUsaLeIf0tzAV5E41Mjx6iaR cxQO3NXoeppyJkBTnJc0ewZdi6C7qmtLYjIYA3yOsxrxWcdoKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPmAjbTkePYLNCQ78nkr+p55OZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTg2ZTA1NjktNzUwOS0z ZWIwLTliMmUtM2RjZjJkZWE4ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL8fCxl1q3JCvL6I9RV7cBPT9x2WrMO7iyWo25SO+fq6I81Mn6cf AegJ3CSFN6JYSmmQUIeCVqA2QqKfAv1GTOLJ3QgRBV2EaH938Dr7vmmL9Gw8rNcl iY2K6jTqfTHPc2fbfr/fzKjcnUzNNXpGlynN8bRFiYhrNp1jyzimvoBJCAmB68Vp 3HRXYixT3e+utvLCuhFwnNeyeZmfdH/XCM85EWfC1xiU6up1Ze59EDnRy8gonqcw QE5S/NdwgZnJsGPERgejJy4F0i4JZe8/6r8rbn5yHAeQFw74WQqYOVSTJJz86ocT xsnDqd5/3ijslaVm9lkS93QYh0QZJqKyy7k= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:17 2026 by rpki-client