$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa File: 1a6c305a-690d-3108-8f35-980317f42700.roa (raw, json) Hash identifier: NB1nYNgcO4V35ppNHZHrMefPVZh6j6f4AOZnpNmRrFQ= Subject key identifier: 93:C3:E6:18:46:41:F4:20:95:C4:60:03:DD:D9:DF:A2:48:93:15:BB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E12BF40F6984CE33D04400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2b:f4:0f:69:84:ce:33:d0:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d6d6830e-62b6-432f-afee-fff4e6312a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:f0:7e:56:14:dd:99:63:2a:d9:6a:74:0b: a1:e3:e3:02:da:f6:bf:3e:e7:9b:0b:b2:c2:06:69: 36:fd:e9:62:f2:22:e4:4b:13:ab:49:e9:74:e9:8b: ca:25:08:f4:c9:1b:b6:a2:2c:4f:98:44:21:99:56: 77:5c:3b:17:e7:1c:22:3a:ca:64:b5:e5:ee:01:67: e8:82:b7:2a:a5:a3:98:6d:30:82:47:70:d0:36:8b: 19:f6:ae:ab:5a:79:4e:5f:48:d7:3b:61:96:91:ca: 71:a5:b4:16:45:2e:8e:68:bc:70:62:c9:27:34:13: 24:6a:62:d4:b1:09:74:2a:65:ca:09:99:f9:70:15: 99:40:ce:85:28:53:0c:8c:2b:a9:1d:14:15:c1:70: ad:ed:af:ae:df:41:6d:60:56:0d:dc:93:3d:d9:6b: 50:13:2c:4c:4e:9a:17:26:0b:6b:5b:97:87:1e:d1: eb:f0:22:7a:6a:b5:b5:88:64:13:91:f7:eb:31:0e: 65:e8:ff:d0:8c:93:35:70:05:d4:04:41:39:dd:22: c3:32:fd:2e:ef:f4:75:d4:c3:3e:45:a6:a5:2c:31: d5:ac:3c:83:bd:e9:cb:99:6a:5b:e3:e5:d1:67:3a: 07:2c:f7:b3:72:fd:9a:a3:e2:8e:96:e3:50:73:d1: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C3:E6:18:46:41:F4:20:95:C4:60:03:DD:D9:DF:A2:48:93:15:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a6c305a-690d-3108-8f35-980317f42700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:68:8b:2e:3e:a9:1a:61:0a:3c:08:a6:5d:26:49:88:4a:fd: ac:c2:ce:b7:7b:b0:30:2e:fc:93:db:f5:f4:23:35:88:b4:5e: bb:1b:ad:1a:85:5b:88:d8:84:07:79:ab:42:7e:3f:61:6a:4c: 9c:79:d1:6a:8f:87:79:3a:c2:6b:77:b6:22:36:80:19:47:b6: 3b:bb:66:b7:ca:b0:de:eb:b4:2e:22:c1:d7:b7:95:d2:58:22: 3c:33:dc:f4:21:ab:43:71:03:18:4b:dd:4a:bc:20:86:b1:df: 61:3b:58:a0:ce:0b:78:8b:8e:6f:7f:17:ff:78:60:b6:fd:06: f5:da:57:a3:f2:6d:68:b3:35:c5:1e:5f:9d:b4:11:c8:e5:d1: c9:ea:a8:e6:b5:2e:f1:ae:70:0c:9f:4e:da:a1:5f:31:ee:2a: ed:28:66:0d:1d:48:7c:99:b4:0a:83:88:3d:47:2e:30:1e:12: 03:45:5d:50:15:b6:ae:ba:bf:23:ba:07:31:fd:66:b2:3d:41: 2a:6e:49:4c:6f:fe:b4:a7:ef:94:36:0d:f5:46:f3:3a:78:9a: e2:bd:a8:b6:80:51:22:b1:9e:85:a0:98:6a:0f:bd:a7:f4:ed: 7f:70:7a:93:25:d0:3d:c0:a1:9c:36:09:3f:83:d6:70:45:17: 6a:bc:2a:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4Sv0D2mEzjPQRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDZkNjgzMGUtNjJiNi00MzJmLWFmZWUtZmZmNGU2MzEyYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKXwflYU3ZljKtlqdAuh4+MC2va/PuebC7LC Bmk2/eli8iLkSxOrSel06YvKJQj0yRu2oixPmEQhmVZ3XDsX5xwiOspkteXuAWfo grcqpaOYbTCCR3DQNosZ9q6rWnlOX0jXO2GWkcpxpbQWRS6OaLxwYsknNBMkamLU sQl0KmXKCZn5cBWZQM6FKFMMjCupHRQVwXCt7a+u30FtYFYN3JM92WtQEyxMTpoX JgtrW5eHHtHr8CJ6arW1iGQTkffrMQ5l6P/QjJM1cAXUBEE53SLDMv0u7/R11MM+ RaalLDHVrDyDvenLmWpb4+XRZzoHLPezcv2ao+KOluNQc9ERaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJPD5hhGQfQglcRgA93Z36JIkxW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWE2YzMwNWEtNjkwZC0z MTA4LThmMzUtOTgwMzE3ZjQyNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZoiy4+qRphCjwIpl0mSYhK/azCzrd7sDAu/JPb9fQjNYi0Xrsb rRqFW4jYhAd5q0J+P2FqTJx50WqPh3k6wmt3tiI2gBlHtju7ZrfKsN7rtC4iwde3 ldJYIjwz3PQhq0NxAxhL3Uq8IIax32E7WKDOC3iLjm9/F/94YLb9BvXaV6PybWiz NcUeX520Ecjl0cnqqOa1LvGucAyfTtqhXzHuKu0oZg0dSHyZtAqDiD1HLjAeEgNF XVAVtq66vyO6BzH9ZrI9QSpuSUxv/rSn75Q2DfVG8zp4muK9qLaAUSKxnoWgmGoP vaf07X9wepMl0D3AoZw2CT+D1nBFF2q8KjU= -----END CERTIFICATE-----Generated at Thu Mar 26 14:43:11 2026 by rpki-client