$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa File: 1dba6855-d043-3318-9f5b-e0247f7172d4.roa (raw, json) Hash identifier: JD5Y4o0J4qHF3ojhnEJccUbHaZNotQEviCR8d7512gQ= Subject key identifier: 74:D2:24:11:91:F1:DD:4D:F8:0C:29:F4:CB:8C:07:96:D0:31:48:77 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF86DAE76D12A774DAEF80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:86:da:e7:6d:12:a7:74:da:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=161ee89c-a131-401c-8463-06a4b05bc4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a0:fc:9d:b8:ac:64:37:fa:6a:f5:e3:35:9b: de:09:05:0f:84:7b:c9:d3:82:76:64:61:14:58:46: 99:4f:a4:11:b5:e3:6c:43:21:05:cf:3a:49:60:87: d3:05:62:28:c9:5d:16:78:68:91:f7:71:ea:e6:76: 48:03:8c:4a:d7:3c:d7:32:1b:7d:51:7e:7e:79:be: 95:b8:d6:1f:be:cd:91:81:5d:28:e2:80:0b:4a:b7: aa:68:41:9b:a1:62:94:50:6b:92:18:ff:09:7a:e8: ec:10:b7:51:b3:c1:12:1f:b5:f7:9f:31:85:7d:56: bc:64:b0:7f:bf:e1:b8:f2:5a:ad:a9:75:33:24:cc: f8:00:93:0a:2f:54:fb:3f:2c:55:64:52:34:a9:3d: 4a:8f:44:a7:35:f9:c4:ed:f9:2b:6f:c6:b7:db:8b: 99:1c:93:78:c4:38:58:18:90:bf:ad:d9:05:5f:4d: c3:81:20:42:72:04:4d:e3:96:d2:86:94:52:ac:68: 8b:6f:0f:32:bf:af:d2:d3:5d:58:17:65:9d:de:cf: d3:5f:20:14:6e:ac:62:c7:6d:e7:91:ba:a4:cc:ab: 61:49:4c:56:b6:a9:a5:75:0b:cd:f1:ff:7f:dc:68: 53:ca:18:73:3a:38:0d:27:2e:56:1c:cb:47:f3:5b: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D2:24:11:91:F1:DD:4D:F8:0C:29:F4:CB:8C:07:96:D0:31:48:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:b4:f3:ea:95:9a:60:75:8b:ff:79:31:9c:ac:13:9b:eb:20: 90:c0:23:e1:dc:a3:fc:7c:93:60:cb:2d:75:ed:e8:a4:0d:08: 95:28:0e:88:e0:85:f0:9e:97:7e:9e:ac:97:38:5f:2c:64:47: 65:68:b3:7e:56:aa:65:53:0e:f7:1d:9a:21:eb:e0:68:ec:50: f3:35:ee:16:f9:48:0e:d4:83:16:d0:85:c1:10:c8:c9:93:96: 94:2e:65:ae:9b:0d:01:c5:64:de:18:9b:44:7b:13:80:e3:35: ed:bb:7c:2b:3e:f4:55:e5:80:de:95:76:30:1b:c8:b8:d6:53: ef:7c:3c:1a:cc:b4:b5:d5:59:66:24:0c:a9:8d:56:25:b2:ef: 27:a3:e8:b1:6e:40:21:f1:ee:e5:9f:d5:2f:6a:b2:9b:ce:36: 34:af:8c:14:85:15:e0:a9:f5:14:70:5a:4d:de:96:b4:26:93: be:7e:09:67:4c:bd:40:4c:d7:b5:f7:38:45:16:de:ec:50:3c: 63:69:3f:53:6a:bb:7c:3d:86:c8:f0:4c:a0:33:2f:1c:e5:5a: 1d:61:60:a5:7e:81:21:f0:15:51:b9:71:e3:a3:7c:d9:ae:38: 5a:83:22:94:9f:8d:57:51:3e:15:4f:4c:4e:99:ad:18:b3:9c: a0:d6:07:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k34ba520Sp3Ta74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTYxZWU4OWMtYTEzMS00MDFjLTg0NjMtMDZhNGIwNWJjNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqD8nbisZDf6avXjNZveCQUPhHvJ04J2ZGEU WEaZT6QRteNsQyEFzzpJYIfTBWIoyV0WeGiR93Hq5nZIA4xK1zzXMht9UX5+eb6V uNYfvs2RgV0o4oALSreqaEGboWKUUGuSGP8JeujsELdRs8ESH7X3nzGFfVa8ZLB/ v+G48lqtqXUzJMz4AJMKL1T7PyxVZFI0qT1Kj0SnNfnE7fkrb8a324uZHJN4xDhY GJC/rdkFX03DgSBCcgRN45bShpRSrGiLbw8yv6/S011YF2Wd3s/TXyAUbqxix23n kbqkzKthSUxWtqmldQvN8f9/3GhTyhhzOjgNJy5WHMtH81uM/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHTSJBGR8d1N+Awp9MuMB5bQMUh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWRiYTY4NTUtZDA0My0z MzE4LTlmNWItZTAyNDdmNzE3MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKy08+qVmmB1i/95MZysE5vrIJDAI+Hco/x8k2DLLXXt6KQNCJUo DojghfCel36erJc4XyxkR2Vos35WqmVTDvcdmiHr4GjsUPM17hb5SA7UgxbQhcEQ yMmTlpQuZa6bDQHFZN4Ym0R7E4DjNe27fCs+9FXlgN6VdjAbyLjWU+98PBrMtLXV WWYkDKmNViWy7yej6LFuQCHx7uWf1S9qspvONjSvjBSFFeCp9RRwWk3elrQmk75+ CWdMvUBM17X3OEUW3uxQPGNpP1Nqu3w9hsjwTKAzLxzlWh1hYKV+gSHwFVG5ceOj fNmuOFqDIpSfjVdRPhVPTE6ZrRiznKDWBzo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:13 2026 by rpki-client