$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/293e684a-7bd4-3127-83af-07287fbf52e0.roa File: 293e684a-7bd4-3127-83af-07287fbf52e0.roa (raw, json) Hash identifier: v8Qgon26o0pPqJ18Rb/0mQXW4e90THRnDesR9sZmBTE= Subject key identifier: 94:1E:5D:04:88:69:C8:78:1F:2D:DE:D9:5F:07:73:70:94:41:79:B3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E1374FE34A4412D933AE80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/293e684a-7bd4-3127-83af-07287fbf52e0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:37:4f:e3:4a:44:12:d9:33:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cab23150-5bd2-4a81-94da-213a445d1714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:1f:80:8f:6f:6e:7b:42:18:83:54:00:95: 8c:15:55:aa:7e:47:34:e3:32:0f:43:fc:94:17:b3: b4:96:d1:ac:cd:43:5e:2c:0e:2c:d6:61:58:10:29: 73:7a:22:08:ce:57:4d:16:65:ed:46:f1:09:ca:09: 08:9c:6a:0e:dc:da:db:ce:6c:d1:ff:a0:f8:ba:55: 17:0f:b8:27:eb:9d:33:87:d8:cb:41:e6:67:3e:5d: 23:0d:6e:71:67:b3:ba:ac:c0:d4:b1:e5:b3:11:80: 76:00:c8:8f:54:8c:84:50:b0:3f:ff:64:61:30:3f: 8d:7e:23:d6:20:cc:1a:97:be:ba:21:b0:90:4f:d7: b1:7d:76:fa:4d:c9:21:1e:c0:56:9d:fd:5e:2f:bb: 44:c5:81:bb:29:55:95:18:57:12:6f:6b:0c:ca:5d: e2:01:8f:e0:bd:34:eb:2c:3c:75:02:17:21:02:7b: 2b:a8:df:5c:4b:a3:61:20:9f:8d:be:01:d8:d4:46: 99:91:f3:23:1e:39:9c:ec:57:bf:79:48:89:a2:ba: d9:9c:3c:51:6c:8b:28:81:6a:d7:ed:51:55:96:19: a0:45:9b:96:bd:e9:4e:69:c6:77:e0:49:c7:db:83: 03:4b:f7:ab:b3:84:cc:a8:a7:6f:68:b4:3b:24:15: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1E:5D:04:88:69:C8:78:1F:2D:DE:D9:5F:07:73:70:94:41:79:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/293e684a-7bd4-3127-83af-07287fbf52e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:0f:4f:65:bd:1d:73:1b:6f:da:bd:42:8e:36:bf:87:63:16: 0e:e7:4d:97:00:af:d7:92:2d:4d:38:16:03:85:80:33:a8:21: 00:09:4a:09:30:8c:7c:e8:c3:7e:4a:f2:1e:b6:6e:9e:c3:e4: 4e:97:f4:53:08:b5:84:f8:fa:49:e2:55:16:71:33:4f:e3:6c: d5:96:c6:2e:06:42:63:ac:6e:3c:8d:38:e5:4d:16:5d:7b:92: bf:34:35:22:76:2f:09:78:c6:4e:a3:6b:aa:57:21:69:49:70: 78:71:a0:62:87:08:62:84:e0:9c:31:b0:7c:be:4d:8e:df:a1: 40:08:f9:1f:dd:4e:a8:22:f2:0f:11:32:4c:27:be:b0:2c:43: 4d:80:6a:29:e6:d7:93:3f:21:7c:9f:c4:bc:1d:c9:11:7f:5b: 0c:b7:0a:97:ee:64:8d:ec:0e:b0:26:27:a5:ff:5d:5b:fc:1d: 47:9c:a4:e5:43:42:0b:3e:e0:fe:ec:3e:0e:44:2b:b5:6d:37: a5:0a:86:ba:23:b0:46:f3:43:e1:08:0e:04:d5:c5:dc:47:6f: 74:d6:09:a8:b4:c8:26:53:ad:8a:8b:81:0b:0b:a0:d6:ce:8d: 21:c3:3b:20:2a:50:0b:0a:6c:84:d4:b5:15:ad:f9:be:4f:dc: 7d:90:a2:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4TdP40pEEtkzroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2FiMjMxNTAtNWJkMi00YTgxLTk0ZGEtMjEzYTQ0NWQxNzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIsfgI9vbntCGINUAJWMFVWqfkc04zIPQ/yU F7O0ltGszUNeLA4s1mFYEClzeiIIzldNFmXtRvEJygkInGoO3NrbzmzR/6D4ulUX D7gn650zh9jLQeZnPl0jDW5xZ7O6rMDUseWzEYB2AMiPVIyEULA//2RhMD+NfiPW IMwal766IbCQT9exfXb6TckhHsBWnf1eL7tExYG7KVWVGFcSb2sMyl3iAY/gvTTr LDx1AhchAnsrqN9cS6NhIJ+NvgHY1EaZkfMjHjmc7Fe/eUiJorrZnDxRbIsogWrX 7VFVlhmgRZuWvelOacZ34EnH24MDS/ers4TMqKdvaLQ7JBXwEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJQeXQSIach4Hy3e2V8Hc3CUQXmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjkzZTY4NGEtN2JkNC0z MTI3LTgzYWYtMDcyODdmYmY1MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFoPT2W9HXMbb9q9Qo42v4djFg7nTZcAr9eSLU04FgOFgDOoIQAJ SgkwjHzow35K8h62bp7D5E6X9FMItYT4+kniVRZxM0/jbNWWxi4GQmOsbjyNOOVN Fl17kr80NSJ2Lwl4xk6ja6pXIWlJcHhxoGKHCGKE4JwxsHy+TY7foUAI+R/dTqgi 8g8RMkwnvrAsQ02Aainm15M/IXyfxLwdyRF/Wwy3CpfuZI3sDrAmJ6X/XVv8HUec pOVDQgs+4P7sPg5EK7VtN6UKhrojsEbzQ+EIDgTVxdxHb3TWCai0yCZTrYqLgQsL oNbOjSHDOyAqUAsKbITUtRWt+b5P3H2Qoqs= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:28 2026 by rpki-client