$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa File: 309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa (raw, json) Hash identifier: 357hcKPqOLzETsPuLwzJ2iUxp2ArNijs8yUgk+suzP8= Subject key identifier: AE:BF:59:8B:3A:67:33:7B:B2:AC:85:8E:CE:74:4D:C6:E0:83:05:DD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E11E1DF232825A54A1AE20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1e:1d:f2:32:82:5a:54:a1:ae:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=180f3910-e2a6-47bb-96de-b1d7603eda00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bb:08:97:ec:73:12:8a:0a:dc:dd:a1:9b:7f: 0e:d5:34:c4:b1:10:e1:e4:cd:e0:fc:97:77:10:87: 37:69:62:4f:c7:28:b9:d1:5d:fd:0f:a4:6f:45:bd: 8d:52:a2:c9:b0:ae:82:2e:e2:04:bd:92:d8:85:12: 62:54:03:76:be:11:02:2b:65:c9:56:ae:b4:c8:96: 79:a1:21:75:7a:b9:e1:31:d1:c6:ec:5a:ae:33:17: 96:61:cf:4b:ab:7e:35:4e:7b:bb:55:26:35:f0:f3: 30:8e:51:dd:ec:dc:5b:a9:c7:17:9b:43:2f:3c:07: ff:10:fb:13:c4:7b:84:7a:c4:a5:6c:38:4f:8e:73: d7:23:3f:cf:71:9b:b1:20:94:fd:c5:4c:6d:c4:1b: 9a:c3:3c:36:af:a5:fb:2c:91:b1:5e:e4:1d:56:89: 34:7f:d6:8b:85:cd:8b:48:f7:38:a1:6b:7b:3b:58: b6:05:d7:d7:32:d8:34:4c:cc:28:70:1f:dd:3e:46: d7:ae:82:67:0a:8c:f1:a1:f4:84:cd:1d:ad:b0:95: 5e:7b:69:cd:81:a3:ca:bb:45:ad:4d:a3:6b:33:62: 46:b7:e7:12:d3:0f:4e:31:66:4d:b6:12:90:38:5f: d2:c8:77:a5:d1:1a:57:e1:33:cb:2b:32:6b:cd:c0: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BF:59:8B:3A:67:33:7B:B2:AC:85:8E:CE:74:4D:C6:E0:83:05:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:46::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:0a:12:10:b6:1b:0e:93:bd:27:5c:36:fb:03:4e:93:10:89: f0:91:0f:16:cf:ab:67:33:10:d5:38:23:32:13:de:72:4a:f1: ec:98:ed:de:f3:d0:7c:25:1e:23:57:b9:d2:e1:e9:24:12:c9: 65:74:e9:cf:52:ba:39:b7:13:f4:84:c5:72:81:48:cc:57:9d: e6:d2:48:90:32:42:87:21:84:35:81:ff:79:28:a4:74:69:bd: bd:6f:b3:37:16:be:af:3a:48:41:03:1f:61:67:65:14:2c:46: b4:2c:24:72:7d:55:0f:c2:9b:c7:9b:ab:f7:bd:ae:7a:7e:66: 78:55:73:e4:6d:75:f6:2d:ea:88:b1:b1:62:0b:07:ef:16:92: 0b:d2:cc:7b:d9:99:91:1b:40:10:20:f9:47:75:93:a9:f6:ad: 32:22:da:34:14:c6:1d:a3:bf:7f:a5:81:5f:f8:8d:58:bc:f7: fa:68:1f:ea:5a:fd:07:75:c9:9b:96:6e:0a:c3:5d:ae:12:d2: c7:3e:91:7a:64:82:fb:49:ce:22:46:02:49:48:03:e7:da:be: 37:ce:d7:c6:45:5e:4d:7e:06:a0:c9:8b:de:99:cd:0d:db:e6: 59:9a:6a:65:8d:64:3b:de:be:9a:0e:35:52:10:ad:b0:8c:b3: bf:a7:60:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4R4d8jKCWlShriAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTgwZjM5MTAtZTJhNi00N2JiLTk2ZGUtYjFkNzYwM2VkYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27sIl+xzEooK3N2hm38O1TTEsRDh5M3g/Jd3 EIc3aWJPxyi50V39D6RvRb2NUqLJsK6CLuIEvZLYhRJiVAN2vhECK2XJVq60yJZ5 oSF1ernhMdHG7FquMxeWYc9Lq341Tnu7VSY18PMwjlHd7NxbqccXm0MvPAf/EPsT xHuEesSlbDhPjnPXIz/PcZuxIJT9xUxtxBuawzw2r6X7LJGxXuQdVok0f9aLhc2L SPc4oWt7O1i2BdfXMtg0TMwocB/dPkbXroJnCozxofSEzR2tsJVee2nNgaPKu0Wt TaNrM2JGt+cS0w9OMWZNthKQOF/SyHel0RpX4TPLKzJrzcC3xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK6/WYs6ZzN7sqyFjs50TcbggwXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzA5YzkwOTktM2IwMC0z OGM2LWIyYjQtMmJkYmY1ZTc5YTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUKEhC2Gw6TvSdcNvsDTpMQifCRDxbPq2czENU4IzIT3nJK8eyY 7d7z0HwlHiNXudLh6SQSyWV06c9Sujm3E/SExXKBSMxXnebSSJAyQochhDWB/3ko pHRpvb1vszcWvq86SEEDH2FnZRQsRrQsJHJ9VQ/Cm8ebq/e9rnp+ZnhVc+RtdfYt 6oixsWILB+8WkgvSzHvZmZEbQBAg+Ud1k6n2rTIi2jQUxh2jv3+lgV/4jVi89/po H+pa/Qd1yZuWbgrDXa4S0sc+kXpkgvtJziJGAklIA+favjfO18ZFXk1+BqDJi96Z zQ3b5lmaamWNZDvevpoONVIQrbCMs7+nYJY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:04 2026 by rpki-client