$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa File: 3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa (raw, json) Hash identifier: B90NXnhVMR31+DuBegn4l5iixaf3LtIWlr9tTMaLf/4= Subject key identifier: C7:F6:12:BB:B5:56:61:F9:AC:6B:78:B3:8C:17:D5:44:1D:33:41:FC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF9E1DE6E54620E4211180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9e:1d:e6:e5:46:20:e4:21:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=67b7267d-2ad0-4fc3-b084-2e37e6452ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:67:e1:8b:24:ea:f3:ca:e6:c5:30:31:2b: 69:ad:0a:bd:25:1a:57:aa:59:20:83:2d:be:65:3c: 22:06:f6:2a:a8:9d:5c:04:79:59:1e:bd:ae:ac:7d: 3c:a8:29:5f:1f:bf:bd:04:ba:80:be:ac:57:94:c0: 61:cc:e1:76:b6:75:f4:c2:e1:ea:1a:ee:e8:ea:af: f7:6e:96:6e:5c:98:20:0d:0b:0d:2d:ae:7e:8d:1a: 59:43:6f:29:82:2e:29:84:5b:03:42:b4:1f:3d:f6: cb:c7:b9:0a:c2:3f:e2:47:40:cb:81:94:a3:e0:d5: aa:44:e3:cf:a4:cf:21:24:09:dc:70:98:8f:5c:2a: c8:26:5b:6b:41:c5:11:3d:89:aa:05:27:ce:e1:59: 38:88:c1:de:84:87:4e:ff:5e:aa:3a:de:6c:e6:ff: a7:c6:d2:e9:34:c3:3e:81:6d:f5:d1:c8:fa:86:c1: 12:f2:98:04:3e:c9:c2:a0:06:7d:ff:e9:fb:91:ad: 03:8b:ab:11:9f:92:48:91:a5:be:25:bf:17:a4:a5: a0:5e:8d:3e:bc:32:9c:77:c4:4f:71:31:0b:c8:33: 88:be:90:25:11:93:11:5d:ff:83:dc:97:62:80:cb: 8b:ef:81:c2:d5:e7:65:8b:18:08:38:96:7c:04:c3: 83:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F6:12:BB:B5:56:61:F9:AC:6B:78:B3:8C:17:D5:44:1D:33:41:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7a:19:bc:9a:fb:cc:eb:32:75:94:52:db:7f:78:aa:ab:0a: 43:d7:27:f3:6a:06:b4:86:84:66:dc:55:b3:0a:f5:91:b1:99: 94:9f:a4:b6:c7:4d:a8:e5:f5:a0:ac:cf:bd:da:be:f2:f2:10: 75:52:65:c9:18:50:07:5f:23:5e:7f:18:15:35:5f:b6:91:75: 45:79:e0:30:a8:13:b8:ca:f5:ca:9c:45:82:62:29:22:f8:ff: 2a:4f:2f:3a:0f:24:a0:21:f2:d2:25:cb:59:f4:9f:1b:72:3f: cd:7b:05:05:ed:0f:aa:2e:6c:c3:91:97:2e:b3:70:6a:16:cb: 19:47:a4:1c:77:bc:b2:58:30:20:2a:18:d3:80:a9:0a:ff:d6: 51:03:c8:c3:96:90:e4:94:9e:b3:63:87:d1:26:92:5a:2f:62: 0e:98:d4:70:89:73:bd:eb:a9:c4:96:ce:6b:82:c3:45:ad:69: be:a6:e0:96:ac:c3:ff:23:72:05:27:eb:75:64:c6:1b:59:19: 31:0b:86:ee:5a:11:6f:99:b7:c1:8d:b5:10:50:3e:12:9e:f5: 2a:06:2b:fb:57:a0:74:c7:f3:9d:a0:ee:57:4c:94:9d:76:c1: 0b:75:3d:1e:e5:09:9d:e9:d5:46:a4:6a:70:0e:c3:f3:fb:75: bc:b0:60:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k354d5uVGIOQhEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjdiNzI2N2QtMmFkMC00ZmMzLWIwODQtMmUzN2U2NDUyYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyxn4Ysk6vPK5sUwMStprQq9JRpXqlkggy2+ ZTwiBvYqqJ1cBHlZHr2urH08qClfH7+9BLqAvqxXlMBhzOF2tnX0wuHqGu7o6q/3 bpZuXJggDQsNLa5+jRpZQ28pgi4phFsDQrQfPfbLx7kKwj/iR0DLgZSj4NWqROPP pM8hJAnccJiPXCrIJltrQcURPYmqBSfO4Vk4iMHehIdO/16qOt5s5v+nxtLpNMM+ gW310cj6hsES8pgEPsnCoAZ9/+n7ka0Di6sRn5JIkaW+Jb8XpKWgXo0+vDKcd8RP cTELyDOIvpAlEZMRXf+D3JdigMuL74HC1edlixgIOJZ8BMODrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMf2Eru1VmH5rGt4s4wX1UQdM0H8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Q5ZjkyNmItNDNlNi0z YmRhLTg2YTMtYjBjNGUxN2MwYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFx6Gbya+8zrMnWUUtt/eKqrCkPXJ/NqBrSGhGbcVbMK9ZGxmZSf pLbHTajl9aCsz73avvLyEHVSZckYUAdfI15/GBU1X7aRdUV54DCoE7jK9cqcRYJi KSL4/ypPLzoPJKAh8tIly1n0nxtyP817BQXtD6oubMORly6zcGoWyxlHpBx3vLJY MCAqGNOAqQr/1lEDyMOWkOSUnrNjh9EmklovYg6Y1HCJc73rqcSWzmuCw0Wtab6m 4Jasw/8jcgUn63VkxhtZGTELhu5aEW+Zt8GNtRBQPhKe9SoGK/tXoHTH852g7ldM lJ12wQt1PR7lCZ3p1UakanAOw/P7dbywYBQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:25 2026 by rpki-client