$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/48b2ba29-f0af-38ab-a323-fea36c2e2ad7.roa File: 48b2ba29-f0af-38ab-a323-fea36c2e2ad7.roa (raw, json) Hash identifier: x+l/Y3deDIyMIq6VOZQWQc/G+InJRHvS42+pFH/AQLk= Subject key identifier: F8:85:DF:D5:84:E9:CC:52:94:C5:89:AD:90:84:B2:66:6B:34:3B:E0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E12BBE5C84CA094921E080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/48b2ba29-f0af-38ab-a323-fea36c2e2ad7.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2b:be:5c:84:ca:09:49:21:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=df0ae960-1ad8-49e4-93a9-590b3e24dd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:79:d1:3f:b1:ed:d1:e2:ea:f2:bb:d5:2b:62: 7c:e0:9c:f9:b3:4e:39:4f:f0:62:17:cf:48:96:09: 7d:07:28:51:80:2e:5e:8a:54:8a:09:80:cf:54:c2: 07:5d:db:37:ba:66:f9:43:69:1b:2d:20:b4:e6:f3: 5b:4e:bd:3b:00:7c:54:56:27:94:ae:a1:05:53:ee: 98:c6:20:7d:bf:e1:50:82:4d:1a:d1:5c:5c:07:7a: 45:4e:5e:56:da:b7:90:d3:b2:6e:67:76:99:54:2b: 79:a7:3a:ef:ea:a0:bc:a7:49:59:6c:9b:93:0a:73: b5:ae:9a:a7:5c:28:c5:65:56:86:ac:51:68:dd:4c: dd:33:d7:93:cc:ea:8c:65:2f:73:1a:8e:45:c5:3a: 6d:ad:e4:bd:bc:8d:5e:bd:77:f1:38:74:f3:26:9f: 6a:40:fd:1b:a6:aa:6a:79:1f:bb:9a:79:02:af:61: 41:ae:66:9e:ff:3f:54:56:05:55:2c:be:b4:0d:b7: b2:56:45:60:e5:e8:a8:69:d1:d3:10:71:30:ad:d9: 45:53:f5:16:d0:63:23:fd:50:f8:e6:b4:95:8f:60: 1b:16:3b:d0:83:3f:52:73:50:4b:38:d1:8a:a8:ac: f2:76:27:73:b3:a4:32:ec:e5:ca:24:c2:0a:91:76: 55:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:85:DF:D5:84:E9:CC:52:94:C5:89:AD:90:84:B2:66:6B:34:3B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/48b2ba29-f0af-38ab-a323-fea36c2e2ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:70:e1:0b:8c:ae:e0:d7:2c:0f:98:0b:40:62:d5:16:09:2f: 92:13:7f:ac:8c:f7:64:f2:ed:33:9d:86:51:99:d8:2c:a0:84: 30:95:90:0a:0b:c6:57:4b:d6:25:7d:a4:52:65:2f:2e:6c:02: 5c:6c:a5:6e:7e:00:59:7a:13:a4:91:7d:aa:72:f5:62:79:30: e6:f4:b4:d9:08:20:f8:29:64:f0:b7:f1:36:c9:eb:f8:b3:ee: 42:fa:34:94:3e:98:f4:1d:ab:32:a9:58:f4:7f:9a:88:da:a6: be:ec:1a:3b:73:1b:0f:10:fe:af:ea:4b:fb:e6:8e:26:0b:fe: d7:21:1f:e8:85:2f:53:f3:2b:91:a0:bc:0d:09:5e:27:5c:b1: bd:85:50:50:80:3c:b1:44:b5:12:c3:8c:f4:aa:f6:44:8c:7a: fd:47:8c:8d:18:af:f6:44:67:71:54:7a:2b:e8:14:f9:d1:ff: 1c:d0:4f:d4:c3:6a:82:40:3c:35:b8:35:13:1a:7a:f5:d9:0c: d8:e0:29:6c:a4:f4:a1:0f:9f:25:b6:71:12:74:79:a8:d9:f8: 7b:2c:3e:b7:42:27:2c:50:6b:e3:96:43:70:7d:3d:7a:f5:af: 8b:f7:ce:b1:70:62:f7:fe:d5:a6:c1:08:ab:d2:b1:f3:4f:23: c0:9e:9a:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4Su+XITKCUkh4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGYwYWU5NjAtMWFkOC00OWU0LTkzYTktNTkwYjNlMjRkZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHnRP7Ht0eLq8rvVK2J84Jz5s045T/BiF89I lgl9ByhRgC5eilSKCYDPVMIHXds3umb5Q2kbLSC05vNbTr07AHxUVieUrqEFU+6Y xiB9v+FQgk0a0VxcB3pFTl5W2reQ07JuZ3aZVCt5pzrv6qC8p0lZbJuTCnO1rpqn XCjFZVaGrFFo3UzdM9eTzOqMZS9zGo5FxTptreS9vI1evXfxOHTzJp9qQP0bpqpq eR+7mnkCr2FBrmae/z9UVgVVLL60DbeyVkVg5eioadHTEHEwrdlFU/UW0GMj/VD4 5rSVj2AbFjvQgz9Sc1BLONGKqKzydidzs6Qy7OXKJMIKkXZVYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPiF39WE6cxSlMWJrZCEsmZrNDvgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDhiMmJhMjktZjBhZi0z OGFiLWEzMjMtZmVhMzZjMmUyYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpw4QuMruDXLA+YC0Bi1RYJL5ITf6yM92Ty7TOdhlGZ2CyghDCV kAoLxldL1iV9pFJlLy5sAlxspW5+AFl6E6SRfapy9WJ5MOb0tNkIIPgpZPC38TbJ 6/iz7kL6NJQ+mPQdqzKpWPR/mojapr7sGjtzGw8Q/q/qS/vmjiYL/tchH+iFL1Pz K5GgvA0JXidcsb2FUFCAPLFEtRLDjPSq9kSMev1HjI0Yr/ZEZ3FUeivoFPnR/xzQ T9TDaoJAPDW4NRMaevXZDNjgKWyk9KEPnyW2cRJ0eajZ+HssPrdCJyxQa+OWQ3B9 PXr1r4v3zrFwYvf+1abBCKvSsfNPI8Cemvw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:31 2026 by rpki-client