$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa File: 4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa (raw, json) Hash identifier: n1P95BtEQ6TEpKsSbHGgCEq3jJ2JhwyUL5byJpFtUXg= Subject key identifier: 49:B1:01:58:1D:75:9D:E2:D9:AE:56:1F:13:46:6E:D5:3A:27:A8:C2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E13173E816916032EFE200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:31:73:e8:16:91:60:32:ef:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=53da7977-9117-4bd8-b6ef-981354ab5127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:99:c5:e6:a3:78:cf:f7:42:d3:67:a0:69: 34:b3:6f:86:12:1d:dd:b2:db:4c:91:03:24:d9:f7: 46:c5:ae:ec:9a:2e:65:ef:b8:c7:40:72:78:49:4e: 5a:4d:d9:54:82:34:b2:81:1f:4f:a5:18:37:d7:38: 59:ed:6a:1c:19:f1:b4:54:1d:71:2d:20:11:e2:51: 89:5c:07:18:00:07:13:86:5e:4b:4e:b0:97:f4:a1: a4:f0:95:e2:ff:99:89:c9:0e:76:0e:6b:82:0c:06: 29:1d:00:8d:a9:72:20:ef:46:29:c9:05:e9:a9:f0: 27:8f:48:73:8d:9e:21:7e:89:db:aa:cb:0c:67:65: 33:96:b0:9c:7f:71:9e:83:11:ae:3c:0a:97:cd:dd: b3:ef:ff:3d:7a:96:64:83:f0:8d:3e:69:d1:e4:9a: 1d:1c:88:8a:0c:ff:7d:c0:3b:88:f3:a3:b7:03:e3: 0f:39:92:e2:e3:46:5a:9b:c7:44:fa:0b:70:a7:45: 10:63:22:01:cf:8d:d9:86:a0:46:d1:e7:2a:16:49: 9c:df:81:7c:63:0c:23:91:5c:c9:7d:11:aa:5b:ec: f4:62:ee:78:33:24:62:37:f8:89:1b:40:9f:5e:ef: ab:91:6f:fd:2b:77:04:7f:23:7c:e7:6c:93:3b:39: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B1:01:58:1D:75:9D:E2:D9:AE:56:1F:13:46:6E:D5:3A:27:A8:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5d:6b:8c:f2:f8:c7:6e:23:67:3f:e9:b4:fc:ae:5f:2e:d3: d5:78:c1:f5:9c:6e:8c:4a:d3:45:c0:ca:ee:79:9d:f3:96:2e: c6:a3:96:34:c9:34:71:57:00:0e:04:10:ae:44:e1:7d:9f:d0: a4:67:59:77:d5:39:80:f8:d2:22:d9:87:b0:6d:48:5c:fa:a7: 1d:ea:87:77:f7:22:78:03:76:c2:51:46:e6:ee:42:7c:64:8c: f7:c1:c6:8d:0a:05:b3:ab:2d:f5:62:db:de:84:87:ff:d0:84: 0c:35:0f:50:7f:1c:cc:4f:9c:5b:f0:b3:93:eb:b9:fa:d0:c4: 43:be:7a:11:47:b3:8a:ec:72:d6:73:e2:f3:55:4f:d8:5f:88: 17:f9:22:0f:2a:82:b1:4b:34:30:f1:8f:5e:a5:0e:2a:ea:03: 4d:da:26:f2:63:1c:90:b6:1c:41:c7:34:89:a2:b4:ea:d6:4c: 74:e3:34:b7:a3:c4:03:00:cc:ca:f5:30:0f:b9:1a:91:ec:ec: b1:d2:36:b2:fc:34:93:13:20:c2:30:69:68:86:98:e1:fd:b8: 73:ef:0a:08:b9:67:73:5d:a2:b2:9c:70:90:f0:1c:7d:70:98: e3:bb:74:7b:14:94:d2:5c:ca:ee:11:7c:23:94:63:a9:b9:d5: 05:3a:16:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4TFz6BaRYDLv4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTNkYTc5NzctOTExNy00YmQ4LWI2ZWYtOTgxMzU0YWI1MTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs6ZxeajeM/3QtNnoGk0s2+GEh3dsttMkQMk 2fdGxa7smi5l77jHQHJ4SU5aTdlUgjSygR9PpRg31zhZ7WocGfG0VB1xLSAR4lGJ XAcYAAcThl5LTrCX9KGk8JXi/5mJyQ52DmuCDAYpHQCNqXIg70YpyQXpqfAnj0hz jZ4hfonbqssMZ2UzlrCcf3GegxGuPAqXzd2z7/89epZkg/CNPmnR5JodHIiKDP99 wDuI86O3A+MPOZLi40Zam8dE+gtwp0UQYyIBz43ZhqBG0ecqFkmc34F8YwwjkVzJ fRGqW+z0Yu54MyRiN/iJG0CfXu+rkW/9K3cEfyN852yTOzkXSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEmxAVgddZ3i2a5WHxNGbtU6J6jCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGIxZmZlNWYtNGY2OS0z OTJmLWExYzgtZDk3ZGRhNDY3MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABdda4zy+MduI2c/6bT8rl8u09V4wfWcboxK00XAyu55nfOWLsaj ljTJNHFXAA4EEK5E4X2f0KRnWXfVOYD40iLZh7BtSFz6px3qh3f3IngDdsJRRubu QnxkjPfBxo0KBbOrLfVi296Eh//QhAw1D1B/HMxPnFvws5PrufrQxEO+ehFHs4rs ctZz4vNVT9hfiBf5Ig8qgrFLNDDxj16lDirqA03aJvJjHJC2HEHHNImitOrWTHTj NLejxAMAzMr1MA+5GpHs7LHSNrL8NJMTIMIwaWiGmOH9uHPvCgi5Z3NdorKccJDw HH1wmOO7dHsUlNJcyu4RfCOUY6m51QU6FjM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:11 2026 by rpki-client