$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594f0a1f-6ac4-31d9-989c-c54332845ce7.roa File: 594f0a1f-6ac4-31d9-989c-c54332845ce7.roa (raw, json) Hash identifier: mYFCDitGeXi938f5BajCsewJC/wKLOIJpgpmFlg0plU= Subject key identifier: 6A:3C:95:F7:B7:0C:3A:84:AD:C6:95:EE:60:8A:6B:B4:B4:C8:09:BE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E1283C1E5E4EB4111A7F40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594f0a1f-6ac4-31d9-989c-c54332845ce7.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:28:3c:1e:5e:4e:b4:11:1a:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=894d2875-3bc3-42a6-ba36-7d1c4cf6feff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:f7:6f:81:4e:b5:cc:5d:21:38:f2:7d:b4: 6b:ac:87:40:8f:2f:51:c2:6f:c2:34:75:00:fb:45: 18:63:77:01:88:5c:c0:77:42:65:f2:91:02:7b:c0: 4c:00:b4:d8:77:88:0f:cb:fe:a3:09:f2:22:f1:8a: 5c:29:1c:4e:08:7e:77:c9:67:80:2c:0a:40:85:7c: aa:1e:2e:bb:1b:da:53:9d:8c:6d:76:01:5f:4e:76: e6:ab:e5:e4:56:48:53:0b:af:20:dd:c2:ad:5b:c5: d5:21:ab:a3:77:0e:47:f5:a3:43:cd:56:e0:9b:34: c2:3d:17:c0:08:ca:cc:7e:44:35:4b:74:54:19:ea: e8:3d:bf:fb:d8:25:79:5b:ef:93:3b:cc:77:9f:8b: ab:e1:bf:d6:0f:b4:2a:86:fa:e2:46:6d:ff:f6:be: d4:e6:69:d0:2e:38:3a:eb:9f:24:be:48:38:ae:b7: 15:64:bf:41:79:57:fd:94:fb:55:d3:bf:ef:e4:b7: 9c:ec:1b:b9:d9:6a:97:c3:f9:05:0b:ad:88:de:a9: 1f:72:0e:69:0e:8a:cc:4d:ae:22:b9:32:e9:3b:fd: 4f:4a:22:e3:cd:09:31:bf:79:fe:67:fe:e0:31:f6: 7a:eb:81:46:6f:1a:b2:47:79:0d:81:7b:4c:78:63: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3C:95:F7:B7:0C:3A:84:AD:C6:95:EE:60:8A:6B:B4:B4:C8:09:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594f0a1f-6ac4-31d9-989c-c54332845ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:49::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:be:8f:6a:48:51:6a:bb:dc:52:5a:44:c6:d7:66:b0:39:99: 7f:61:98:2d:99:c7:95:83:c2:ad:32:e8:48:e1:9c:3d:74:f9: e3:8c:73:17:73:d1:36:f7:24:b5:97:2a:8e:f5:67:43:5a:77: c5:c0:6c:5d:b3:9a:65:6a:31:a5:e4:2d:9f:39:e4:2b:8f:dc: 23:57:fc:1b:f2:91:b8:10:9e:71:3f:e6:a5:df:0a:12:47:d9: f5:f8:56:9d:c4:66:bd:f0:cd:64:7b:59:72:3b:88:5f:a3:9c: 15:13:77:aa:68:a5:1b:23:d5:18:98:34:f8:08:3a:2f:a7:81: f5:24:f2:53:77:18:c7:9a:f0:c6:5a:db:74:73:2d:4a:4b:27: 0b:bf:fb:37:0d:90:ac:f7:75:a4:a5:47:e2:3a:5c:50:9b:b4: 2e:2a:99:31:fa:f3:5d:49:c0:9b:32:83:63:db:d5:a7:dd:38: a2:8d:69:78:50:c7:e3:ac:3e:11:8a:b6:61:d0:ea:55:73:e9: a1:af:65:bd:67:7c:cd:8b:e1:42:2e:51:48:a3:8a:0a:7d:c4: 79:51:19:2d:58:e8:1f:f1:10:0e:36:15:f4:20:18:b1:a6:af: ad:a7:ab:44:9d:92:05:1a:6d:8f:04:51:33:3f:19:32:b5:a0: 6e:7e:98:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4Sg8Hl5OtBEaf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODk0ZDI4NzUtM2JjMy00MmE2LWJhMzYtN2QxYzRjZjZmZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9j3b4FOtcxdITjyfbRrrIdAjy9Rwm/CNHUA +0UYY3cBiFzAd0Jl8pECe8BMALTYd4gPy/6jCfIi8YpcKRxOCH53yWeALApAhXyq Hi67G9pTnYxtdgFfTnbmq+XkVkhTC68g3cKtW8XVIaujdw5H9aNDzVbgmzTCPRfA CMrMfkQ1S3RUGeroPb/72CV5W++TO8x3n4ur4b/WD7QqhvriRm3/9r7U5mnQLjg6 658kvkg4rrcVZL9BeVf9lPtV07/v5Lec7Bu52WqXw/kFC62I3qkfcg5pDorMTa4i uTLpO/1PSiLjzQkxv3n+Z/7gMfZ664FGbxqyR3kNgXtMeGN+QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGo8lfe3DDqErcaV7mCKa7S0yAm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTk0ZjBhMWYtNmFjNC0z MWQ5LTk4OWMtYzU0MzMyODQ1Y2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABC+j2pIUWq73FJaRMbXZrA5mX9hmC2Zx5WDwq0y6EjhnD10+eOM cxdz0Tb3JLWXKo71Z0Nad8XAbF2zmmVqMaXkLZ855CuP3CNX/BvykbgQnnE/5qXf ChJH2fX4Vp3EZr3wzWR7WXI7iF+jnBUTd6popRsj1RiYNPgIOi+ngfUk8lN3GMea 8MZa23RzLUpLJwu/+zcNkKz3daSlR+I6XFCbtC4qmTH6811JwJsyg2Pb1afdOKKN aXhQx+OsPhGKtmHQ6lVz6aGvZb1nfM2L4UIuUUijigp9xHlRGS1Y6B/xEA42FfQg GLGmr62nq0SdkgUabY8EUTM/GTK1oG5+mKQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:51 2026 by rpki-client