$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa File: 5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa (raw, json) Hash identifier: 7ExGqER6haXMrb10XOkVsmcz3wSJh6G2y0OUb7K6iAs= Subject key identifier: 15:E2:3F:CC:02:B0:03:80:6E:3A:69:2B:2D:69:B3:D1:66:F3:0D:08 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF92D9EA2ACDF68D26C2C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:92:d9:ea:2a:cd:f6:8d:26:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b5587d38-2960-499c-918f-37d1e2c85f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:75:ba:b4:51:41:e5:4c:4d:c7:d4:44:c2: 2e:12:1c:64:c9:2d:19:27:0c:db:d5:3e:e8:09:c6: a9:41:14:4d:84:b5:48:d0:76:fb:04:20:51:d2:f3: 0b:4b:90:12:80:69:f0:c2:e6:a0:cc:7d:83:01:00: d1:24:97:60:30:db:7f:fe:ed:b8:79:c3:92:f2:4e: 9e:55:f6:cd:9a:8f:ed:a9:75:f6:38:db:a0:96:cc: 75:a9:98:1a:a8:4a:08:52:93:21:84:a0:ae:be:8c: 5f:a6:fa:0c:01:fe:e8:2e:80:9d:ed:99:c8:1b:86: 1b:64:66:62:91:33:5f:23:40:19:77:32:21:3a:d4: 87:f7:51:d8:f8:cd:d3:6d:28:f1:23:78:10:03:57: bf:b6:5e:6b:1f:be:74:33:a4:34:0b:cf:0b:6f:ac: 02:1c:6c:66:8d:95:82:a8:45:a2:6f:0c:4a:d7:51: c2:69:b2:11:dc:fc:bc:0a:93:7b:9a:59:9e:04:17: 58:b8:92:5c:f0:9c:62:8f:14:11:af:10:28:af:c0: e3:af:32:b0:f7:d4:5b:89:f3:72:c9:d3:a9:c9:ab: 2f:dc:c9:4c:92:80:23:7e:ba:9d:c7:f1:58:ff:e4: 28:6f:06:5b:71:7c:ec:72:d9:65:af:ce:d2:48:13: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E2:3F:CC:02:B0:03:80:6E:3A:69:2B:2D:69:B3:D1:66:F3:0D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:e6:74:42:5e:5a:48:c0:23:c2:ac:70:9f:83:f3:a8:2c:5a: 5e:9b:8e:53:8f:06:da:60:ad:ea:eb:69:ca:7b:2d:5d:11:7b: 45:6c:12:d6:ce:28:de:6b:f1:4c:20:94:f8:60:15:cd:ff:c0: ee:f1:c0:74:4d:fe:7d:15:00:61:42:ae:42:b5:57:37:ce:ff: 84:10:e4:8f:54:e8:1e:c4:f0:f5:8a:ed:9e:49:09:70:f0:f8: 84:49:1a:3e:8c:c6:b5:f5:bc:0a:de:c4:70:03:ad:6b:55:6b: 86:3b:bf:4e:80:11:ef:57:58:c4:46:8c:47:23:89:f6:ef:48: 81:3b:e7:0b:01:8b:90:96:cd:89:0b:f0:c2:10:5e:5f:54:b1: d1:a7:10:9d:a9:0c:97:5b:d8:0d:d4:00:a8:b9:b6:9c:38:58: 9c:85:2e:91:79:6d:23:b3:3d:ac:de:7c:00:6a:c2:97:36:d8: d8:1e:3d:42:2c:6a:97:fc:d6:e1:c4:81:67:16:83:9a:c4:0c: 3c:3a:d4:dd:fe:e0:29:6e:85:f3:67:a8:6b:f7:8c:b9:58:e5: df:7b:c9:63:a4:e3:e2:dc:5e:02:44:0c:55:ae:50:80:8f:98: 50:bd:8e:cc:51:2c:95:0c:87:9b:8c:3c:aa:4d:60:1a:ac:42: ba:30:44:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k35LZ6irN9o0mwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjU1ODdkMzgtMjk2MC00OTljLTkxOGYtMzdkMWUyYzg1ZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWt1urRRQeVMTcfURMIuEhxkyS0ZJwzb1T7o CcapQRRNhLVI0Hb7BCBR0vMLS5ASgGnwwuagzH2DAQDRJJdgMNt//u24ecOS8k6e VfbNmo/tqXX2ONuglsx1qZgaqEoIUpMhhKCuvoxfpvoMAf7oLoCd7ZnIG4YbZGZi kTNfI0AZdzIhOtSH91HY+M3TbSjxI3gQA1e/tl5rH750M6Q0C88Lb6wCHGxmjZWC qEWibwxK11HCabIR3Py8CpN7mlmeBBdYuJJc8JxijxQRrxAor8DjrzKw99RbifNy ydOpyasv3MlMkoAjfrqdx/FY/+QobwZbcXzsctllr87SSBOMqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBXiP8wCsAOAbjppKy1ps9Fm8w0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWJmZmFlNWYtNWNmNi0z YWQ5LThkMDQtNjdiZWY4MTNkMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMDmdEJeWkjAI8KscJ+D86gsWl6bjlOPBtpgrerracp7LV0Re0Vs EtbOKN5r8UwglPhgFc3/wO7xwHRN/n0VAGFCrkK1VzfO/4QQ5I9U6B7E8PWK7Z5J CXDw+IRJGj6MxrX1vArexHADrWtVa4Y7v06AEe9XWMRGjEcjifbvSIE75wsBi5CW zYkL8MIQXl9UsdGnEJ2pDJdb2A3UAKi5tpw4WJyFLpF5bSOzPazefABqwpc22Nge PUIsapf81uHEgWcWg5rEDDw61N3+4CluhfNnqGv3jLlY5d97yWOk4+LcXgJEDFWu UICPmFC9jsxRLJUMh5uMPKpNYBqsQrowRDs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:38 2026 by rpki-client