$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6727b461-7666-36ca-ac4c-880d3828fd1c.roa File: 6727b461-7666-36ca-ac4c-880d3828fd1c.roa (raw, json) Hash identifier: H9d3YdEMrlsFavWeJDRLSnBPIgjzwbxIqQX+alEsNw4= Subject key identifier: 16:70:29:F1:DD:9A:52:10:B9:5D:C8:7E:8C:8D:DC:75:64:9C:7C:DD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E121BFAB825CB8556E16C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6727b461-7666-36ca-ac4c-880d3828fd1c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:21:bf:ab:82:5c:b8:55:6e:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c27b34e4-2846-4764-b4d5-30170718f3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:8c:54:93:76:6d:24:c1:80:13:02:b4:bf: ee:98:f5:4e:92:cb:eb:d8:3e:89:ff:13:e2:72:2a: 29:52:42:7e:7e:27:e7:85:76:59:a5:1d:71:7f:cc: 61:37:1e:63:24:05:77:ee:af:16:b5:38:70:f1:75: b1:22:b6:e6:d1:76:bf:ed:7e:79:d9:c8:fd:67:e0: 38:df:d4:7f:4c:97:4a:4a:db:cf:2a:b7:5f:df:0a: 86:e0:56:12:4d:b4:0d:ec:48:d3:82:a5:86:f5:5d: d2:10:af:43:e2:c6:33:5c:ec:fa:d9:a5:fd:7a:ef: 95:30:2f:c8:8e:5d:e1:2d:7e:6b:40:46:83:5e:69: a4:04:2b:63:af:e8:d4:87:b5:af:c6:64:5e:54:93: 61:a3:41:62:70:66:d4:68:c3:b5:cf:75:51:4e:b5: ba:79:b1:a4:35:a9:bb:39:8b:ed:4c:1a:f4:97:9d: 0b:30:97:12:48:d7:c0:8d:42:24:38:85:6e:6a:58: 78:08:2b:a6:7c:04:1a:7a:fd:0e:14:fe:9a:82:ee: 8d:38:fc:ac:18:af:a0:71:f0:09:45:12:bb:cf:da: 74:99:df:26:9d:ab:ac:4e:7c:18:69:5c:7c:aa:f4: c4:31:a3:fe:7e:a8:e8:d0:09:69:d9:35:bf:61:7d: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:70:29:F1:DD:9A:52:10:B9:5D:C8:7E:8C:8D:DC:75:64:9C:7C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6727b461-7666-36ca-ac4c-880d3828fd1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ea::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:34:33:1f:d0:26:53:9f:2d:b8:3b:59:88:dd:8b:9c:89:4e: fd:5c:79:e7:9d:06:6d:6f:b8:56:c5:fb:9b:14:52:eb:6a:a7: 94:c0:84:0e:fc:77:48:83:5e:bf:69:4b:64:a9:0b:cb:b6:02: ac:8f:db:f7:73:2a:a1:ef:f2:e6:1a:17:ef:40:d1:24:4d:58: 7d:3e:64:34:10:7a:f3:3e:36:f6:1f:7b:1d:b2:69:68:8a:4b: 93:e3:03:ab:b1:23:b0:6c:92:96:51:d9:3a:b7:c5:5e:de:1e: 9d:1c:5e:29:15:54:dd:7f:d7:c7:69:87:eb:e7:3a:c3:7f:80: 04:8e:64:99:e3:a4:64:3d:00:77:cc:6c:74:9a:c8:d6:6b:d6: f8:8f:c1:05:f4:9f:d3:03:61:ab:64:b5:e9:bb:68:e9:9c:9e: 77:5c:bc:28:3f:83:b4:ad:ce:45:5a:1c:63:fc:e8:2c:65:9e: 22:c9:ef:0b:83:7a:b4:f1:72:d9:7b:68:e0:29:dd:45:31:2e: 9b:04:e0:09:31:57:a9:7d:ee:03:9b:c1:34:0e:ba:02:15:53: 89:b1:25:d4:7b:79:7e:f4:e4:0f:88:bb:db:1f:9d:4a:78:4f: 63:40:ce:85:14:ca:2f:6a:ca:3c:9f:73:da:74:31:91:f5:90: f4:7f:db:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4SG/q4JcuFVuFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzI3YjM0ZTQtMjg0Ni00NzY0LWI0ZDUtMzAxNzA3MThmM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPqMVJN2bSTBgBMCtL/umPVOksvr2D6J/xPi ciopUkJ+fifnhXZZpR1xf8xhNx5jJAV37q8WtThw8XWxIrbm0Xa/7X552cj9Z+A4 39R/TJdKStvPKrdf3wqG4FYSTbQN7EjTgqWG9V3SEK9D4sYzXOz62aX9eu+VMC/I jl3hLX5rQEaDXmmkBCtjr+jUh7WvxmReVJNho0FicGbUaMO1z3VRTrW6ebGkNam7 OYvtTBr0l50LMJcSSNfAjUIkOIVualh4CCumfAQaev0OFP6agu6NOPysGK+gcfAJ RRK7z9p0md8mnausTnwYaVx8qvTEMaP+fqjo0Alp2TW/YX11fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBZwKfHdmlIQuV3IfoyN3HVknHzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjcyN2I0NjEtNzY2Ni0z NmNhLWFjNGMtODgwZDM4MjhmZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABM0Mx/QJlOfLbg7WYjdi5yJTv1ceeedBm1vuFbF+5sUUutqp5TA hA78d0iDXr9pS2SpC8u2AqyP2/dzKqHv8uYaF+9A0SRNWH0+ZDQQevM+NvYfex2y aWiKS5PjA6uxI7BskpZR2Tq3xV7eHp0cXikVVN1/18dph+vnOsN/gASOZJnjpGQ9 AHfMbHSayNZr1viPwQX0n9MDYatktem7aOmcnndcvCg/g7StzkVaHGP86CxlniLJ 7wuDerTxctl7aOAp3UUxLpsE4AkxV6l97gObwTQOugIVU4mxJdR7eX705A+Iu9sf nUp4T2NAzoUUyi9qyjyfc9p0MZH1kPR/2+s= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:31 2026 by rpki-client