$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa File: 69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa (raw, json) Hash identifier: yghxBuAi/t6dxH6RW8XgpWVsQHn9ixgBtI8r5ROFk0o= Subject key identifier: 57:1B:F1:79:D9:79:97:1A:39:A2:9B:C3:82:95:F7:52:54:ED:61:36 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF81DB95ADCDD024EB8900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:81:db:95:ad:cd:d0:24:eb:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7d914248-ce2f-4b7c-9ef8-a8fb441f0839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:33:cb:65:12:1f:9f:bf:7f:f2:5c:7e:68: be:e9:c1:b9:36:bc:29:32:10:bc:2d:8f:1e:9c:be: 21:7c:f6:c9:ab:03:f5:92:a2:6a:51:96:7b:6a:ce: 28:85:90:e7:ee:f3:55:c0:19:89:9a:c6:5e:a6:34: e8:78:05:b9:2c:83:74:1e:fb:c8:9f:9d:d7:97:2a: 7e:03:d7:fd:64:3c:e4:19:57:f6:29:e8:98:45:58: 4e:16:a8:00:ad:46:92:ba:88:69:77:07:1f:4a:14: 96:88:2f:22:6d:82:20:1f:16:79:0b:d0:b5:aa:d5: 8d:7b:ab:b0:81:e2:1b:37:10:31:20:bf:7d:46:bf: bf:5d:6b:58:80:f0:62:9b:86:ab:bc:aa:98:a2:08: 79:46:ea:80:d8:8f:59:a8:75:ae:22:fc:0e:b6:b1: 1c:c5:67:ba:8a:77:ec:fd:d7:d8:cb:39:62:13:8e: 45:dc:2b:73:7c:47:8a:ce:c9:cd:e3:a2:79:15:01: 7c:0d:fa:71:6e:43:c6:d2:15:36:44:c4:ad:2d:30: 21:e4:ef:15:d8:f1:be:70:95:7c:1f:bc:94:48:9e: 28:74:fc:ee:f9:8e:e3:17:eb:2c:b4:bc:bd:4c:53: 2f:5a:14:10:a1:87:1b:51:13:0d:b9:a9:33:b8:5b: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1B:F1:79:D9:79:97:1A:39:A2:9B:C3:82:95:F7:52:54:ED:61:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:07:bb:5f:bc:0c:72:ec:a3:4c:af:72:35:16:f6:2f:94:62: fe:2c:d2:6a:0c:38:a9:93:38:b4:2a:41:60:be:5e:13:c5:ea: 11:f0:b9:7d:37:da:15:2d:bb:60:2d:6e:86:91:14:33:49:15: 44:8f:16:d1:76:b3:65:d2:69:ec:19:2e:89:d0:72:9e:9a:b2: 9b:a4:50:3a:66:41:dd:e4:6a:45:0c:d1:b8:5e:4f:a4:06:ae: 0b:28:b2:74:b2:f6:27:90:91:01:1e:93:88:34:0b:e6:5d:fb: e7:2d:2d:d0:8f:65:17:e9:42:16:10:5f:d0:7c:ea:1b:f4:ff: ad:ce:c2:4f:ca:1e:8d:2d:1e:8b:85:ea:53:05:97:ef:b1:ac: 59:47:0e:b4:81:26:40:e4:78:a0:d9:17:79:83:eb:ae:63:d3: c7:53:75:24:81:05:ab:c7:83:ce:69:03:a2:02:97:10:ba:03: cc:22:27:19:5e:6d:3e:d8:67:24:2d:fc:5b:90:ca:73:39:ec: 7a:52:45:c9:56:91:ee:2e:8e:d4:81:41:92:b8:8b:3d:da:44: ad:cb:52:b1:b9:b8:67:54:a1:b0:02:98:b2:bf:1b:19:2f:cc: d0:17:35:88:f8:71:d8:2d:fb:72:6b:1a:3f:37:ce:5e:52:4f: ae:08:39:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k34Hbla3N0CTriQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2Q5MTQyNDgtY2UyZi00YjdjLTllZjgtYThmYjQ0MWYwODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gczy2USH5+/f/Jcfmi+6cG5NrwpMhC8LY8e nL4hfPbJqwP1kqJqUZZ7as4ohZDn7vNVwBmJmsZepjToeAW5LIN0HvvIn53Xlyp+ A9f9ZDzkGVf2KeiYRVhOFqgArUaSuohpdwcfShSWiC8ibYIgHxZ5C9C1qtWNe6uw geIbNxAxIL99Rr+/XWtYgPBim4arvKqYogh5RuqA2I9ZqHWuIvwOtrEcxWe6infs /dfYyzliE45F3CtzfEeKzsnN46J5FQF8DfpxbkPG0hU2RMStLTAh5O8V2PG+cJV8 H7yUSJ4odPzu+Y7jF+sstLy9TFMvWhQQoYcbURMNuakzuFsjkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFcb8XnZeZcaOaKbw4KV91JU7WE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjlmOTZjOGMtYTI3YS0z NzE2LWE0YzMtZGZjOGQ4YTJhZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIEHu1+8DHLso0yvcjUW9i+UYv4s0moMOKmTOLQqQWC+XhPF6hHw uX032hUtu2AtboaRFDNJFUSPFtF2s2XSaewZLonQcp6aspukUDpmQd3kakUM0bhe T6QGrgsosnSy9ieQkQEek4g0C+Zd++ctLdCPZRfpQhYQX9B86hv0/63Owk/KHo0t HouF6lMFl++xrFlHDrSBJkDkeKDZF3mD665j08dTdSSBBavHg85pA6IClxC6A8wi JxlebT7YZyQt/FuQynM57HpSRclWke4ujtSBQZK4iz3aRK3LUrG5uGdUobACmLK/ GxkvzNAXNYj4cdgt+3JrGj83zl5ST64IObo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:51:56 2026 by rpki-client