$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6ca50736-89a5-3ddc-b4e2-b063f093db8d.roa File: 6ca50736-89a5-3ddc-b4e2-b063f093db8d.roa (raw, json) Hash identifier: IhBZReCsAqkFrKcx7IcbBD/9UWRtRfGo/RGT7g95S2g= Subject key identifier: 81:2B:D2:16:13:02:9C:1C:B7:8C:AB:26:03:85:DB:1B:72:EA:DF:8C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A723A33A93F4BEB48BD80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6ca50736-89a5-3ddc-b4e2-b063f093db8d.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 2001:500:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:72:3a:33:a9:3f:4b:eb:48:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=a244d320-59e8-41b5-bc2b-29cf67bb2a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:f6:77:be:31:65:9c:48:06:ee:0a:20:76: c4:de:bd:9f:16:9b:53:a3:c1:8d:27:8c:45:2f:c8: c2:1e:8d:15:51:a7:a9:6b:01:5c:3a:a1:db:e9:b0: e1:f0:61:d3:2d:fd:5b:af:a1:8f:28:74:d5:67:27: 1a:3c:84:3f:82:56:f6:5f:b9:c6:56:35:64:aa:a5: 7a:49:bb:42:fa:4b:2d:e4:9f:a3:1f:a0:58:80:65: 7e:91:8b:9d:7d:94:11:94:84:97:01:aa:bd:d8:57: 4c:56:27:48:9d:56:f8:70:79:ea:af:c0:a9:c7:5e: d2:2d:ce:11:3c:02:80:ab:93:b1:6d:8f:d1:94:97: 6d:21:ad:da:56:d4:cb:db:b9:31:34:73:c2:c2:87: 46:f9:26:fe:f0:9b:27:a3:83:56:83:aa:5a:75:94: 77:8a:8e:de:43:eb:95:ab:c7:bb:44:13:cd:a0:c6: 8c:57:ac:74:f2:ab:ef:06:42:d6:69:ca:5e:60:26: 3a:ca:20:05:0b:dd:a1:85:47:f2:cd:09:8b:d1:38: 8a:75:c3:76:95:17:a1:62:97:8c:c0:73:41:7d:18: 9b:af:8b:87:73:e9:2a:ef:b3:d4:a9:1a:20:20:5b: d8:d0:91:c7:7f:0b:02:4a:2f:e8:5d:de:40:d7:42: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2B:D2:16:13:02:9C:1C:B7:8C:AB:26:03:85:DB:1B:72:EA:DF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6ca50736-89a5-3ddc-b4e2-b063f093db8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:80:39:49:96:84:29:4f:0e:5d:3f:59:d2:1b:d1:84:3e:6f: 37:d7:c8:2c:3b:7c:ed:06:07:71:5d:07:25:43:0d:23:31:bc: cf:cb:a5:18:d4:ff:50:a2:7a:40:8f:9e:57:bd:fb:26:3c:c9: ae:79:ac:2d:a0:07:28:70:94:e1:02:5f:f0:79:1c:c6:32:21: 1f:d1:60:26:e5:d0:aa:68:b7:13:42:c7:b2:4c:57:2a:7c:5a: e0:bb:5d:1a:46:0b:8a:6e:22:05:2e:79:33:7c:ac:92:f4:f1: 1c:49:72:84:be:88:c8:de:a0:f6:a4:5c:ec:83:3e:db:c4:ef: 02:4d:74:aa:c9:3a:c4:22:77:00:49:69:29:fe:f4:73:3c:4e: 2e:05:85:79:8f:9f:9b:77:82:49:86:bd:78:b3:9b:66:f4:6d: c5:e2:1f:bc:aa:37:4d:d6:77:6e:c7:46:06:b7:16:60:70:59: 4b:37:a1:da:36:c1:9c:6f:81:3b:27:0d:de:6e:f5:9c:21:5c: bc:a3:f0:44:4d:e9:11:e5:23:29:da:17:cc:7c:85:94:b1:db: 6d:71:0b:db:17:c7:ef:8e:cc:76:39:e0:c8:bf:45:0a:6b:4e: f8:64:76:0e:ca:34:c1:2b:6a:c9:b7:90:8b:73:9d:28:63:a5: 8f:53:6d:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jenI6M6k/S+tIvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YTI0NGQzMjAtNTllOC00MWI1LWJjMmItMjljZjY3YmIyYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaj2d74xZZxIBu4KIHbE3r2fFptTo8GNJ4xF L8jCHo0VUaepawFcOqHb6bDh8GHTLf1br6GPKHTVZycaPIQ/glb2X7nGVjVkqqV6 SbtC+kst5J+jH6BYgGV+kYudfZQRlISXAaq92FdMVidInVb4cHnqr8Cpx17SLc4R PAKAq5OxbY/RlJdtIa3aVtTL27kxNHPCwodG+Sb+8Jsno4NWg6padZR3io7eQ+uV q8e7RBPNoMaMV6x08qvvBkLWacpeYCY6yiAFC92hhUfyzQmL0TiKdcN2lRehYpeM wHNBfRibr4uHc+kq77PUqRogIFvY0JHHfwsCSi/oXd5A10L2swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIEr0hYTApwct4yrJgOF2xty6t+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmNhNTA3MzYtODlhNS0z ZGRjLWI0ZTItYjA2M2YwOTNkYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJWAOUmWhClPDl0/WdIb0YQ+bzfXyCw7fO0GB3FdByVDDSMxvM/L pRjU/1CiekCPnle9+yY8ya55rC2gByhwlOECX/B5HMYyIR/RYCbl0KpotxNCx7JM Vyp8WuC7XRpGC4puIgUueTN8rJL08RxJcoS+iMjeoPakXOyDPtvE7wJNdKrJOsQi dwBJaSn+9HM8Ti4FhXmPn5t3gkmGvXizm2b0bcXiH7yqN03Wd27HRga3FmBwWUs3 odo2wZxvgTsnDd5u9ZwhXLyj8ERN6RHlIynaF8x8hZSx221xC9sXx++OzHY54Mi/ RQprTvhkdg7KNMErasm3kItznShjpY9TbVA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:08 2026 by rpki-client