$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa File: 6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa (raw, json) Hash identifier: 96lmbeHvWICsrEiN4s6B9bVm9cUdfA1G7dPmBK/nbHQ= Subject key identifier: A7:DF:DA:5F:3B:57:A6:76:32:99:D2:2B:9C:ED:9A:CD:C9:B8:15:F6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF6166C2F19015EC1A2AE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:61:66:c2:f1:90:15:ec:1a:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ff302e0c-f513-4fe3-9496-5c0ff144ca81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:85:4b:f8:6d:c7:41:34:c6:20:33:31:0f:09: 25:28:14:44:f9:80:5f:7d:71:9e:b1:f1:d0:d0:c6: f8:bf:d5:34:04:67:c7:df:b0:57:ae:00:3e:c5:ae: 73:d1:7a:4c:01:b0:a2:1e:7a:48:91:73:70:db:c8: 5d:97:dc:ee:68:e9:11:2d:b1:a6:66:59:75:19:4e: 9b:40:1d:d0:61:cf:25:82:09:8c:90:3c:d3:1c:13: 37:05:ce:24:48:6c:e0:0f:78:79:da:25:6f:ab:a3: c3:60:39:70:b3:d2:b8:b7:1d:2d:fc:f6:9c:20:72: 0f:4f:2f:1a:84:bf:95:11:2d:8a:7a:dc:98:cc:c4: aa:a5:e0:03:2e:5d:dd:72:24:66:c5:b0:c7:db:c1: 20:b7:bd:e7:a8:97:b1:f9:23:e5:94:bd:6e:61:0a: c9:a1:95:ac:c4:42:e4:b7:97:0e:ac:62:e9:a1:77: f0:c0:7f:35:66:e4:8f:ec:ef:76:05:b1:8b:8c:66: 38:f8:b7:ed:f1:2f:dd:7c:2e:a5:62:72:c1:ba:9e: 02:62:7f:c4:6c:8b:15:7d:a5:b5:74:3a:1b:76:7f: 08:df:54:65:ba:bd:92:18:fd:27:e1:74:99:06:be: 6c:4b:5d:b9:78:3f:6a:bf:62:41:a0:cf:85:57:56: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DF:DA:5F:3B:57:A6:76:32:99:D2:2B:9C:ED:9A:CD:C9:B8:15:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:cc:31:45:9d:d9:6d:c2:55:fe:4e:76:c3:f3:11:c4:bd:3a: e1:a0:48:87:cd:51:79:66:1d:b7:e0:27:e8:0d:80:ea:61:c5: 32:20:95:7e:37:36:5f:99:02:7c:e2:17:af:61:dc:96:cf:48: d5:bf:66:14:51:f8:53:23:15:de:28:f9:df:50:ff:6e:77:4e: 1a:a7:55:9a:21:66:e7:a4:93:32:de:75:91:f2:ec:9b:19:32: 7a:97:46:64:bf:50:06:54:16:c1:51:5e:ca:af:9e:e9:21:90: 0b:42:1d:e8:0b:31:ba:4b:4b:6c:9c:24:ad:c7:33:87:1b:7c: 83:19:ee:27:7d:2a:d5:bd:7c:99:e2:a4:09:40:9d:f1:09:f3: 30:3a:87:d5:d7:c6:ca:cb:ec:a9:d4:85:29:1a:df:b2:18:2f: 26:a4:90:43:15:ec:ed:35:65:cd:4a:30:24:16:67:81:4b:46: 0f:04:85:4a:14:81:86:ba:4a:53:cb:89:fe:8d:74:7e:8a:d7: b5:db:4c:c9:65:91:a1:6d:10:27:79:c4:89:4c:7c:e9:26:0e: 3d:a6:c7:e7:42:ee:b7:61:4d:84:c4:8f:02:ad:e2:be:ce:69: 6f:ac:95:6b:ba:15:96:ce:9f:11:55:9c:10:32:e3:37:d0:eb: c2:ca:fb:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k32FmwvGQFewaKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmYzMDJlMGMtZjUxMy00ZmUzLTk0OTYtNWMwZmYxNDRjYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4VL+G3HQTTGIDMxDwklKBRE+YBffXGesfHQ 0Mb4v9U0BGfH37BXrgA+xa5z0XpMAbCiHnpIkXNw28hdl9zuaOkRLbGmZll1GU6b QB3QYc8lggmMkDzTHBM3Bc4kSGzgD3h52iVvq6PDYDlws9K4tx0t/PacIHIPTy8a hL+VES2KetyYzMSqpeADLl3dciRmxbDH28Egt73nqJex+SPllL1uYQrJoZWsxELk t5cOrGLpoXfwwH81ZuSP7O92BbGLjGY4+Lft8S/dfC6lYnLBup4CYn/EbIsVfaW1 dDobdn8I31Rlur2SGP0n4XSZBr5sS125eD9qv2JBoM+FV1at8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKff2l87V6Z2MpnSK5ztms3JuBX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmU1ZTVmZjgtN2IxZi0z ZjA1LTg2MGEtZWUwM2U0MmMzYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIbMMUWd2W3CVf5OdsPzEcS9OuGgSIfNUXlmHbfgJ+gNgOphxTIg lX43Nl+ZAnziF69h3JbPSNW/ZhRR+FMjFd4o+d9Q/253ThqnVZohZuekkzLedZHy 7JsZMnqXRmS/UAZUFsFRXsqvnukhkAtCHegLMbpLS2ycJK3HM4cbfIMZ7id9KtW9 fJnipAlAnfEJ8zA6h9XXxsrL7KnUhSka37IYLyakkEMV7O01Zc1KMCQWZ4FLRg8E hUoUgYa6SlPLif6NdH6K17XbTMllkaFtECd5xIlMfOkmDj2mx+dC7rdhTYTEjwKt 4r7OaW+slWu6FZbOnxFVnBAy4zfQ68LK+8Y= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:47 2026 by rpki-client