$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/70324e2c-97e2-38b4-8a29-b74a347765c6.roa File: 70324e2c-97e2-38b4-8a29-b74a347765c6.roa (raw, json) Hash identifier: Mom2xPS9RBv75r1R0J1lRo02/6JjijPiOmsKw4k/Yuw= Subject key identifier: 41:BB:4C:E1:A6:E0:A4:C3:28:31:7A:2B:87:C1:73:6D:0F:F7:2A:07 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF6B13A1F159A01CE79500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/70324e2c-97e2-38b4-8a29-b74a347765c6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:6b:13:a1:f1:59:a0:1c:e7:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4eaecf11-7c95-42b0-bb3a-35db3cfba823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:80:1f:c4:9f:11:25:b3:06:87:c5:f5:96:55: b3:be:c1:d7:88:97:3a:dc:18:ff:12:17:df:b6:e2: 50:7e:74:14:34:6a:75:54:c2:8b:64:6c:21:0c:fc: f8:80:16:5e:2d:ac:b2:b1:76:a6:2d:9b:15:98:f3: 9b:0b:de:6a:88:cd:e2:6a:f8:22:3e:d5:5b:ea:d0: 24:98:2d:4a:6c:74:d5:fd:aa:18:6b:d9:29:98:0c: 45:0b:b4:7f:4a:65:52:75:65:fc:a3:19:1e:c2:67: 0c:73:80:99:1a:61:cd:40:51:de:f4:49:55:ef:f8: ff:3e:39:e1:94:4c:1a:0a:51:ea:99:a0:17:3d:0c: 6e:10:2c:dc:5d:0f:d6:8d:72:cc:d7:96:10:85:49: 94:30:bf:84:a3:0f:4a:6b:2d:e3:85:40:5d:ac:6a: 9f:b1:3a:7c:10:9b:56:0e:a8:bb:c0:07:69:5a:9b: ef:45:bb:21:bc:cd:ea:72:93:d9:71:36:c4:7e:ce: 29:1b:45:4b:4d:03:9c:4f:d0:93:3e:f3:bb:6e:ac: 1b:a3:be:c3:17:fe:ac:c6:b0:e5:b2:ca:a3:5c:4d: 6a:74:45:dd:71:0c:81:a2:3e:08:34:ab:92:fa:05: 57:47:f4:58:5d:27:a4:fe:db:de:72:cb:03:31:a7: 2e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BB:4C:E1:A6:E0:A4:C3:28:31:7A:2B:87:C1:73:6D:0F:F7:2A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/70324e2c-97e2-38b4-8a29-b74a347765c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c4:7c:88:68:92:3d:29:cd:4d:4f:e0:22:92:62:f3:6c:4e: d8:9f:6f:11:9a:aa:22:3b:ee:73:11:3c:62:82:60:fc:f2:07: 9e:8a:ba:1c:65:e9:47:aa:5d:38:42:7b:c8:0a:cf:4f:5d:a7: f3:10:7e:04:4e:96:f0:a1:a2:2e:37:ef:90:8f:69:ec:3c:dc: 29:87:f1:e5:6e:3c:01:99:b7:fb:ab:8b:e4:83:1c:8b:6f:d5: ba:f8:03:f7:96:b1:d2:9b:13:0d:50:6e:90:8e:e9:fb:ae:87: 21:18:f5:64:a3:17:cf:db:40:89:19:e0:50:4a:45:05:d2:36: ad:88:5a:b3:06:0d:94:0f:e7:bb:6e:51:08:54:36:fd:b1:81: 2e:2a:08:31:59:bb:4f:90:46:ec:fd:18:fa:74:7f:23:85:11: 8e:12:29:4f:12:71:f6:be:d1:c2:be:da:09:e5:a6:21:c4:6c: 8b:13:1d:f6:a5:ff:db:c4:8e:c7:6d:88:4c:3d:1b:6d:16:14: f7:c4:84:d7:e7:14:48:89:e1:f9:03:07:fa:c1:10:99:69:2e: 69:fc:98:9c:cd:13:26:f8:65:11:c5:34:4f:16:ea:fd:5a:f6: 54:13:85:92:5e:bb:84:de:96:4c:57:03:a2:e9:9c:6a:4a:77: fd:b7:5f:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k32sTofFZoBznlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGVhZWNmMTEtN2M5NS00MmIwLWJiM2EtMzVkYjNjZmJhODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYAfxJ8RJbMGh8X1llWzvsHXiJc63Bj/Ehff tuJQfnQUNGp1VMKLZGwhDPz4gBZeLayysXamLZsVmPObC95qiM3iavgiPtVb6tAk mC1KbHTV/aoYa9kpmAxFC7R/SmVSdWX8oxkewmcMc4CZGmHNQFHe9ElV7/j/Pjnh lEwaClHqmaAXPQxuECzcXQ/WjXLM15YQhUmUML+Eow9Kay3jhUBdrGqfsTp8EJtW Dqi7wAdpWpvvRbshvM3qcpPZcTbEfs4pG0VLTQOcT9CTPvO7bqwbo77DF/6sxrDl ssqjXE1qdEXdcQyBoj4INKuS+gVXR/RYXSek/tvecssDMacu8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEG7TOGm4KTDKDF6K4fBc20P9yoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzAzMjRlMmMtOTdlMi0z OGI0LThhMjktYjc0YTM0Nzc2NWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE3EfIhokj0pzU1P4CKSYvNsTtifbxGaqiI77nMRPGKCYPzyB56K uhxl6UeqXThCe8gKz09dp/MQfgROlvChoi4375CPaew83CmH8eVuPAGZt/uri+SD HItv1br4A/eWsdKbEw1QbpCO6fuuhyEY9WSjF8/bQIkZ4FBKRQXSNq2IWrMGDZQP 57tuUQhUNv2xgS4qCDFZu0+QRuz9GPp0fyOFEY4SKU8Scfa+0cK+2gnlpiHEbIsT Hfal/9vEjsdtiEw9G20WFPfEhNfnFEiJ4fkDB/rBEJlpLmn8mJzNEyb4ZRHFNE8W 6v1a9lQThZJeu4TelkxXA6LpnGpKd/23XxE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:49 2026 by rpki-client