$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa File: 7143821d-b959-370f-bcec-f9e5be34ed99.roa (raw, json) Hash identifier: ZseNs7wnxQIfDXIEluEnYIbUDP4ECG7z5n19Hzz5XDw= Subject key identifier: 40:FC:CE:D3:97:D5:7C:0A:16:51:B8:2E:4D:31:A0:50:9D:30:4B:2F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E12630F9AFD564BD9EBBE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:26:30:f9:af:d5:64:bd:9e:bb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b4be7316-5c78-407c-bb28-84a9eb504430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:d8:f4:12:c0:76:7b:17:78:b7:cb:69:f5: 29:b8:24:4e:b4:9b:d5:38:b3:5f:2d:94:a6:82:75: 7f:2e:29:af:cd:0a:70:85:1b:72:bf:f2:0a:00:1d: 04:c4:23:8b:a5:bb:ad:79:6c:26:4a:1c:f3:82:0b: 07:cd:30:61:97:b9:48:b1:b6:d0:7a:18:ae:37:f4: 92:20:43:20:3d:04:f4:6a:87:74:12:53:2d:5f:9f: 46:5b:bd:7d:fc:7a:e3:20:5f:fa:06:46:a8:3c:90: ed:95:07:5e:e6:64:ec:02:ee:02:71:ec:06:a5:8f: 58:08:bd:0c:75:67:0d:0f:fe:1f:32:05:7c:34:76: 1c:e8:36:5b:db:13:45:68:5b:c7:2e:86:c5:4e:be: 7e:fc:fa:8c:d9:ec:8c:a3:d8:84:bd:c5:83:1a:70: a1:d6:3e:33:a6:84:f9:62:d9:d9:53:0a:91:c4:b4: f9:4c:d4:ee:46:7a:a6:f5:a2:20:44:d5:6e:15:59: b4:46:46:33:79:70:f0:a0:a7:45:7e:94:fb:0f:31: 96:eb:7f:1e:3b:b7:61:22:dd:c3:f9:05:ce:9c:5a: 4f:41:8d:1b:f0:37:cc:bc:b9:6f:86:5b:90:78:d7: e9:54:91:eb:6f:1b:90:8d:e6:4f:6f:18:7e:dd:8f: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FC:CE:D3:97:D5:7C:0A:16:51:B8:2E:4D:31:A0:50:9D:30:4B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d8:14:1c:46:b2:2a:4a:f9:61:e6:0f:dc:82:ab:d4:70:e9: 6f:89:7e:10:65:42:0c:41:3f:63:f1:30:18:05:3d:18:51:44: 73:31:74:0f:d6:3f:8e:ab:44:8d:f1:6b:48:4e:27:dd:85:12: 31:2a:d4:5c:78:e2:32:d6:3e:78:47:6d:8c:88:d8:ed:a5:1f: 79:d9:2a:07:dd:17:93:43:40:07:f9:c3:1f:69:13:1b:08:62: cd:14:4e:69:22:a5:60:c3:3d:43:de:b8:69:b4:2d:c5:ea:65: ef:89:d4:4d:cc:6e:f6:a8:b6:7e:34:98:2c:6c:11:b8:cc:56: 1f:4a:04:d8:d8:f8:ad:53:7e:9f:6e:42:d3:6a:9e:06:45:19: fa:4e:f0:85:b7:0b:b0:b6:7e:c4:25:94:07:50:4a:8d:2a:56: 79:4d:8e:35:98:61:3b:f7:e4:c1:b8:d4:21:01:4a:1f:73:fd: 0e:0d:f2:3e:9e:57:6e:e9:09:52:0f:54:d7:1e:49:a1:9c:70: d8:71:22:6b:7f:b3:1f:94:4d:bb:e3:a0:0d:ba:a1:dc:08:d7: 07:a0:c3:81:cf:07:7e:9c:ae:f4:a1:e4:59:f8:a5:0e:dc:3c: 24:b5:f4:47:cf:59:30:3d:17:60:93:6d:68:ad:0e:8e:95:50: 30:5e:2f:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4SYw+a/VZL2eu+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjRiZTczMTYtNWM3OC00MDdjLWJiMjgtODRhOWViNTA0NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc/Y9BLAdnsXeLfLafUpuCROtJvVOLNfLZSm gnV/LimvzQpwhRtyv/IKAB0ExCOLpbuteWwmShzzggsHzTBhl7lIsbbQehiuN/SS IEMgPQT0aod0ElMtX59GW719/HrjIF/6BkaoPJDtlQde5mTsAu4CcewGpY9YCL0M dWcND/4fMgV8NHYc6DZb2xNFaFvHLobFTr5+/PqM2eyMo9iEvcWDGnCh1j4zpoT5 YtnZUwqRxLT5TNTuRnqm9aIgRNVuFVm0RkYzeXDwoKdFfpT7DzGW638eO7dhIt3D +QXOnFpPQY0b8DfMvLlvhluQeNfpVJHrbxuQjeZPbxh+3Y+KCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFED8ztOX1XwKFlG4Lk0xoFCdMEsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzE0MzgyMWQtYjk1OS0z NzBmLWJjZWMtZjllNWJlMzRlZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF/YFBxGsipK+WHmD9yCq9Rw6W+JfhBlQgxBP2PxMBgFPRhRRHMx dA/WP46rRI3xa0hOJ92FEjEq1Fx44jLWPnhHbYyI2O2lH3nZKgfdF5NDQAf5wx9p ExsIYs0UTmkipWDDPUPeuGm0LcXqZe+J1E3Mbvaotn40mCxsEbjMVh9KBNjY+K1T fp9uQtNqngZFGfpO8IW3C7C2fsQllAdQSo0qVnlNjjWYYTv35MG41CEBSh9z/Q4N 8j6eV27pCVIPVNceSaGccNhxImt/sx+UTbvjoA26odwI1wegw4HPB36crvSh5Fn4 pQ7cPCS19EfPWTA9F2CTbWitDo6VUDBeL+g= -----END CERTIFICATE-----Generated at Thu Mar 26 10:18:19 2026 by rpki-client