$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa File: 7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa (raw, json) Hash identifier: 4HGZ1dUFrQ0lPzuGNTGCY01a/GmjUTWDCW+QRaEQaTg= Subject key identifier: 93:7D:85:AE:C9:A7:63:8B:EB:EC:F2:92:46:44:E0:70:5B:F9:1B:DC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E117E3A01EFBCAFD941020 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:cf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:17:e3:a0:1e:fb:ca:fd:94:10:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4f5a45f9-6053-42a3-9e6e-ea8dd7ac2731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:13:e9:4b:30:00:18:6e:b5:4f:c5:3d:a8: 9c:d9:11:b5:06:58:a9:16:4b:38:fe:d9:1b:14:06: b7:c6:c1:2f:fd:2b:86:0c:8c:d7:83:12:e2:3c:ea: 5e:9e:c4:df:2a:72:5d:67:b1:e0:ff:b4:a6:6c:73: a5:6e:20:c3:e9:56:1c:3f:ab:67:17:0e:bc:ca:a6: 42:cf:70:3a:72:c2:12:b9:37:19:be:ab:2a:ab:e8: f5:0f:11:45:4d:d5:b0:aa:83:4a:23:e8:40:23:36: 4c:6a:5c:cd:31:23:e3:26:77:41:88:52:f8:29:0f: 5f:2b:d8:85:c5:bc:e0:a1:ec:2f:aa:7f:e4:92:03: 7f:09:d1:7e:70:d9:57:9e:48:8d:4e:f9:4d:98:d0: 20:46:75:84:30:f2:46:f0:67:ff:ca:11:75:3c:f5: 4c:04:c0:92:de:50:c3:aa:ea:04:18:2e:b8:6b:4a: 86:18:dc:dd:31:05:10:0d:72:f1:85:be:ce:c4:6a: a5:f1:c2:2e:2e:69:a9:4b:48:d0:b4:12:c5:de:3b: fb:33:20:e9:c9:a2:db:01:09:db:14:ed:d8:54:b7: c7:80:38:db:58:ac:a5:12:83:39:48:03:ad:85:25: 39:1d:43:f8:27:e2:87:6d:33:b5:64:47:b8:f3:79: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7D:85:AE:C9:A7:63:8B:EB:EC:F2:92:46:44:E0:70:5B:F9:1B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1f:e7:ed:8b:92:86:dd:27:fa:8a:55:8b:60:fd:e8:ca:89: ce:a2:ec:30:cc:71:64:64:b7:26:8b:5b:87:0a:07:1d:26:7c: 46:d4:1f:db:ad:43:6d:23:ec:ba:1d:fb:87:13:7f:31:27:12: 2a:d8:7d:1c:41:c7:d5:6d:91:36:a6:cc:ef:fb:e8:8a:f2:dc: 2c:a7:bd:14:c7:37:8a:8d:6a:3e:af:7a:79:3e:ad:69:50:2c: aa:ee:55:0e:c7:5d:d4:cd:ec:a3:4f:27:22:ec:ca:b4:21:1a: 39:ef:16:65:c7:93:2a:23:b8:12:e8:59:b6:dd:50:93:f1:7d: a8:29:e9:28:8c:1b:39:07:a7:b3:aa:ec:06:4b:8f:3c:ed:97: e6:78:cc:24:7e:9a:ac:05:41:39:5c:31:8e:6c:d2:72:e8:1c: 42:d5:e2:80:db:8e:2a:da:77:4b:76:a4:c4:fd:2c:21:eb:bf: 15:40:26:d8:65:bc:60:8a:3c:fa:bc:4f:0d:92:ca:79:59:21: ff:65:f1:50:f3:58:c3:c7:84:c1:ec:cc:2d:73:9e:62:6b:9d: d8:88:e3:79:d7:2b:1b:db:62:9f:38:49:2e:3a:b1:bb:fe:4c: b5:08:57:52:39:01:cd:9e:b1:e5:4b:ef:f4:f0:f2:d0:c5:98: f5:7f:14:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4RfjoB77yv2UECAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGY1YTQ1ZjktNjA1My00MmEzLTllNmUtZWE4ZGQ3YWMyNzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRkT6UswABhutU/FPaic2RG1BlipFks4/tkb FAa3xsEv/SuGDIzXgxLiPOpensTfKnJdZ7Hg/7SmbHOlbiDD6VYcP6tnFw68yqZC z3A6csISuTcZvqsqq+j1DxFFTdWwqoNKI+hAIzZMalzNMSPjJndBiFL4KQ9fK9iF xbzgoewvqn/kkgN/CdF+cNlXnkiNTvlNmNAgRnWEMPJG8Gf/yhF1PPVMBMCS3lDD quoEGC64a0qGGNzdMQUQDXLxhb7OxGql8cIuLmmpS0jQtBLF3jv7MyDpyaLbAQnb FO3YVLfHgDjbWKylEoM5SAOthSU5HUP4J+KHbTO1ZEe483lg7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJN9ha7Jp2OL6+zykkZE4HBb+RvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzQzOWQxYTEtOTQxYi0z ZTBmLWI0YmYtZTMyNjdkYjIwNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYf5+2LkobdJ/qKVYtg/ejKic6i7DDMcWRktyaLW4cKBx0mfEbU H9utQ20j7Lod+4cTfzEnEirYfRxBx9VtkTamzO/76Iry3CynvRTHN4qNaj6venk+ rWlQLKruVQ7HXdTN7KNPJyLsyrQhGjnvFmXHkyojuBLoWbbdUJPxfagp6SiMGzkH p7Oq7AZLjzztl+Z4zCR+mqwFQTlcMY5s0nLoHELV4oDbjirad0t2pMT9LCHrvxVA JthlvGCKPPq8Tw2SynlZIf9l8VDzWMPHhMHszC1znmJrndiI43nXKxvbYp84SS46 sbv+TLUIV1I5Ac2eseVL7/Tw8tDFmPV/FMk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:08 2026 by rpki-client