$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7cac83ee-6194-31cf-8e5c-597015df78fe.roa File: 7cac83ee-6194-31cf-8e5c-597015df78fe.roa (raw, json) Hash identifier: 078KyY5TiHQBit3KxRzqeOZVcTvlcsGb5DVhts7fpWE= Subject key identifier: 61:21:D9:0B:4C:21:4B:FB:34:CF:66:C5:3C:FA:A3:F1:FA:B4:44:49 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E13814B1856F42CDAF7D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7cac83ee-6194-31cf-8e5c-597015df78fe.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:d7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:38:14:b1:85:6f:42:cd:af:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2fe9a464-6d83-49be-a1c7-cca8da08b0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:18:02:da:08:bf:6e:7c:90:d5:16:40:1a:dd: f0:75:6a:b2:b8:f2:d5:40:26:52:40:26:ac:ce:34: 90:3f:e0:20:a5:38:b7:5d:6c:cf:ee:60:47:46:df: 27:ec:4d:8a:03:bd:f9:7b:74:24:bf:d6:dd:76:0d: 0b:2d:2c:78:c6:c1:82:53:0b:fb:42:92:d4:0e:2a: 98:94:aa:d8:34:c0:f0:6d:dd:e6:35:8e:63:99:cc: 63:02:84:bf:fa:87:45:8e:f6:2c:a4:df:29:f8:ad: fc:74:25:43:cc:6f:0a:c8:05:df:81:24:21:fc:f8: 41:c3:d1:50:e4:c9:6f:2d:7f:44:5f:60:f8:89:7c: 99:b5:fe:56:4d:b8:67:43:25:a2:46:65:7a:84:10: 85:3a:f0:f0:c9:cf:29:c9:b0:c3:e3:20:15:cc:29: 16:10:57:a2:98:68:4a:f2:05:7a:ca:1f:2a:6c:5c: 29:5c:62:9a:62:3a:f1:de:55:48:c9:7d:87:bd:ec: d2:6a:1f:a2:82:0a:f5:10:11:92:32:a5:62:85:29: 30:9d:1f:e7:ac:c9:8f:7b:f3:69:92:5b:13:cb:d2: 28:2c:79:f6:de:24:8e:6f:a1:d6:82:9e:66:ac:cc: b1:ac:6f:fb:da:29:d1:03:a0:76:e8:fc:f0:d8:27: 32:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:21:D9:0B:4C:21:4B:FB:34:CF:66:C5:3C:FA:A3:F1:FA:B4:44:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7cac83ee-6194-31cf-8e5c-597015df78fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5e:89:f7:fa:22:36:29:a0:bf:f9:0a:a1:d3:a8:45:51:98: e5:8f:50:0c:86:63:2f:a8:3f:81:d1:87:4c:60:04:48:e9:a3: 7a:11:a3:8d:5f:fe:1a:b7:8d:72:e2:66:80:e6:d2:8a:52:ab: 82:c3:21:5c:0f:fb:61:df:bb:cb:b2:aa:77:c8:e7:37:08:e5: 4b:20:a2:54:a5:d4:fe:85:e8:69:aa:b3:6f:f4:eb:c7:6c:78: 67:7b:0a:ad:7f:25:90:76:85:c2:ba:39:18:4a:b3:68:db:e8: 23:54:04:b4:65:91:dc:2b:e8:3c:f1:fb:e0:2e:dc:78:22:d7: 79:84:28:f8:71:82:6b:62:85:47:99:6c:5b:53:8e:bf:e5:75: 1b:2a:26:52:76:9d:24:06:fe:3d:28:ca:0d:a8:a2:4f:fe:10: e3:5f:05:63:33:bd:cc:14:b2:6d:c8:db:82:2f:59:82:6f:80: 05:36:e9:ac:95:95:6b:98:61:89:79:a3:e7:4d:ff:2f:2c:c0: f4:7f:08:2b:43:ee:a7:dd:a4:ea:94:6d:fa:fb:39:27:04:bf: 9f:29:b1:13:68:ac:74:25:a0:49:28:e2:a4:73:4a:ab:07:c4: 78:61:46:ed:3a:1c:be:eb:d1:df:88:d8:b1:23:f4:ba:42:69: c1:b7:c6:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4TgUsYVvQs2vfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmZlOWE0NjQtNmQ4My00OWJlLWExYzctY2NhOGRhMDhiMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RgC2gi/bnyQ1RZAGt3wdWqyuPLVQCZSQCas zjSQP+AgpTi3XWzP7mBHRt8n7E2KA735e3Qkv9bddg0LLSx4xsGCUwv7QpLUDiqY lKrYNMDwbd3mNY5jmcxjAoS/+odFjvYspN8p+K38dCVDzG8KyAXfgSQh/PhBw9FQ 5MlvLX9EX2D4iXyZtf5WTbhnQyWiRmV6hBCFOvDwyc8pybDD4yAVzCkWEFeimGhK 8gV6yh8qbFwpXGKaYjrx3lVIyX2HvezSah+iggr1EBGSMqVihSkwnR/nrMmPe/Np klsTy9IoLHn23iSOb6HWgp5mrMyxrG/72inRA6B26Pzw2CcyUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGEh2QtMIUv7NM9mxTz6o/H6tERJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2NhYzgzZWUtNjE5NC0z MWNmLThlNWMtNTk3MDE1ZGY3OGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABdeiff6IjYpoL/5CqHTqEVRmOWPUAyGYy+oP4HRh0xgBEjpo3oR o41f/hq3jXLiZoDm0opSq4LDIVwP+2Hfu8uyqnfI5zcI5UsgolSl1P6F6Gmqs2/0 68dseGd7Cq1/JZB2hcK6ORhKs2jb6CNUBLRlkdwr6Dzx++Au3Hgi13mEKPhxgmti hUeZbFtTjr/ldRsqJlJ2nSQG/j0oyg2ook/+EONfBWMzvcwUsm3I24IvWYJvgAU2 6ayVlWuYYYl5o+dN/y8swPR/CCtD7qfdpOqUbfr7OScEv58psRNorHQloEko4qRz SqsHxHhhRu06HL7r0d+I2LEj9LpCacG3xvY= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:08 2026 by rpki-client