$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d398d98-047f-372e-b6b6-421a60b9bc4a.roa File: 7d398d98-047f-372e-b6b6-421a60b9bc4a.roa (raw, json) Hash identifier: rjr4KHo6fJR8PcAHyhXj4V49JZosHnB/7TmbbUOXyEA= Subject key identifier: EB:0B:FC:D3:EB:FA:1E:34:48:16:FB:3D:40:60:D3:ED:73:0A:0C:FD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF87C2F116DFAE4A677980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d398d98-047f-372e-b6b6-421a60b9bc4a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:87:c2:f1:16:df:ae:4a:67:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=25186ffc-8eb0-4ed3-bcaf-016184fcc98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fd:02:8c:2c:07:af:e3:e3:b7:b6:7c:69:61: b3:aa:b4:3c:5c:44:6e:04:bf:35:59:8f:ed:42:b0: e1:33:e0:bd:88:7a:f6:12:a2:1f:c1:17:19:97:ab: e2:bc:74:f4:db:0a:d3:aa:c6:05:34:de:34:f8:b5: ac:f5:bd:d5:90:13:69:41:0c:9f:00:1c:d2:b3:bd: 31:9d:9f:08:a7:7c:4c:bf:85:09:05:c4:9a:86:0e: 61:61:aa:fa:60:09:57:ac:39:b9:8b:c0:ca:95:39: 83:8d:3e:46:e7:16:f7:d7:fa:c0:8c:21:0b:6c:5d: a0:4c:f3:0a:d8:03:75:b8:84:9e:9c:5f:04:97:13: 8d:72:e8:96:b4:8e:80:5a:83:96:9d:b8:7d:04:51: 40:b6:db:f4:a9:db:6f:72:02:00:29:ac:88:b0:cc: ec:9b:9a:e4:01:bd:b8:6d:21:b2:8d:54:5d:d2:ba: 12:b9:31:99:4c:8d:7b:8f:09:c8:33:bc:16:40:47: e1:a1:bd:5b:40:73:6d:f4:04:e7:e5:75:dd:18:0a: 03:7c:f0:9f:76:cf:23:72:af:0b:32:97:f9:56:b2: a4:e2:2d:01:6f:65:28:0b:de:79:1e:e8:21:94:40: 78:0c:eb:a2:0f:e1:7a:f2:79:65:75:aa:07:7e:72: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0B:FC:D3:EB:FA:1E:34:48:16:FB:3D:40:60:D3:ED:73:0A:0C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d398d98-047f-372e-b6b6-421a60b9bc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0c:01:01:aa:86:c2:ca:3f:2b:36:fd:94:86:96:7a:4e:12: a7:9a:30:da:4f:a5:cb:0b:c3:3f:20:b7:0d:40:a1:0c:93:80: 30:27:b3:2c:e9:94:a2:33:8d:57:59:ca:82:3a:c6:69:32:eb: 04:14:2f:c2:c5:6e:25:8c:04:d9:9b:67:da:bf:e0:db:6a:25: d0:13:1e:b1:fe:41:1c:08:df:93:28:ff:ff:33:d1:b8:8e:2d: 26:22:73:25:58:bd:3c:18:a2:93:37:2b:9f:08:b5:de:d0:a4: b7:c2:bf:d5:a8:c2:c2:0e:46:bc:66:2c:1f:31:95:11:91:2a: 99:50:0d:8d:09:78:e2:9b:b2:f0:de:e9:25:9f:ca:9d:f5:fb: 79:8e:a8:83:6f:31:72:1d:ba:67:61:a1:a7:fb:c0:93:5d:d3: 29:8b:99:37:c1:42:7a:3b:98:33:37:2e:e7:c7:09:e4:57:fa: e7:96:d6:b7:7b:17:9e:ab:46:75:cd:8e:b4:dc:2b:0f:24:e7: b9:8a:d4:bf:f2:4e:f8:f7:bd:4e:46:eb:1f:e3:a7:b5:f3:f0: eb:98:d9:5e:51:74:88:e0:c6:81:55:b8:7d:76:84:31:57:cc: fe:7f:ae:30:d9:28:db:d9:b2:e0:4d:13:b1:e4:57:3a:b4:c7: 86:84:0e:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k34fC8RbfrkpneYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjUxODZmZmMtOGViMC00ZWQzLWJjYWYtMDE2MTg0ZmNjOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP0CjCwHr+Pjt7Z8aWGzqrQ8XERuBL81WY/t QrDhM+C9iHr2EqIfwRcZl6vivHT02wrTqsYFNN40+LWs9b3VkBNpQQyfABzSs70x nZ8Ip3xMv4UJBcSahg5hYar6YAlXrDm5i8DKlTmDjT5G5xb31/rAjCELbF2gTPMK 2AN1uISenF8ElxONcuiWtI6AWoOWnbh9BFFAttv0qdtvcgIAKayIsMzsm5rkAb24 bSGyjVRd0roSuTGZTI17jwnIM7wWQEfhob1bQHNt9ATn5XXdGAoDfPCfds8jcq8L Mpf5VrKk4i0Bb2UoC955HughlEB4DOuiD+F68nlldaoHfnJJzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOsL/NPr+h40SBb7PUBg0+1zCgz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2QzOThkOTgtMDQ3Zi0z NzJlLWI2YjYtNDIxYTYwYjliYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADAMAQGqhsLKPys2/ZSGlnpOEqeaMNpPpcsLwz8gtw1AoQyTgDAn syzplKIzjVdZyoI6xmky6wQUL8LFbiWMBNmbZ9q/4NtqJdATHrH+QRwI35Mo//8z 0biOLSYicyVYvTwYopM3K58Itd7QpLfCv9WowsIORrxmLB8xlRGRKplQDY0JeOKb svDe6SWfyp31+3mOqINvMXIdumdhoaf7wJNd0ymLmTfBQno7mDM3LufHCeRX+ueW 1rd7F56rRnXNjrTcKw8k57mK1L/yTvj3vU5G6x/jp7Xz8OuY2V5RdIjgxoFVuH12 hDFXzP5/rjDZKNvZsuBNE7HkVzq0x4aEDis= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:52 2026 by rpki-client