$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa File: 8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa (raw, json) Hash identifier: V1SgxvWPQpZxg32AihSOdLoYCXUXgYLMajTi0HHHjpQ= Subject key identifier: 6C:7D:01:DA:38:E2:65:08:79:09:B5:A5:2F:4D:57:7D:57:FE:3F:E7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E123DCB5D78E2A7F323300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:23:dc:b5:d7:8e:2a:7f:32:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7e0aba93-eaac-4427-b87f-a189861556e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:51:d1:07:0e:87:fc:c4:e7:9e:77:1d:42:1e: 91:f3:19:37:0b:3c:8a:74:ba:9e:cf:46:f7:ff:aa: 25:93:39:24:21:bc:5c:fa:dc:db:ea:87:fb:a0:5f: 71:cf:5a:f6:7a:ca:c8:23:4b:bf:af:a6:55:87:8b: 1a:a6:9a:93:53:03:84:80:87:0b:81:60:b3:39:e4: fc:eb:bc:ec:e3:e5:92:38:b4:f7:1c:04:23:3e:ac: df:69:66:63:fb:f3:ff:c4:6e:d6:5c:96:fd:f4:d4: 35:c3:62:9a:6b:73:7a:a0:75:c0:88:4f:02:c8:6c: 2b:fa:9b:10:1d:a4:43:5f:d7:92:7c:b3:0e:a9:9d: d1:a7:f8:ad:b1:ae:d0:5a:a7:30:bf:c6:dc:dc:e8: 49:ef:b6:6d:84:24:09:a9:3a:e9:0a:5e:47:17:8f: 75:3f:19:b0:03:4f:d3:c4:0d:cd:c3:95:25:2d:88: 56:76:bd:aa:65:5b:cf:ee:90:f4:d4:07:ee:3b:ff: 0f:f3:a7:75:5b:c4:97:c0:99:6d:57:45:33:e2:23: 83:13:89:83:8b:52:fa:81:ff:25:90:e6:c8:a3:0e: cc:7d:76:cb:a2:9a:8d:4a:94:9d:f9:b1:a7:45:00: 3d:e8:ef:dd:af:0d:b5:46:0c:76:0a:d1:c2:fc:86: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7D:01:DA:38:E2:65:08:79:09:B5:A5:2F:4D:57:7D:57:FE:3F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e9fdc04-6d29-3600-a98b-a849ff6d1e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:54::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:f5:19:05:d6:e4:0e:d9:c0:f2:10:3d:cb:1f:3b:79:9f:b8: 7f:28:be:3b:77:f1:db:c6:dd:17:5b:d2:fb:c4:d9:16:60:2d: 80:7a:4f:c5:b7:1b:13:b4:57:4e:79:91:6d:3c:bc:69:0c:6d: 76:d6:96:c9:d8:5a:b8:7f:ac:c2:4c:fa:24:ac:89:b4:fe:6c: ee:9c:22:af:64:c3:5e:51:34:4b:b3:33:7b:02:11:3d:d2:5a: ec:19:15:7f:98:10:bc:fd:37:1f:20:0a:c8:3b:ff:5b:af:23: 95:8d:0d:3d:54:34:7b:da:b1:cf:48:bb:67:08:01:69:cd:08: f8:30:97:c8:ec:df:d9:df:1c:f0:c8:a0:39:68:93:0f:40:d4: 28:b4:85:1a:4b:bd:61:f6:31:b7:d9:1e:88:42:b4:2a:19:0c: 5e:d7:ab:a7:0b:c2:4f:55:fe:eb:8a:87:a5:2b:10:60:5e:3a: 9e:12:94:3a:9b:af:5f:eb:a7:bb:66:35:cd:61:00:39:0c:ba: a1:aa:cc:6e:1e:6b:6d:2e:ca:06:c2:9a:ae:d0:97:1f:c2:69: 07:e1:7a:55:2f:b7:31:cd:0d:9d:03:8e:9a:45:5e:ae:33:c5: fb:bc:96:89:30:0e:14:f4:c6:92:1e:1f:07:e2:39:34:74:86: e7:a2:55:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4SPctdeOKn8yMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2UwYWJhOTMtZWFhYy00NDI3LWI4N2YtYTE4OTg2MTU1NmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFHRBw6H/MTnnncdQh6R8xk3CzyKdLqez0b3 /6olkzkkIbxc+tzb6of7oF9xz1r2esrII0u/r6ZVh4sappqTUwOEgIcLgWCzOeT8 67zs4+WSOLT3HAQjPqzfaWZj+/P/xG7WXJb99NQ1w2Kaa3N6oHXAiE8CyGwr+psQ HaRDX9eSfLMOqZ3Rp/itsa7QWqcwv8bc3OhJ77ZthCQJqTrpCl5HF491PxmwA0/T xA3Nw5UlLYhWdr2qZVvP7pD01AfuO/8P86d1W8SXwJltV0Uz4iODE4mDi1L6gf8l kObIow7MfXbLopqNSpSd+bGnRQA96O/drw21Rgx2CtHC/IYXJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGx9Ado44mUIeQm1pS9NV31X/j/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGU5ZmRjMDQtNmQyOS0z NjAwLWE5OGItYTg0OWZmNmQxZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKP1GQXW5A7ZwPIQPcsfO3mfuH8ovjt38dvG3Rdb0vvE2RZgLYB6 T8W3GxO0V055kW08vGkMbXbWlsnYWrh/rMJM+iSsibT+bO6cIq9kw15RNEuzM3sC ET3SWuwZFX+YELz9Nx8gCsg7/1uvI5WNDT1UNHvasc9Iu2cIAWnNCPgwl8js39nf HPDIoDlokw9A1Ci0hRpLvWH2MbfZHohCtCoZDF7Xq6cLwk9V/uuKh6UrEGBeOp4S lDqbr1/rp7tmNc1hADkMuqGqzG4ea20uygbCmq7Qlx/CaQfhelUvtzHNDZ0DjppF Xq4zxfu8lokwDhT0xpIeHwfiOTR0hueiVVs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:23 2026 by rpki-client