$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa File: 9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa (raw, json) Hash identifier: UFfcEfRsq/fo/DNJfTYLINpIzF19nXHMMdliqvlp6vE= Subject key identifier: D8:7E:89:D4:6F:AA:A5:1A:2C:A3:E5:12:B0:32:DA:B4:37:50:03:C3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A704CDB7B066E3D478740 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 2001:500:4d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:70:4c:db:7b:06:6e:3d:47:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=3178f7de-11c8-4033-bc9b-f4ab9618bd69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:0e:96:d1:94:18:e6:b9:36:5a:b3:73:72: c3:83:e7:50:27:d0:6d:7b:3d:b9:96:70:07:30:89: 1f:ce:2a:8f:f3:9b:9e:22:a6:e1:f3:cd:c0:a5:b3: 1e:42:94:19:75:e4:3a:87:3c:3b:87:8c:1c:cb:cb: 83:11:50:6b:d8:8b:b0:6e:5c:d9:aa:25:f4:7c:85: 66:82:d2:ea:ff:2d:09:67:d0:6f:6a:a1:eb:54:cf: 2e:b3:9a:87:df:bb:72:5d:aa:a3:f6:2b:43:2a:36: e3:5a:49:53:00:8c:ff:a4:ec:df:51:7b:c9:39:39: 3c:6c:3b:f9:bf:03:85:6c:06:9b:01:98:18:4f:2e: f8:d7:b2:75:cd:a9:62:19:0e:ee:68:8b:a1:3e:15: ba:6f:af:7f:3f:59:bb:9b:a5:35:c6:49:51:b4:7a: 15:8c:6f:55:10:7b:6d:64:b4:03:b4:68:00:8a:8d: 79:5c:2f:59:83:21:fe:bb:46:1e:ab:a9:0d:d2:46: d8:ee:9d:55:c2:6c:b5:fd:b9:0c:c7:34:6f:0a:76: bb:23:25:8c:e3:78:49:4c:27:a2:91:d0:7e:d5:da: 8d:0f:2a:d7:7d:f3:f6:cf:e9:95:8b:89:32:a8:e0: 96:9c:3e:e2:3b:1f:f4:af:6a:e1:55:c9:15:f0:66: c1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7E:89:D4:6F:AA:A5:1A:2C:A3:E5:12:B0:32:DA:B4:37:50:03:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:88:28:1c:e2:c6:32:9b:d5:45:a3:f4:78:9d:c4:63:89:4c: c5:95:83:a5:63:28:6b:91:c9:c5:36:cc:d0:5b:3a:49:8e:34: 77:5c:6e:aa:5a:d2:78:d4:91:42:f0:c5:ef:3f:73:01:bc:1a: ab:dc:00:cc:72:e5:c9:f2:b9:42:cb:c3:ca:a9:71:eb:87:18: ba:e6:88:37:a0:79:c0:1f:c6:c0:24:27:7f:de:11:7f:d8:d6: c1:86:cf:eb:ba:9c:a9:78:b6:a4:61:6c:c0:91:ff:25:52:db: d4:ac:eb:0e:c0:72:a6:9f:9c:47:d1:06:92:c7:13:a3:50:c2: b6:3e:e7:e6:e6:fd:1b:5c:e4:7a:36:dc:5a:0f:06:96:e9:56: 1a:a1:b3:cd:d0:ca:52:95:de:e5:72:78:07:55:07:3c:de:31: 36:45:18:36:5f:23:85:f0:57:b3:69:14:a9:0a:ca:49:89:71: 62:94:8a:bf:02:4d:dd:af:17:04:5d:bd:15:fd:00:0d:c9:c5: c0:0d:d4:1f:8b:eb:e1:3b:dc:a9:e3:d0:2a:23:38:45:95:9c: 79:76:d7:c5:5a:77:1e:83:42:45:ab:14:43:d0:f9:7b:59:83: 69:e3:35:b3:3f:fe:89:3c:69:b3:43:24:46:fb:ed:c0:6c:20: db:3d:db:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jenBM23sGbj1Hh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzE3OGY3ZGUtMTFjOC00MDMzLWJjOWItZjRhYjk2MThiZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzMOltGUGOa5Nlqzc3LDg+dQJ9Btez25lnAH MIkfziqP85ueIqbh883ApbMeQpQZdeQ6hzw7h4wcy8uDEVBr2IuwblzZqiX0fIVm gtLq/y0JZ9BvaqHrVM8us5qH37tyXaqj9itDKjbjWklTAIz/pOzfUXvJOTk8bDv5 vwOFbAabAZgYTy7417J1zaliGQ7uaIuhPhW6b69/P1m7m6U1xklRtHoVjG9VEHtt ZLQDtGgAio15XC9ZgyH+u0Yeq6kN0kbY7p1Vwmy1/bkMxzRvCna7IyWM43hJTCei kdB+1dqNDyrXffP2z+mVi4kyqOCWnD7iOx/0r2rhVckV8GbBdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNh+idRvqqUaLKPlErAy2rQ3UAPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTEwMGNjOGMtNGYxMi0z ZmYyLTllNDItZmU3M2U2M2E4ZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABGIKBzixjKb1UWj9HidxGOJTMWVg6VjKGuRycU2zNBbOkmONHdc bqpa0njUkULwxe8/cwG8GqvcAMxy5cnyuULLw8qpceuHGLrmiDegecAfxsAkJ3/e EX/Y1sGGz+u6nKl4tqRhbMCR/yVS29Ss6w7AcqafnEfRBpLHE6NQwrY+5+bm/Rtc 5Ho23FoPBpbpVhqhs83QylKV3uVyeAdVBzzeMTZFGDZfI4XwV7NpFKkKykmJcWKU ir8CTd2vFwRdvRX9AA3JxcAN1B+L6+E73Knj0CojOEWVnHl218Vadx6DQkWrFEPQ +XtZg2njNbM//ok8abNDJEb77cBsINs92x8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:16 2026 by rpki-client