$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa File: 954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa (raw, json) Hash identifier: xJ3fDXJnMfiDfGnRP50JKY2VOG9JQMpwVa4CfJMPAA8= Subject key identifier: 3A:90:BA:71:AA:D0:27:24:25:69:E1:E4:96:F6:C0:70:50:8F:53:F7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E1205956E0EE9537000A40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:20:59:56:e0:ee:95:37:00:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d2adcd7f-64fd-4038-a814-386ce51caef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:44:b2:38:36:0c:f0:56:7e:d0:45:89:28:60: 3d:d4:33:0d:da:61:b3:f3:b2:e9:7b:f8:71:bc:0c: 9e:7b:45:5d:69:86:c8:14:4a:79:35:7b:92:49:cf: e5:3f:f8:5a:65:0a:3b:82:89:2a:5b:f8:a1:8b:a6: f3:09:26:87:95:31:55:a1:bf:f8:4a:64:84:21:dd: 2f:ac:b3:f7:28:6f:00:30:2a:e4:82:d1:c8:d9:63: e0:8b:62:9e:68:33:67:65:08:9a:c4:f9:ac:de:3d: 82:82:95:84:8b:09:57:96:9c:5d:fe:a1:f3:72:45: 5c:a8:40:04:01:50:d9:2c:19:e2:12:c9:bb:dc:e0: 21:f9:a0:8b:8c:8e:ed:72:6c:b1:68:f0:ba:39:d8: 99:68:56:34:23:4b:fc:c0:30:cc:a6:0e:5b:ed:85: b6:f3:a2:0d:96:60:a4:56:da:df:20:b9:4e:94:63: 0f:4f:ed:50:78:98:40:ff:84:ad:d6:1c:ec:3a:96: 7b:f2:25:01:fe:fd:d9:03:4b:d0:45:71:18:4b:b4: 71:2d:3b:e8:df:93:ed:9e:1a:15:6f:a7:0c:ea:b0: 6b:fa:86:08:ec:ae:95:39:31:79:5d:8e:df:e3:2d: b9:64:fe:01:97:21:e3:53:03:cd:7e:e4:3d:f8:22: 0d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:90:BA:71:AA:D0:27:24:25:69:E1:E4:96:F6:C0:70:50:8F:53:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/954c1daf-0b6b-37d1-b9fb-67487447c7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:64:ab:4b:bc:02:76:b8:bd:97:57:a3:90:d1:1b:19:f4:62: b0:bd:85:da:8b:d6:36:19:44:d2:5f:78:1b:6f:b4:57:4a:45: 67:5b:1a:bd:89:54:b4:21:79:be:fa:83:d3:73:43:13:f6:29: 9f:15:86:75:d5:d8:d3:c0:6d:e0:52:22:72:26:44:74:2f:7d: 42:de:08:51:24:c7:e0:74:7e:5a:67:6f:d1:db:2a:f3:f6:ff: db:b1:0f:ae:2d:1a:dc:6c:42:22:37:ca:47:7f:7e:a3:9a:d2: f8:64:0f:62:7d:82:12:ae:33:0c:f4:d7:70:02:54:a4:9d:5c: ac:ec:40:32:16:39:5a:ed:63:77:5e:11:32:5a:62:08:da:65: b9:ba:5e:26:03:08:a8:04:88:16:83:e4:23:9f:4f:be:9d:b3: 63:a9:a8:bd:a5:d1:f1:93:c7:40:80:32:3a:22:1e:c5:44:bb: 8a:35:dc:9d:7b:32:1c:82:4c:34:de:8e:88:29:f1:e1:26:cc: 7b:a1:0e:73:e1:af:4e:ab:7d:39:d3:72:22:e9:9c:57:8d:a5: 33:7d:bb:b0:00:85:90:1b:c8:5e:ac:57:17:ee:6b:79:d0:29: 66:5c:3b:a9:d9:c0:19:e2:20:0a:bd:0c:2d:fc:4e:80:bc:a2: ab:f2:81:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4SBZVuDulTcACkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDJhZGNkN2YtNjRmZC00MDM4LWE4MTQtMzg2Y2U1MWNhZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ESyODYM8FZ+0EWJKGA91DMN2mGz87Lpe/hx vAyee0VdaYbIFEp5NXuSSc/lP/haZQo7gokqW/ihi6bzCSaHlTFVob/4SmSEId0v rLP3KG8AMCrkgtHI2WPgi2KeaDNnZQiaxPms3j2CgpWEiwlXlpxd/qHzckVcqEAE AVDZLBniEsm73OAh+aCLjI7tcmyxaPC6OdiZaFY0I0v8wDDMpg5b7YW286INlmCk VtrfILlOlGMPT+1QeJhA/4St1hzsOpZ78iUB/v3ZA0vQRXEYS7RxLTvo35PtnhoV b6cM6rBr+oYI7K6VOTF5XY7f4y25ZP4BlyHjUwPNfuQ9+CINJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDqQunGq0CckJWnh5Jb2wHBQj1P3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTU0YzFkYWYtMGI2Yi0z N2QxLWI5ZmItNjc0ODc0NDdjN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNkq0u8Ana4vZdXo5DRGxn0YrC9hdqL1jYZRNJfeBtvtFdKRWdb Gr2JVLQheb76g9NzQxP2KZ8VhnXV2NPAbeBSInImRHQvfULeCFEkx+B0flpnb9Hb KvP2/9uxD64tGtxsQiI3ykd/fqOa0vhkD2J9ghKuMwz013ACVKSdXKzsQDIWOVrt Y3deETJaYgjaZbm6XiYDCKgEiBaD5COfT76ds2OpqL2l0fGTx0CAMjoiHsVEu4o1 3J17MhyCTDTejogp8eEmzHuhDnPhr06rfTnTciLpnFeNpTN9u7AAhZAbyF6sVxfu a3nQKWZcO6nZwBniIAq9DC38ToC8oqvygYo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:30 2026 by rpki-client