$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa File: 9579d882-eb1c-3901-97ff-7eb7aeae8077.roa (raw, json) Hash identifier: CxKIyB/anfprJADGz/zxu3n92N4oB4ef+Vh7UViqxaE= Subject key identifier: 1C:DB:2C:9E:61:38:8F:67:D7:6A:25:A1:A5:E2:1A:67:31:72:06:BB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF63F5125B21B8C4D08DC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:63:f5:12:5b:21:b8:c4:d0:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=395b5d8c-894f-4f48-bc88-1c576485911d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3c:ff:21:ac:52:71:2a:6e:10:0c:70:8c:d9: 3b:a1:55:6e:0a:28:30:1b:f5:37:90:8f:7d:20:52: a9:ff:e0:0c:89:99:7d:3e:5b:51:d6:5e:62:33:21: b9:58:02:09:5c:ed:fd:fd:45:77:0b:bb:43:3c:db: fd:e4:27:c1:6b:a0:a5:e1:b2:8a:3a:cc:be:7a:f8: 7a:7e:c0:dc:ef:a2:68:d2:d9:6e:d9:95:d5:ba:ba: cf:9c:ec:59:aa:e4:0e:b6:15:b0:c7:42:28:19:44: bc:2e:b9:8a:9d:a5:8a:7c:56:d7:d9:a7:80:ba:b5: cd:da:88:26:99:0b:f4:34:88:2f:1c:80:2c:ef:78: c2:23:2b:aa:f7:06:0c:bd:7f:1a:16:b3:a1:16:d3: da:c6:49:76:6c:a8:67:b2:59:59:94:07:4b:97:65: 8d:49:ca:46:83:24:08:71:d3:02:16:56:99:11:92: ec:ac:b9:e9:d6:28:1e:ee:73:8b:57:4b:79:a4:8e: 02:15:b5:21:71:30:c1:c8:e1:a0:3b:8f:54:19:9b: c8:67:b2:90:7a:17:cd:c7:f4:56:ce:fc:c5:00:df: ee:d2:0c:c6:de:f3:75:7a:98:1f:b6:9c:34:44:4e: 30:e7:11:36:a0:db:9e:c0:ed:dc:87:2b:48:95:4e: dc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DB:2C:9E:61:38:8F:67:D7:6A:25:A1:A5:E2:1A:67:31:72:06:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5f:72:00:5d:fb:80:8c:42:21:7a:6a:ab:48:7e:34:58:54: e0:f4:7e:e0:d4:13:3c:37:80:60:1c:42:e4:aa:e7:5e:77:49: 8f:41:8d:61:7e:22:12:63:d3:64:28:6e:2a:bc:d2:c7:d2:1e: 15:3f:c9:3c:1b:4c:1f:5d:3d:c8:70:e0:e2:32:53:1c:8f:58: c0:c3:1e:4c:d7:1a:55:05:d9:08:ba:a0:50:4b:ba:9e:53:51: 8f:d1:51:a5:9f:47:d7:10:69:d1:93:41:74:df:cf:a6:ac:ae: a7:53:0c:70:20:e9:25:e2:d2:b8:b5:f1:97:d6:13:19:bb:d9: 9e:6b:95:f5:40:d8:64:4b:00:4a:de:aa:0f:c3:54:6b:c9:5d: 8a:c7:2a:b4:44:11:48:39:a8:f5:5c:51:fb:f2:a4:b2:a7:c6: 05:5d:ed:d8:c0:55:94:70:24:d0:0d:db:a5:86:7e:79:b1:c8: 2d:6f:47:6e:cf:ec:51:71:f0:c1:c2:3f:a5:54:72:92:d6:70: e9:83:22:ab:59:9d:71:dc:ee:c9:78:a0:a9:3c:4c:ee:af:5f: 52:d7:99:17:f8:90:24:2a:00:df:5c:8d:c7:36:93:3c:98:69: d9:13:a5:30:57:01:47:a2:83:1b:dc:de:6f:98:b4:fb:0f:13: 29:3d:fc:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k32P1ElshuMTQjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Mzk1YjVkOGMtODk0Zi00ZjQ4LWJjODgtMWM1NzY0ODU5MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTz/IaxScSpuEAxwjNk7oVVuCigwG/U3kI99 IFKp/+AMiZl9PltR1l5iMyG5WAIJXO39/UV3C7tDPNv95CfBa6Cl4bKKOsy+evh6 fsDc76Jo0tlu2ZXVurrPnOxZquQOthWwx0IoGUS8LrmKnaWKfFbX2aeAurXN2ogm mQv0NIgvHIAs73jCIyuq9wYMvX8aFrOhFtPaxkl2bKhnsllZlAdLl2WNScpGgyQI cdMCFlaZEZLsrLnp1ige7nOLV0t5pI4CFbUhcTDByOGgO49UGZvIZ7KQehfNx/RW zvzFAN/u0gzG3vN1epgftpw0RE4w5xE2oNuewO3chytIlU7cBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBzbLJ5hOI9n12oloaXiGmcxcga7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTU3OWQ4ODItZWIxYy0z OTAxLTk3ZmYtN2ViN2FlYWU4MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVfcgBd+4CMQiF6aqtIfjRYVOD0fuDUEzw3gGAcQuSq5153SY9B jWF+IhJj02Qobiq80sfSHhU/yTwbTB9dPchw4OIyUxyPWMDDHkzXGlUF2Qi6oFBL up5TUY/RUaWfR9cQadGTQXTfz6asrqdTDHAg6SXi0ri18ZfWExm72Z5rlfVA2GRL AEreqg/DVGvJXYrHKrREEUg5qPVcUfvypLKnxgVd7djAVZRwJNAN26WGfnmxyC1v R27P7FFx8MHCP6VUcpLWcOmDIqtZnXHc7sl4oKk8TO6vX1LXmRf4kCQqAN9cjcc2 kzyYadkTpTBXAUeigxvc3m+YtPsPEyk9/CE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:34 2026 by rpki-client