$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa File: 95be4890-2931-3ddc-9628-15449cfd5f27.roa (raw, json) Hash identifier: eGCSPHgcSnGrPMZUtsmJq8+g+v6LnHEmHsQCzZNBGk8= Subject key identifier: 87:9E:B1:64:45:C8:9F:50:D3:E4:30:4E:F1:E6:7D:45:78:4B:E4:0A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E12FBC3D291535FAB80A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2f:bc:3d:29:15:35:fa:b8:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d8d4b5b6-0371-4ac3-b7b4-2c5a3778b0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6d:9e:dd:4d:c2:e7:63:70:8d:35:06:60:08: be:bb:20:2b:a2:5d:4f:4b:c0:d4:1d:20:af:11:f5: 90:47:7a:bd:af:f9:ef:96:b2:23:0d:69:fb:c1:dd: 77:f1:22:56:1b:99:ed:aa:a1:32:8e:f2:18:0d:13: 44:d1:bc:e3:6c:a0:99:52:25:a4:1c:58:79:a0:d3: 30:74:58:42:74:2f:fe:75:27:f5:62:e5:2f:cc:ff: fb:91:24:d6:18:d4:6f:f3:f9:29:8d:70:46:0c:c0: 49:a8:24:36:08:3e:5f:9b:fa:e5:82:f7:91:d3:10: 07:96:93:f7:33:fb:7a:50:80:9f:b8:31:ab:8d:86: 8b:39:a3:fd:55:a4:84:d3:63:f8:1d:f7:70:23:08: bc:57:5f:28:ca:88:5c:ed:7b:22:b3:d6:ac:74:10: 90:89:80:0a:ac:55:cd:b2:24:d9:41:b1:2a:4c:1b: c3:b4:c0:b5:3b:92:14:50:2b:62:0b:b4:b5:2a:94: 6f:e2:ee:de:79:9b:4b:b6:c2:04:75:71:50:47:2b: 2f:39:44:f8:85:94:0a:d6:36:2d:57:1b:d7:03:53: 68:c4:9f:73:5c:05:e9:c0:25:d3:f9:ad:f4:40:0d: 62:a8:db:99:d1:76:3b:d5:72:6f:7b:40:1e:99:52: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9E:B1:64:45:C8:9F:50:D3:E4:30:4E:F1:E6:7D:45:78:4B:E4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:31:3e:a7:3e:83:d4:b1:71:5f:74:39:0f:03:8c:89:33:f3: 36:37:c2:66:d9:71:48:24:56:f3:20:7f:af:2f:55:e0:b0:42: d0:6c:6a:05:47:3e:7c:c9:64:99:91:d6:ac:51:c0:31:41:4c: 22:4e:ac:8d:93:a2:cc:c5:77:83:b6:06:68:5c:cb:d1:59:f3: f1:bc:e6:16:19:f5:0e:b7:2c:f3:e0:60:51:61:1c:a3:22:32: fe:58:ab:42:ae:4c:5f:11:91:3b:ef:0d:ab:e1:20:e5:89:aa: 2a:98:7b:31:aa:0f:a6:d9:68:7e:b1:d8:fb:07:78:45:92:cb: 66:86:17:e6:70:47:31:77:de:07:3e:b1:68:8e:00:4d:79:21: 01:d3:0f:7b:63:b7:06:33:a1:f4:00:13:3a:f7:4f:0e:21:89: 1d:83:68:e6:1b:ad:fc:64:91:a9:9d:9c:3d:24:06:a6:c6:ec: e2:03:f1:00:93:c4:43:c0:34:64:4e:85:d9:4d:9e:94:a1:0b: 6b:74:2b:c1:17:84:8e:b5:da:67:04:f1:d7:37:95:75:5a:3c: 92:69:e3:c7:ce:ce:d6:43:aa:bd:91:06:1d:3a:aa:ac:96:97: 4a:b3:5f:73:73:11:1c:7b:e8:18:f0:04:b2:09:11:44:1d:38: bb:9b:84:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4S+8PSkVNfq4CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDhkNGI1YjYtMDM3MS00YWMzLWI3YjQtMmM1YTM3NzhiMGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG2e3U3C52NwjTUGYAi+uyArol1PS8DUHSCv EfWQR3q9r/nvlrIjDWn7wd138SJWG5ntqqEyjvIYDRNE0bzjbKCZUiWkHFh5oNMw dFhCdC/+dSf1YuUvzP/7kSTWGNRv8/kpjXBGDMBJqCQ2CD5fm/rlgveR0xAHlpP3 M/t6UICfuDGrjYaLOaP9VaSE02P4HfdwIwi8V18oyohc7Xsis9asdBCQiYAKrFXN siTZQbEqTBvDtMC1O5IUUCtiC7S1KpRv4u7eeZtLtsIEdXFQRysvOUT4hZQK1jYt VxvXA1NoxJ9zXAXpwCXT+a30QA1iqNuZ0XY71XJve0AemVJPAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIeesWRFyJ9Q0+QwTvHmfUV4S+QKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTViZTQ4OTAtMjkzMS0z ZGRjLTk2MjgtMTU0NDljZmQ1ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGgxPqc+g9SxcV90OQ8DjIkz8zY3wmbZcUgkVvMgf68vVeCwQtBs agVHPnzJZJmR1qxRwDFBTCJOrI2ToszFd4O2Bmhcy9FZ8/G85hYZ9Q63LPPgYFFh HKMiMv5Yq0KuTF8RkTvvDavhIOWJqiqYezGqD6bZaH6x2PsHeEWSy2aGF+ZwRzF3 3gc+sWiOAE15IQHTD3tjtwYzofQAEzr3Tw4hiR2DaOYbrfxkkamdnD0kBqbG7OID 8QCTxEPANGROhdlNnpShC2t0K8EXhI612mcE8dc3lXVaPJJp48fOztZDqr2RBh06 qqyWl0qzX3NzERx76BjwBLIJEUQdOLubhDk= -----END CERTIFICATE-----Generated at Thu Mar 26 13:30:39 2026 by rpki-client