$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa File: 9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa (raw, json) Hash identifier: DpumZy2W9tlG6tSsyCH3s2r2pkGiC+lhY4WHd9psM4Y= Subject key identifier: 48:30:2D:CE:56:77:13:B3:06:CD:1D:AB:5D:AF:38:C5:A3:92:96:A8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF680789B691A4D262C220 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:68:07:89:b6:91:a4:d2:62:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=54540b1a-a30e-4f0d-a400-fdd514974142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:ef:ca:60:46:15:5e:f1:b8:a0:2e:7c:e1: f5:8b:94:bb:31:81:46:30:67:56:b5:7f:ee:5a:ee: fa:d6:c6:67:51:84:6e:b4:20:22:67:76:70:99:ce: a2:0a:1d:68:80:65:5d:5f:7f:71:aa:b5:3f:dd:de: 9b:99:cc:1f:f6:26:eb:b6:4e:1b:5d:64:33:5d:6c: a3:22:a0:65:bb:99:08:01:20:0a:b7:eb:d4:fe:f6: 97:82:7a:82:b9:bb:08:a7:a6:9f:5e:18:02:b5:01: 7a:39:c3:a1:09:5f:7f:e6:b5:bb:20:cf:19:dd:16: 73:f2:92:dd:a7:45:20:ec:19:1d:cc:74:fd:1d:60: c4:d0:cf:9c:f9:bf:4f:14:6c:b2:ea:14:cf:bc:05: 3e:71:68:76:cb:4a:87:14:b2:a0:89:fe:34:e3:1e: a1:77:84:1a:8c:19:3b:9f:cd:5f:7a:62:e7:57:67: 41:66:c9:fe:c8:9e:c3:6d:df:ac:0e:ff:af:9d:cf: 14:71:1e:76:1c:61:11:70:5c:fb:6e:de:f4:08:d0: 34:3f:56:ab:bc:d7:77:26:ca:9a:03:ed:16:5f:45: 01:82:cf:bf:23:7f:b6:fb:2f:68:b8:fe:6e:8d:2b: 9b:d7:2d:62:94:de:f9:41:42:d3:4a:6a:76:4c:56: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:30:2D:CE:56:77:13:B3:06:CD:1D:AB:5D:AF:38:C5:A3:92:96:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:de::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:b5:85:5f:8a:95:7f:57:41:5c:f9:1f:75:3e:50:bf:b8:1b: a2:7b:0f:1b:dd:0e:6f:c4:93:cf:aa:e0:a7:06:f9:a1:f1:df: f9:78:71:5b:6b:22:8a:c8:c9:2a:a9:15:f9:95:b7:4a:8e:96: c1:94:ae:76:33:e4:3b:e1:85:d1:41:d1:99:9f:cb:5c:66:a9: 0f:a3:50:93:45:f8:eb:90:f3:7d:8e:eb:90:ac:94:ee:b9:2f: a2:56:9e:61:54:42:89:65:9b:d6:d0:9c:15:ba:1e:5e:aa:e3: 27:b7:fc:5f:73:d1:e4:f6:06:5c:d3:5c:96:ce:b8:84:c2:ea: 4e:d9:19:f7:e8:ae:6b:59:81:dc:7b:78:04:3f:b0:c5:20:be: e6:9a:2e:5a:b0:c0:21:24:2d:2d:94:0d:18:9f:0a:cd:30:e5: ac:9d:8e:69:13:cb:53:f6:31:19:a7:a8:bd:d6:f9:2e:3a:8f: 38:a1:88:04:ca:7d:f9:a8:c9:64:c0:86:f8:0b:4d:85:6d:32: 28:24:c6:84:20:4d:ee:53:7e:95:f2:4f:16:17:6e:cf:57:c7: ac:8f:b5:e8:27:0f:05:9c:98:a5:26:66:c2:6b:e2:76:cf:27: 99:ff:44:83:11:a4:6e:28:3c:ff:7e:66:8c:77:43:52:d0:96: fd:a5:66:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k32gHibaRpNJiwiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTQ1NDBiMWEtYTMwZS00ZjBkLWE0MDAtZmRkNTE0OTc0MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXLvymBGFV7xuKAufOH1i5S7MYFGMGdWtX/u Wu761sZnUYRutCAiZ3Zwmc6iCh1ogGVdX39xqrU/3d6bmcwf9ibrtk4bXWQzXWyj IqBlu5kIASAKt+vU/vaXgnqCubsIp6afXhgCtQF6OcOhCV9/5rW7IM8Z3RZz8pLd p0Ug7BkdzHT9HWDE0M+c+b9PFGyy6hTPvAU+cWh2y0qHFLKgif404x6hd4QajBk7 n81femLnV2dBZsn+yJ7Dbd+sDv+vnc8UcR52HGERcFz7bt70CNA0P1arvNd3Jsqa A+0WX0UBgs+/I3+2+y9ouP5ujSub1y1ilN75QULTSmp2TFYz9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEgwLc5WdxOzBs0dq12vOMWjkpaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWRmMTlkZWUtMDE1MC0z M2M1LWI3ZjAtY2NiNGE2Y2I4ZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK21hV+KlX9XQVz5H3U+UL+4G6J7DxvdDm/Ek8+q4KcG+aHx3/l4 cVtrIorIySqpFfmVt0qOlsGUrnYz5DvhhdFB0Zmfy1xmqQ+jUJNF+OuQ832O65Cs lO65L6JWnmFUQollm9bQnBW6Hl6q4ye3/F9z0eT2BlzTXJbOuITC6k7ZGfformtZ gdx7eAQ/sMUgvuaaLlqwwCEkLS2UDRifCs0w5aydjmkTy1P2MRmnqL3W+S46jzih iATKffmoyWTAhvgLTYVtMigkxoQgTe5TfpXyTxYXbs9Xx6yPtegnDwWcmKUmZsJr 4nbPJ5n/RIMRpG4oPP9+Zox3Q1LQlv2lZt4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:50 2026 by rpki-client