$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa File: a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa (raw, json) Hash identifier: 8RSOVQQ2Av83AqBy3QcBUhcUtEhoFmSSaeL4Btjo+TA= Subject key identifier: 43:4F:B3:2B:6B:08:66:0F:23:D1:71:5D:B5:70:8F:FF:9A:D7:1E:86 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF90425EF1C915A8FC7DE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:90:42:5e:f1:c9:15:a8:fc:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c242ca3c-8625-4780-bf0f-4ed093d4acb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ab:b4:57:cc:54:df:1d:50:54:48:fc:c2:b2: bd:a0:cc:7c:99:69:81:58:a6:26:3a:6d:89:6b:09: 32:da:7c:21:ce:bc:67:1e:99:67:e6:70:3a:e8:55: 42:97:78:91:3c:05:75:5a:80:93:ff:a3:23:4a:03: ed:18:52:19:2b:9f:59:10:42:a2:2b:fa:cd:3b:84: 66:9b:d1:01:42:e5:ac:c9:e3:97:d0:cc:e5:91:cb: e0:43:8a:32:63:1d:69:ed:ca:f7:6e:36:86:a7:21: 26:67:67:5b:87:f3:4a:08:66:61:c1:17:6a:aa:34: e9:4a:ac:55:8c:8e:e3:67:a1:ac:56:94:76:55:b5: 43:46:af:5f:8a:a6:6c:c1:2c:14:77:99:f8:b9:ed: 8c:7b:9c:48:29:e0:18:76:b2:9d:5a:e3:86:87:17: 15:82:47:47:28:12:88:00:c3:89:4f:cb:b6:53:7f: cf:7c:02:e1:0e:15:d0:94:3c:ab:c8:d3:00:96:fd: 72:4f:e4:40:30:32:ae:ff:69:cb:30:b3:76:59:0e: 7c:17:a7:90:2e:de:f6:58:8d:6f:62:b2:09:82:6a: 2b:13:6f:d2:4a:64:d5:f9:51:8c:92:15:5c:d5:d8: 89:9a:2f:4f:ab:29:99:80:a2:af:86:be:ac:24:03: 7a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4F:B3:2B:6B:08:66:0F:23:D1:71:5D:B5:70:8F:FF:9A:D7:1E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:fb:be:18:9b:03:3e:d3:d4:06:c4:91:79:df:aa:b8:78:f4: e6:7a:c5:be:42:65:be:e1:0d:66:31:c9:f7:0d:89:eb:31:43: aa:5d:83:47:ee:48:1e:a0:fb:0f:8f:89:77:cf:b5:eb:58:b0: 4c:20:d1:56:ed:0b:8d:79:2a:d3:49:38:0d:a0:5e:c7:61:c3: b4:25:19:65:ac:0e:74:21:0c:88:a3:71:60:15:bd:6d:96:c6: c4:b3:04:08:8d:bd:54:91:26:3f:3e:29:12:e9:43:57:02:94: 43:4c:50:a7:07:be:74:c0:59:24:2c:3b:c2:5e:51:66:7c:84: ac:13:53:fa:2c:16:14:3b:36:bf:71:90:f8:a8:d9:a1:32:9a: d4:d1:5e:29:30:71:db:6d:d5:3b:f9:69:9e:64:9d:41:c6:86: d3:e2:e1:d3:eb:39:f3:b8:f9:d0:a6:e1:46:2d:45:f9:32:d1: 23:fb:ee:ce:a8:32:6e:0c:42:a2:39:da:06:f8:8d:cc:d2:6a: 45:41:c0:05:dd:8e:b0:78:74:69:1f:59:ef:c8:f8:82:f2:b2: fa:21:e3:a3:8b:2a:85:0f:0e:e3:8c:9b:57:b0:c1:02:7a:8c: de:67:bd:4f:ac:73:52:a4:a8:ba:78:b6:cd:9c:d8:7a:2a:8e: 3e:3c:dd:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k35BCXvHJFaj8feAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzI0MmNhM2MtODYyNS00NzgwLWJmMGYtNGVkMDkzZDRhY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6u0V8xU3x1QVEj8wrK9oMx8mWmBWKYmOm2J awky2nwhzrxnHpln5nA66FVCl3iRPAV1WoCT/6MjSgPtGFIZK59ZEEKiK/rNO4Rm m9EBQuWsyeOX0MzlkcvgQ4oyYx1p7cr3bjaGpyEmZ2dbh/NKCGZhwRdqqjTpSqxV jI7jZ6GsVpR2VbVDRq9fiqZswSwUd5n4ue2Me5xIKeAYdrKdWuOGhxcVgkdHKBKI AMOJT8u2U3/PfALhDhXQlDyryNMAlv1yT+RAMDKu/2nLMLN2WQ58F6eQLt72WI1v YrIJgmorE2/SSmTV+VGMkhVc1diJmi9PqymZgKKvhr6sJAN6WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENPsytrCGYPI9FxXbVwj/+a1x6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTBjYzg0MWUtYWE2ZS0z NDMyLWFmMjYtNjE2MjFmOGFiM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMP7vhibAz7T1AbEkXnfqrh49OZ6xb5CZb7hDWYxyfcNiesxQ6pd g0fuSB6g+w+PiXfPtetYsEwg0VbtC415KtNJOA2gXsdhw7QlGWWsDnQhDIijcWAV vW2WxsSzBAiNvVSRJj8+KRLpQ1cClENMUKcHvnTAWSQsO8JeUWZ8hKwTU/osFhQ7 Nr9xkPio2aEymtTRXikwcdtt1Tv5aZ5knUHGhtPi4dPrOfO4+dCm4UYtRfky0SP7 7s6oMm4MQqI52gb4jczSakVBwAXdjrB4dGkfWe/I+ILysvoh46OLKoUPDuOMm1ew wQJ6jN5nvU+sc1KkqLp4ts2c2Hoqjj483eg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:19:50 2026 by rpki-client