$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a323c9f9-d1ee-3d04-a9f5-71e0431c5967.roa File: a323c9f9-d1ee-3d04-a9f5-71e0431c5967.roa (raw, json) Hash identifier: VN7z1GZEMu1XNnJfCG2r/7wbGRris74g7G0k/40TO7E= Subject key identifier: 72:E4:D2:2A:B3:87:A3:A5:1C:34:48:7F:9F:6E:7D:DD:D0:06:00:1D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A5FEB2E23D10CD3BB8780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a323c9f9-d1ee-3d04-a9f5-71e0431c5967.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 2001:500:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:5f:eb:2e:23:d1:0c:d3:bb:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=8f3b444c-e5cb-4b7f-a12f-1864e6b2cfef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d0:85:87:a5:24:5c:8f:bb:2f:c7:5c:dc:a2: 45:1c:30:4b:e2:c6:5a:f0:cc:34:cd:c9:0b:31:f6: 67:40:e9:fb:39:70:05:f4:ce:45:b9:6f:6c:da:6e: 15:86:a5:17:d4:90:3b:2c:b6:f0:ee:ae:a5:fd:f1: cb:35:eb:be:af:3b:a5:e1:8a:9e:27:2a:06:64:09: 2b:d1:5b:99:38:a3:76:fe:ce:19:72:40:03:76:8b: 34:fa:9e:9b:02:7c:84:ce:01:14:8e:8e:37:36:c7: a1:9b:ae:a6:8a:07:99:7d:08:b4:6a:ca:7b:1a:1b: 02:f7:b7:80:b3:91:41:28:2d:cb:48:25:c6:4b:8a: 15:4a:15:e9:5c:6d:04:aa:90:b2:c4:8a:29:ac:e8: 5f:29:86:c1:57:12:2e:62:da:ef:d8:ea:9a:89:5e: 0a:59:c8:ce:b6:e6:92:77:ad:e5:9a:02:2f:0e:37: 68:bf:95:e8:75:a9:84:1c:09:d4:37:cf:7d:e8:5e: e9:2c:a0:d5:d4:57:e3:db:ff:8d:db:17:5c:6f:2c: 35:42:b6:07:8e:ac:87:2d:0e:17:4e:41:85:c0:d0: ab:00:7b:d1:00:73:8f:bc:2e:45:48:cb:33:53:bb: c5:2b:c8:92:d0:02:e7:7b:0f:b1:f9:64:fe:fb:9a: 8e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E4:D2:2A:B3:87:A3:A5:1C:34:48:7F:9F:6E:7D:DD:D0:06:00:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a323c9f9-d1ee-3d04-a9f5-71e0431c5967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:48::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:84:f8:08:cd:2b:06:78:13:ce:27:a5:4d:29:f4:4b:04:af: ef:e2:2a:d7:9c:58:f7:3a:fb:4e:16:49:a4:ae:39:2e:ab:f8: ce:87:d7:58:94:38:f2:6e:85:df:ef:4c:cd:ba:b2:fa:7a:27: 1f:e6:24:11:42:5a:f6:a4:91:e8:f8:8e:bd:5a:0c:bf:0b:28: ee:17:34:da:ec:d7:75:7a:1b:d8:05:c7:36:75:b7:d3:3d:d3: 69:5b:4f:87:de:4b:b0:20:7b:4c:9f:00:1d:bf:8c:8f:e0:98: 19:d4:37:a0:30:47:d6:8f:64:b7:01:a4:2a:9a:f4:41:5c:02: cf:96:9d:98:d4:b5:73:3f:38:76:bb:d4:7e:41:fd:8e:2a:7e: 3c:b1:24:68:53:b9:41:00:c5:fb:60:65:90:56:63:84:c3:0c: ed:d4:21:30:22:b2:df:6b:7f:43:76:79:29:33:14:ab:b0:7e: 4a:51:ed:d6:9e:8a:d6:c3:cd:ef:b9:8b:a9:32:7e:e9:f5:08: 62:f5:69:d3:b5:8a:d8:8b:5d:81:3d:2c:d8:61:f9:2a:9b:aa: 11:36:63:2b:ef:a9:92:ba:46:31:34:0a:2b:8f:5a:51:56:9d: a7:dc:80:f6:88:9a:38:ce:e0:dc:e9:ab:13:b0:65:ab:0b:21: 31:08:6b:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jel/rLiPRDNO7h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OGYzYjQ0NGMtZTVjYi00YjdmLWExMmYtMTg2NGU2YjJjZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtCFh6UkXI+7L8dc3KJFHDBL4sZa8Mw0zckL MfZnQOn7OXAF9M5FuW9s2m4VhqUX1JA7LLbw7q6l/fHLNeu+rzul4YqeJyoGZAkr 0VuZOKN2/s4ZckADdos0+p6bAnyEzgEUjo43Nsehm66migeZfQi0asp7GhsC97eA s5FBKC3LSCXGS4oVShXpXG0EqpCyxIoprOhfKYbBVxIuYtrv2OqaiV4KWcjOtuaS d63lmgIvDjdov5XodamEHAnUN8996F7pLKDV1Ffj2/+N2xdcbyw1QrYHjqyHLQ4X TkGFwNCrAHvRAHOPvC5FSMszU7vFK8iS0ALnew+x+WT++5qOLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLk0iqzh6OlHDRIf59ufd3QBgAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTMyM2M5ZjktZDFlZS0z ZDA0LWE5ZjUtNzFlMDQzMWM1OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALyE+AjNKwZ4E84npU0p9EsEr+/iKtecWPc6+04WSaSuOS6r+M6H 11iUOPJuhd/vTM26svp6Jx/mJBFCWvakkej4jr1aDL8LKO4XNNrs13V6G9gFxzZ1 t9M902lbT4feS7Age0yfAB2/jI/gmBnUN6AwR9aPZLcBpCqa9EFcAs+WnZjUtXM/ OHa71H5B/Y4qfjyxJGhTuUEAxftgZZBWY4TDDO3UITAist9rf0N2eSkzFKuwfkpR 7daeitbDze+5i6kyfun1CGL1adO1itiLXYE9LNhh+SqbqhE2YyvvqZK6RjE0CiuP WlFWnafcgPaImjjO4NzpqxOwZasLITEIa9M= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:35 2026 by rpki-client