$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a3d25f6e-e6bd-31bb-981f-4b471302626b.roa File: a3d25f6e-e6bd-31bb-981f-4b471302626b.roa (raw, json) Hash identifier: Y/Rlxjz/tItDLqpQaJWbp9aLwVBU2i+V+TEq7OLPvIc= Subject key identifier: C0:4B:82:6B:C6:EB:CA:85:F9:F1:0C:5E:B3:04:BA:C6:39:D5:A3:2E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF74D48C8E87C92EC54380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a3d25f6e-e6bd-31bb-981f-4b471302626b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:74:d4:8c:8e:87:c9:2e:c5:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=96cbb9c2-3226-4809-812b-b6b2718fd18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:72:58:43:15:28:f8:af:2d:31:c7:37:59: 3d:52:8d:99:ff:c9:5b:a0:4c:94:d4:53:31:f8:49: a8:ef:38:00:2e:d6:7e:fd:33:7c:f9:9d:86:65:41: 5a:01:c5:ee:8f:28:6f:65:f6:2e:c3:7e:03:69:61: 0b:ba:29:b6:56:16:d7:6d:47:fc:bd:de:f7:6a:f1: 5e:82:1b:cf:c1:05:c4:80:23:c0:7c:de:86:c1:c2: c3:b9:19:71:e5:5d:45:e5:be:c4:15:38:56:19:33: 08:d0:79:3d:aa:3f:0e:9a:12:c9:5e:95:ce:29:ce: 12:85:e4:a7:29:5e:2b:6f:02:6d:97:3c:b6:42:06: da:d7:3e:9a:4f:4d:8c:75:96:ea:34:8d:63:86:79: 45:54:c2:34:34:9a:87:a3:7e:f4:aa:1d:4c:60:bd: 96:80:7e:9f:5e:2e:08:55:26:87:28:38:d5:90:0e: 5a:0a:ee:4a:91:23:a2:35:67:5b:b3:85:65:e7:26: cc:4a:e5:e1:5b:b7:3d:78:e3:6d:5d:6f:61:6c:f0: 7e:8f:1c:b8:a7:cc:1d:79:a0:13:66:f4:c0:07:cb: b6:1d:07:04:fa:aa:55:46:09:0d:be:77:7c:9b:b8: 7e:4d:df:fb:49:2f:a2:cd:18:41:8e:aa:fa:3a:6f: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4B:82:6B:C6:EB:CA:85:F9:F1:0C:5E:B3:04:BA:C6:39:D5:A3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a3d25f6e-e6bd-31bb-981f-4b471302626b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:fb:08:61:5c:cb:9f:db:f3:4f:93:eb:f0:80:39:f2:1d:4e: d3:ea:70:45:ca:38:a5:8d:f4:cc:3c:f2:db:83:a1:2a:eb:6b: ca:4d:70:02:d1:5c:3a:39:97:a7:1e:a2:73:8d:9d:07:6b:07: 9c:f7:2e:4f:ff:d4:05:e3:58:dc:b9:8f:bb:cd:8d:a6:75:09: f7:4b:5f:d4:a4:f6:73:69:5e:90:e4:d9:2e:61:92:96:03:2d: 4d:2e:7a:7f:17:11:ec:bf:3b:b8:ef:9e:30:22:ca:e3:c9:fd: 15:b3:b2:76:20:db:37:03:01:9d:43:2c:57:88:b1:79:e0:cd: bb:a4:b7:d2:38:42:15:be:d0:99:df:fc:76:79:4a:b4:7e:b8: 9c:af:3b:3c:4d:f3:03:35:74:45:c6:52:6d:18:16:58:c3:a9: 62:90:10:8e:00:7c:df:c9:4a:7e:12:cb:da:43:ca:75:39:f0: 2a:56:cc:67:5b:61:cc:0b:f5:f6:9b:02:21:cd:d2:8a:b7:dd: d2:b4:e3:43:55:7b:72:f4:85:75:1b:ca:ea:df:82:08:b5:f0: c9:a4:0d:95:91:01:90:30:44:aa:51:c2:59:b8:b2:cc:44:5a: 85:a4:05:05:42:57:93:d5:e5:08:de:9f:b2:13:7f:ad:0b:08: 83:5a:04:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k33TUjI6HyS7FQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTZjYmI5YzItMzIyNi00ODA5LTgxMmItYjZiMjcxOGZkMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmByWEMVKPivLTHHN1k9Uo2Z/8lboEyU1FMx +Emo7zgALtZ+/TN8+Z2GZUFaAcXujyhvZfYuw34DaWELuim2VhbXbUf8vd73avFe ghvPwQXEgCPAfN6GwcLDuRlx5V1F5b7EFThWGTMI0Hk9qj8OmhLJXpXOKc4SheSn KV4rbwJtlzy2Qgba1z6aT02MdZbqNI1jhnlFVMI0NJqHo370qh1MYL2WgH6fXi4I VSaHKDjVkA5aCu5KkSOiNWdbs4Vl5ybMSuXhW7c9eONtXW9hbPB+jxy4p8wdeaAT ZvTAB8u2HQcE+qpVRgkNvnd8m7h+Td/7SS+izRhBjqr6Om+TBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMBLgmvG68qF+fEMXrMEusY51aMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTNkMjVmNmUtZTZiZC0z MWJiLTk4MWYtNGI0NzEzMDI2MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHH7CGFcy5/b80+T6/CAOfIdTtPqcEXKOKWN9Mw88tuDoSrra8pN cALRXDo5l6ceonONnQdrB5z3Lk//1AXjWNy5j7vNjaZ1CfdLX9Sk9nNpXpDk2S5h kpYDLU0uen8XEey/O7jvnjAiyuPJ/RWzsnYg2zcDAZ1DLFeIsXngzbukt9I4QhW+ 0Jnf/HZ5SrR+uJyvOzxN8wM1dEXGUm0YFljDqWKQEI4AfN/JSn4Sy9pDynU58CpW zGdbYcwL9fabAiHN0oq33dK040NVe3L0hXUbyurfggi18MmkDZWRAZAwRKpRwlm4 ssxEWoWkBQVCV5PV5Qjen7ITf60LCINaBKo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:17 2026 by rpki-client