$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa File: a5e600de-f326-3392-a8c2-4489902db132.roa (raw, json) Hash identifier: Qd537c4x6nQkyTsaowpwLRVZSYLBrZm7rjF6io7xEjs= Subject key identifier: 70:D7:1C:9F:B8:58:A1:5A:0E:06:0B:8B:0D:2B:A2:5E:10:EB:C0:BA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A714CC3433024510F0E00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 2001:500:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:71:4c:c3:43:30:24:51:0f:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=069802b5-bf2c-472c-a96a-e61140cffdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:84:bc:86:a0:35:e9:0a:89:06:f1:35:42: 9c:e0:fa:7c:3b:0d:9b:dd:c9:3d:cb:66:dd:ed:98: df:ff:a5:e7:b3:7c:63:27:6a:00:aa:64:8a:a3:27: a1:80:40:bb:ba:e1:d1:b0:37:f3:fe:07:c4:43:c5: 8d:e8:b5:33:e5:30:5c:14:6f:e1:20:4a:fc:4f:4d: 87:de:20:f7:cb:de:12:39:6a:d3:0d:8e:db:b1:e9: df:a5:b7:e3:59:2c:dc:b3:0a:63:d8:76:13:e4:51: 10:37:4d:e3:d8:f0:a7:ad:fb:32:51:07:1b:11:d3: d3:28:11:4b:eb:cd:a8:3a:87:7c:f1:a2:8a:e1:d5: 91:36:cb:16:17:02:74:d7:d0:f2:b5:1e:98:13:07: e5:5e:b8:85:81:b4:ef:f6:d3:1c:3d:ef:41:66:4d: 43:b2:c5:2d:45:7a:8d:37:ab:8f:66:e8:b8:3f:e3: 82:88:f1:53:2d:9f:83:e8:9f:93:f1:df:4b:31:64: 82:83:89:74:66:97:09:8c:15:85:a1:f4:1c:2e:eb: 2d:97:68:bb:0f:87:bc:de:b8:62:34:28:30:77:24: 76:57:a3:a9:6c:86:33:ea:92:2f:d5:0b:fb:8d:a7: 33:3b:7d:f3:bf:e0:1d:a8:f7:df:d6:28:f7:d5:61: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D7:1C:9F:B8:58:A1:5A:0E:06:0B:8B:0D:2B:A2:5E:10:EB:C0:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:67:ae:a3:0c:57:ba:62:6a:42:50:3f:2d:d8:dd:76:c4:f5: c6:8c:13:e4:50:e2:12:c9:78:50:b8:51:e6:14:69:70:cc:7a: c9:0c:ec:4c:5c:b6:37:a8:8c:1c:4b:e6:3c:00:c5:89:91:d0: c5:13:ce:a0:f0:0c:61:b1:41:6c:71:19:45:e0:3c:7c:a8:5b: 0a:b2:fd:bb:85:74:79:aa:80:e7:66:4e:aa:84:1f:50:45:b4: 84:45:9a:cf:60:df:30:da:b6:dc:a6:12:74:df:fc:dd:a4:73: c0:1f:23:af:62:c5:8e:e9:e3:44:1e:35:7b:88:09:9e:5a:61: f2:1d:ce:29:11:6f:ce:10:30:a8:52:8c:42:92:18:ab:e4:eb: c4:33:e3:f1:fd:85:ae:b8:8c:89:eb:a3:dc:85:5a:7b:77:54: 7c:b1:c3:b2:26:e1:98:70:52:fc:36:db:cd:d5:d0:0a:03:26: 8b:5b:a4:fb:7b:7f:ad:ef:d5:60:02:3c:94:75:d4:17:06:0b: 22:23:13:a5:2f:ef:9a:0c:1c:8d:f8:49:32:98:e3:c1:45:70: 87:bb:1b:b0:35:74:93:20:c3:e0:1d:1a:de:66:d9:75:74:54: 43:f2:3d:f8:da:3c:7c:c0:93:d2:40:0e:8f:09:d5:44:a4:f8: ec:7c:fa:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jenFMw0MwJFEPDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MDY5ODAyYjUtYmYyYy00NzJjLWE5NmEtZTYxMTQwY2ZmZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKSEvIagNekKiQbxNUKc4Pp8Ow2b3ck9y2bd 7Zjf/6Xns3xjJ2oAqmSKoyehgEC7uuHRsDfz/gfEQ8WN6LUz5TBcFG/hIEr8T02H 3iD3y94SOWrTDY7bsenfpbfjWSzcswpj2HYT5FEQN03j2PCnrfsyUQcbEdPTKBFL 682oOod88aKK4dWRNssWFwJ019DytR6YEwflXriFgbTv9tMcPe9BZk1DssUtRXqN N6uPZui4P+OCiPFTLZ+D6J+T8d9LMWSCg4l0ZpcJjBWFofQcLustl2i7D4e83rhi NCgwdyR2V6OpbIYz6pIv1Qv7jaczO33zv+AdqPff1ij31WFKRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHDXHJ+4WKFaDgYLiw0rol4Q68C6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTVlNjAwZGUtZjMyNi0z MzkyLWE4YzItNDQ4OTkwMmRiMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVnrqMMV7piakJQPy3Y3XbE9caME+RQ4hLJeFC4UeYUaXDMeskM 7ExctjeojBxL5jwAxYmR0MUTzqDwDGGxQWxxGUXgPHyoWwqy/buFdHmqgOdmTqqE H1BFtIRFms9g3zDattymEnTf/N2kc8AfI69ixY7p40QeNXuICZ5aYfIdzikRb84Q MKhSjEKSGKvk68Qz4/H9ha64jInro9yFWnt3VHyxw7Im4ZhwUvw2283V0AoDJotb pPt7f63v1WACPJR11BcGCyIjE6Uv75oMHI34STKY48FFcIe7G7A1dJMgw+AdGt5m 2XV0VEPyPfjaPHzAk9JADo8J1USk+Ox8+pE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:54 2026 by rpki-client