$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa File: ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa (raw, json) Hash identifier: dd/ahfFR7SWPLWudyCEAFqQWhvpzGIEa4OR0DZBIGow= Subject key identifier: C8:C5:39:B3:0F:F1:73:16:AC:C6:F9:C6:F8:B3:10:72:86:A8:5B:25 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF8E55A3E795D74C9F9B00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:8e:55:a3:e7:95:d7:4c:9f:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0cf3e03f-0891-4e70-ab17-b8450e957331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:3d:99:d2:75:a2:5f:c8:18:6a:a7:13:a7: 20:6d:f6:98:7b:75:55:54:70:92:ea:c9:99:6c:e2: 92:93:8f:c7:f5:e9:81:ad:53:60:ff:08:75:26:81: aa:82:fa:8f:e7:4e:99:1e:0e:9e:b1:05:a1:2b:cb: 04:69:08:69:73:a2:df:77:23:49:22:26:9d:ce:40: 87:b8:38:d2:97:36:8c:6e:b4:7c:bd:d0:4a:d0:29: 55:20:e3:12:2d:33:1b:10:f8:a9:dc:b6:01:c5:4f: 61:f3:d0:c5:c1:d1:59:2c:25:1c:d9:cc:39:76:24: b5:45:ef:63:4a:21:f0:75:9b:64:cd:18:27:30:29: 0f:91:c1:b3:f8:88:91:80:7f:c0:db:3f:d0:b0:c7: e2:20:a2:29:79:49:54:97:ce:3e:43:93:9e:80:13: b7:cb:3f:1d:24:c5:4d:9d:6d:55:91:b4:b5:4f:b1: 58:04:18:3d:b0:da:9a:4e:33:34:57:87:dd:0f:16: 74:26:cb:3a:3b:b6:e3:40:37:73:8f:f4:9c:64:0e: c5:f1:1b:07:04:e6:51:74:38:5f:a8:68:f5:66:bc: 6e:99:e9:a9:9c:97:7b:92:0b:f1:ed:8e:06:45:df: d2:53:d9:ba:a0:80:04:f8:5c:f1:22:34:f1:08:51: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C5:39:B3:0F:F1:73:16:AC:C6:F9:C6:F8:B3:10:72:86:A8:5B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:2d:48:55:67:58:c6:ef:a1:ba:c7:be:ee:5e:e4:7d:dd:26: 5e:e2:fd:75:ab:43:5c:e2:5d:9d:13:74:3f:f5:95:49:da:95: 2a:44:c1:90:45:e8:f2:d6:b7:64:f2:07:2e:d3:6a:7f:7e:9a: 0a:fa:7a:ef:17:c0:03:67:22:19:fc:f9:5c:a3:b1:2e:c3:a3: 97:d8:e8:f9:6c:b7:66:6a:a1:b2:e0:35:78:e3:d9:4b:e6:69: 87:ab:4a:0d:fe:9e:50:5f:50:dd:04:29:d8:5b:68:74:af:78: 22:7f:51:84:44:8d:01:65:ca:2b:85:23:5a:a7:a3:a9:d2:4b: 23:f2:6a:49:4c:7a:95:d5:89:4b:ec:07:0b:5c:d7:21:bf:ab: 89:4c:c0:d9:96:63:20:ba:6e:15:45:39:09:17:23:f2:3e:ee: e4:70:d8:9c:11:0b:f2:ed:20:30:28:ae:e8:99:ec:cd:0c:6d: ba:03:c1:86:72:1e:62:b7:05:27:af:1e:d4:dc:1f:bd:08:36: a8:f6:f7:55:ad:52:34:fc:f0:dc:c9:f0:dd:92:e3:14:9a:28: 32:20:d9:b2:75:f5:df:a2:1d:88:0b:fa:c0:85:c7:cc:05:35: 51:00:78:bf:f1:f2:d6:e9:f8:eb:63:24:3e:88:4a:d0:9d:e6: eb:39:6c:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k345Vo+eV10yfmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGNmM2UwM2YtMDg5MS00ZTcwLWFiMTctYjg0NTBlOTU3MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdA9mdJ1ol/IGGqnE6cgbfaYe3VVVHCS6smZ bOKSk4/H9emBrVNg/wh1JoGqgvqP506ZHg6esQWhK8sEaQhpc6LfdyNJIiadzkCH uDjSlzaMbrR8vdBK0ClVIOMSLTMbEPip3LYBxU9h89DFwdFZLCUc2cw5diS1Re9j SiHwdZtkzRgnMCkPkcGz+IiRgH/A2z/QsMfiIKIpeUlUl84+Q5OegBO3yz8dJMVN nW1VkbS1T7FYBBg9sNqaTjM0V4fdDxZ0Jss6O7bjQDdzj/ScZA7F8RsHBOZRdDhf qGj1ZrxumempnJd7kgvx7Y4GRd/SU9m6oIAE+FzxIjTxCFFh6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMjFObMP8XMWrMb5xvizEHKGqFslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWIyNjc3ZWMtZDE3Zi0z YzVhLWI3Y2ItMGI5MmZlYWY5YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACwtSFVnWMbvobrHvu5e5H3dJl7i/XWrQ1ziXZ0TdD/1lUnalSpE wZBF6PLWt2TyBy7Tan9+mgr6eu8XwANnIhn8+VyjsS7Do5fY6Plst2ZqobLgNXjj 2UvmaYerSg3+nlBfUN0EKdhbaHSveCJ/UYREjQFlyiuFI1qno6nSSyPyaklMepXV iUvsBwtc1yG/q4lMwNmWYyC6bhVFOQkXI/I+7uRw2JwRC/LtIDAoruiZ7M0MbboD wYZyHmK3BSevHtTcH70INqj291WtUjT88NzJ8N2S4xSaKDIg2bJ19d+iHYgL+sCF x8wFNVEAeL/x8tbp+OtjJD6IStCd5us5bEA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:40 2026 by rpki-client