$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b48cfb69-2a8c-3112-a9b5-693eb64d017a.roa File: b48cfb69-2a8c-3112-a9b5-693eb64d017a.roa (raw, json) Hash identifier: viLuhYpXSNcyAJRkHXiQfSJpV/OMeo87swIWtbxg3AM= Subject key identifier: D9:1C:B8:BC:CF:27:FC:A5:8E:61:D8:15:CE:EA:E2:48:6F:41:2C:FC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF9705DCB33E2751D277C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b48cfb69-2a8c-3112-a9b5-693eb64d017a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:97:05:dc:b3:3e:27:51:d2:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f23640a4-283f-4b61-b8ab-3316e6a2c67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5d:b6:73:4f:13:cc:aa:1b:9e:49:a9:d5:04: 9d:f1:5b:a6:e8:91:8d:44:fc:f3:eb:78:1f:0c:09: 0a:02:99:4a:c3:fe:13:f7:ce:ca:7b:09:45:33:dd: 10:4f:0d:22:7c:43:06:b8:38:17:9f:e2:08:75:ca: b6:03:b8:61:8a:26:4e:25:d7:6f:a9:c0:5a:ce:66: d1:d4:92:c3:bc:48:0f:cd:31:27:c6:9a:c4:66:16: 53:91:9b:b3:9f:f4:c1:93:6c:13:ba:62:20:97:ec: 17:1f:ec:35:7c:a0:3e:a8:d9:c9:59:47:66:94:8c: c5:08:7a:7f:63:86:58:7d:3c:40:c4:dc:4c:e2:7b: 35:50:05:81:d1:00:a9:9a:3d:9c:d6:b9:1a:74:39: 05:c6:78:d1:11:da:e4:91:36:28:79:54:f8:89:23: da:b9:1c:08:a1:6e:13:32:3b:9a:71:ad:23:cc:fd: a8:19:57:ab:d7:c0:2e:af:7c:1a:c2:5f:7d:80:d7: 2c:21:97:c2:d6:56:43:64:a5:c8:39:31:8c:f3:f9: dd:60:e8:10:59:e7:eb:de:d5:8a:5a:e1:85:eb:1a: ae:7a:a8:1c:d5:4e:42:b5:a7:6b:1b:2b:f6:c6:53: 4f:6a:63:7b:c2:d2:e8:10:f2:73:e0:b3:66:02:3b: e4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1C:B8:BC:CF:27:FC:A5:8E:61:D8:15:CE:EA:E2:48:6F:41:2C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b48cfb69-2a8c-3112-a9b5-693eb64d017a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ab:65:98:8b:bd:67:b6:42:78:a6:32:78:43:85:36:e1:5b: 26:e4:0b:cb:19:c1:ee:39:10:94:cc:4d:32:cb:22:d4:b8:93: 1e:7d:2e:6f:d9:42:94:7a:c9:5b:c0:09:2d:3d:3c:f7:df:4b: 3d:a9:0b:d5:0f:15:47:b5:ee:78:50:66:7a:63:12:57:c3:d7: 66:5c:30:51:ae:49:fe:29:d6:d9:13:3f:6c:43:db:33:60:41: 0f:87:14:b0:44:10:bb:05:9e:a6:bc:dc:1b:c7:81:0a:36:4c: c6:de:77:a9:7e:2b:a0:3e:4c:7a:83:1e:4e:3a:8b:0d:49:05: 9a:af:3a:ef:25:a3:f4:92:bb:76:46:bf:17:d9:4a:eb:12:dd: 04:8a:9a:23:39:52:6a:e6:80:59:46:46:fa:d1:13:98:01:de: 41:7a:3b:13:c1:6c:1c:47:6e:38:f0:15:20:9e:11:6f:ae:c0: 62:fc:37:92:d9:46:8b:da:69:0c:79:8b:3c:2c:6b:1d:2d:9b: 13:f2:1b:8e:27:29:82:5a:59:77:17:07:c8:20:a1:72:6b:79: 37:96:37:fa:4d:84:73:7c:d7:dc:1f:6d:12:33:cc:04:8c:de: 72:2d:81:a6:2c:8d:76:34:46:c0:a9:56:d5:e5:62:b0:d9:9c: e0:3f:db:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k35cF3LM+J1HSd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjIzNjQwYTQtMjgzZi00YjYxLWI4YWItMzMxNmU2YTJjNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF22c08TzKobnkmp1QSd8Vum6JGNRPzz63gf DAkKAplKw/4T987KewlFM90QTw0ifEMGuDgXn+IIdcq2A7hhiiZOJddvqcBazmbR 1JLDvEgPzTEnxprEZhZTkZuzn/TBk2wTumIgl+wXH+w1fKA+qNnJWUdmlIzFCHp/ Y4ZYfTxAxNxM4ns1UAWB0QCpmj2c1rkadDkFxnjREdrkkTYoeVT4iSPauRwIoW4T Mjuaca0jzP2oGVer18Aur3wawl99gNcsIZfC1lZDZKXIOTGM8/ndYOgQWefr3tWK WuGF6xqueqgc1U5CtadrGyv2xlNPamN7wtLoEPJz4LNmAjvk1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNkcuLzPJ/yljmHYFc7q4khvQSz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjQ4Y2ZiNjktMmE4Yy0z MTEyLWE5YjUtNjkzZWI2NGQwMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACWrZZiLvWe2QnimMnhDhTbhWybkC8sZwe45EJTMTTLLItS4kx59 Lm/ZQpR6yVvACS09PPffSz2pC9UPFUe17nhQZnpjElfD12ZcMFGuSf4p1tkTP2xD 2zNgQQ+HFLBEELsFnqa83BvHgQo2TMbed6l+K6A+THqDHk46iw1JBZqvOu8lo/SS u3ZGvxfZSusS3QSKmiM5UmrmgFlGRvrRE5gB3kF6OxPBbBxHbjjwFSCeEW+uwGL8 N5LZRovaaQx5izwsax0tmxPyG44nKYJaWXcXB8ggoXJreTeWN/pNhHN819wfbRIz zASM3nItgaYsjXY0RsCpVtXlYrDZnOA/2z8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:41 2026 by rpki-client