$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa File: baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa (raw, json) Hash identifier: vfIhc/HogpRJlYYTPXutWErzEsAHlXUkFTS5FB5U9P0= Subject key identifier: 3D:8F:ED:8E:ED:2F:25:3C:99:A6:9B:D6:FD:F1:96:45:61:1E:6E:4F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF9D3CE85D70489F25B620 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9d:3c:e8:5d:70:48:9f:25:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cf15ed67-04b1-4cfd-a659-94dc3dc8fa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ca:58:8c:a7:07:97:e5:98:48:b3:11:47:48: 50:49:66:3f:8d:5b:e1:cf:26:85:29:92:47:d3:32: b1:a7:7a:b6:f8:42:b1:56:88:be:32:76:9d:cf:71: 49:e4:8e:8a:65:0d:53:53:1c:92:27:80:f6:22:78: 76:6b:13:2a:8c:5c:6c:a3:1a:d0:da:69:d0:f5:f6: 17:99:a9:24:8d:e2:01:8c:6f:83:81:e0:ae:9c:8c: 2f:b5:3a:5a:eb:07:4a:05:f0:2b:16:fc:9b:10:0f: c0:3a:2e:4e:d9:2c:32:69:02:0f:3e:b7:7c:7b:3d: 8f:21:c4:03:e4:cf:44:20:23:21:05:15:56:f2:19: 6e:ea:16:6b:1a:0d:80:3b:81:27:01:d3:23:85:db: 31:28:9e:6e:69:e7:98:3c:4d:a8:02:38:3e:de:0f: d9:fc:2c:b5:3b:6c:07:cc:0c:85:2d:7c:f6:a9:1c: fa:a9:77:3c:a5:e2:34:6e:7f:28:25:92:9a:b8:97: 56:8e:76:96:47:e8:a5:fd:fd:73:03:70:6e:f8:03: 6d:c7:49:63:07:11:d8:37:a1:bf:54:3c:89:d5:28: 04:39:4b:30:9f:75:cd:68:c4:83:10:9b:90:7a:c3: 7e:3c:e1:b5:dc:99:1a:1e:7b:7c:f2:2e:2a:d8:a9: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8F:ED:8E:ED:2F:25:3C:99:A6:9B:D6:FD:F1:96:45:61:1E:6E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ce::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7f:aa:cb:c4:cd:d3:b7:e0:a3:1a:05:ae:7f:7b:50:01:06: 90:a5:5f:87:7f:21:04:cf:38:a4:34:01:e4:72:95:bd:47:2e: a5:7f:03:f6:3d:f9:8d:8e:2e:e4:f0:85:26:22:8d:50:a7:2c: 93:95:c0:c3:d6:6b:f4:91:5d:ac:31:1a:b5:5d:21:41:a3:bc: 96:36:be:12:ef:29:8d:d8:1b:50:a3:8b:bc:bf:a5:9c:e3:9c: 74:d9:c3:4a:54:ea:64:d0:36:e5:17:3c:9c:d3:cd:17:c0:2e: c2:b4:66:f2:e9:43:0a:4e:db:c6:82:fc:63:34:a6:c1:ca:5b: a3:a3:f8:ad:a5:d0:c9:6e:c3:54:26:e0:90:65:c6:fc:54:d9: 18:82:21:c2:c3:3e:0b:aa:b7:f0:64:a4:5b:68:8f:36:a9:7b: 3c:93:1f:0f:e6:91:2e:41:d8:13:23:ca:1c:df:22:7f:40:9e: 61:09:55:9e:29:ce:5a:f8:59:ee:78:6f:a5:93:2d:4a:35:cf: f4:3e:64:f2:c1:aa:c3:70:bf:1d:f6:48:5e:5d:f0:c8:bc:4f: 96:3c:e6:9a:70:32:45:29:36:cc:5f:b9:34:b7:09:26:75:70: 16:35:80:26:50:d5:05:a2:52:1d:94:c6:87:2f:87:01:c5:e8: fd:f8:e6:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k35086F1wSJ8ltiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2YxNWVkNjctMDRiMS00Y2ZkLWE2NTktOTRkYzNkYzhmYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8pYjKcHl+WYSLMRR0hQSWY/jVvhzyaFKZJH 0zKxp3q2+EKxVoi+Mnadz3FJ5I6KZQ1TUxySJ4D2Inh2axMqjFxsoxrQ2mnQ9fYX makkjeIBjG+DgeCunIwvtTpa6wdKBfArFvybEA/AOi5O2SwyaQIPPrd8ez2PIcQD 5M9EICMhBRVW8hlu6hZrGg2AO4EnAdMjhdsxKJ5uaeeYPE2oAjg+3g/Z/Cy1O2wH zAyFLXz2qRz6qXc8peI0bn8oJZKauJdWjnaWR+il/f1zA3Bu+ANtx0ljBxHYN6G/ VDyJ1SgEOUswn3XNaMSDEJuQesN+POG13JkaHnt88i4q2KluhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD2P7Y7tLyU8maab1v3xlkVhHm5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmFhNTgyNGMtYTI3ZC0z ZWJiLTg2YzgtYTQ1MGRjYWI5ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZ/qsvEzdO34KMaBa5/e1ABBpClX4d/IQTPOKQ0AeRylb1HLqV/ A/Y9+Y2OLuTwhSYijVCnLJOVwMPWa/SRXawxGrVdIUGjvJY2vhLvKY3YG1Cji7y/ pZzjnHTZw0pU6mTQNuUXPJzTzRfALsK0ZvLpQwpO28aC/GM0psHKW6Oj+K2l0Mlu w1Qm4JBlxvxU2RiCIcLDPguqt/BkpFtojzapezyTHw/mkS5B2BMjyhzfIn9AnmEJ VZ4pzlr4We54b6WTLUo1z/Q+ZPLBqsNwvx32SF5d8Mi8T5Y85ppwMkUpNsxfuTS3 CSZ1cBY1gCZQ1QWiUh2UxocvhwHF6P345gk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:02 2026 by rpki-client