$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa File: bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa (raw, json) Hash identifier: WR2/iTsNZe4DANrO0vJmIINXJJjtfI+T64uMT+hanjc= Subject key identifier: 33:77:94:20:D2:B1:29:8F:9E:7F:35:90:DE:0E:5B:A5:D7:A4:69:7F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF92FC9702A045E1B15A78 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:92:fc:97:02:a0:45:e1:b1:5a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6d8af9a6-f46c-428f-bf5e-c83543cacd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a1:22:2b:1e:aa:23:eb:1a:f8:3e:9e:4c:15: 4e:5d:28:0b:2b:76:69:b0:75:b4:c0:01:52:68:51: e4:6b:23:22:a3:4b:31:80:12:69:63:3d:4d:fa:df: 46:ef:5d:7c:05:bb:90:24:3e:a9:84:52:ef:00:1d: 9e:26:33:1f:23:96:dd:93:d1:71:38:b6:ad:38:60: d2:a9:9c:de:b8:af:91:58:6e:b5:15:30:12:93:74: 86:e3:f5:9a:ba:77:2c:28:90:c4:fd:0d:32:fc:76: cf:03:73:38:be:ee:eb:6a:4c:e2:aa:5b:34:27:80: b3:e8:15:b5:e2:1e:50:51:b8:b5:e7:88:da:aa:83: 38:30:44:52:ef:11:2e:54:54:23:df:1f:c9:17:be: 2b:11:30:1c:64:a9:7c:2d:6f:8b:11:0a:35:43:40: 89:44:10:af:cb:dd:16:64:73:30:ae:3b:23:9e:98: 2a:b6:d2:87:d5:91:e8:bd:d0:2c:9a:58:37:6f:70: 15:a2:25:40:99:62:56:ae:f8:0c:6f:62:0e:29:7b: 5f:ec:2b:a8:4e:dd:8e:a9:09:87:d1:71:1d:26:39: c9:a8:c2:5e:ea:55:8a:92:b4:71:05:d6:00:79:b8: 95:e9:11:0b:c4:3e:a0:93:b8:ad:74:e9:cc:09:96: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:77:94:20:D2:B1:29:8F:9E:7F:35:90:DE:0E:5B:A5:D7:A4:69:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc6e29a7-6a3c-37ed-8459-0fddc133a572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9e:af:52:dc:e9:df:3e:f8:f4:5e:89:6f:b0:af:08:9e:bd: f6:14:eb:cb:28:c0:f9:2e:fc:68:39:fc:5b:50:13:8a:ec:74: 35:0c:0c:09:21:75:84:b6:c7:6b:9a:0a:59:ac:93:95:61:8c: 22:7d:6a:ac:bf:6f:8f:a8:eb:74:ba:d8:ae:d5:fc:b7:b5:f7: 19:43:6f:f5:43:a9:16:77:fe:96:88:59:6a:75:7c:2a:ef:69: 19:ff:e4:d0:94:04:ce:9d:d4:5c:1f:b3:2d:f6:bb:df:cf:31: e9:a8:a5:c1:24:51:b4:26:9f:08:c5:97:66:6f:1f:54:1f:70: 31:e0:17:95:31:c4:23:af:3b:f7:43:9e:43:d0:d1:9e:82:c0: f8:6d:31:c4:37:03:7e:33:f0:f6:8c:94:9c:1d:c4:50:68:4d: 9f:3d:a4:74:3e:eb:7a:8d:68:4e:09:53:76:c6:a2:6a:a6:11: eb:c7:35:e5:0a:da:20:38:67:ad:8b:df:3e:ca:b7:79:ea:07: fd:a5:30:8d:0d:10:40:f0:d7:4d:cd:19:fa:e5:3c:28:81:d3: 3e:b1:0f:ed:c2:fd:58:68:e1:34:af:30:b8:43:10:2c:5c:45: 29:a2:07:c7:b1:5e:73:0b:25:fe:2e:13:91:c3:96:f1:a2:ad: 31:5b:02:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k35L8lwKgReGxWngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmQ4YWY5YTYtZjQ2Yy00MjhmLWJmNWUtYzgzNTQzY2FjZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaEiKx6qI+sa+D6eTBVOXSgLK3ZpsHW0wAFS aFHkayMio0sxgBJpYz1N+t9G7118BbuQJD6phFLvAB2eJjMfI5bdk9FxOLatOGDS qZzeuK+RWG61FTASk3SG4/WauncsKJDE/Q0y/HbPA3M4vu7rakziqls0J4Cz6BW1 4h5QUbi154jaqoM4MERS7xEuVFQj3x/JF74rETAcZKl8LW+LEQo1Q0CJRBCvy90W ZHMwrjsjnpgqttKH1ZHovdAsmlg3b3AVoiVAmWJWrvgMb2IOKXtf7CuoTt2OqQmH 0XEdJjnJqMJe6lWKkrRxBdYAebiV6RELxD6gk7itdOnMCZaRCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDN3lCDSsSmPnn81kN4OW6XXpGl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmM2ZTI5YTctNmEzYy0z N2VkLTg0NTktMGZkZGMxMzNhNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIaer1Lc6d8++PReiW+wrwievfYU68sowPku/Gg5/FtQE4rsdDUM DAkhdYS2x2uaClmsk5VhjCJ9aqy/b4+o63S62K7V/Le19xlDb/VDqRZ3/paIWWp1 fCrvaRn/5NCUBM6d1Fwfsy32u9/PMemopcEkUbQmnwjFl2ZvH1QfcDHgF5UxxCOv O/dDnkPQ0Z6CwPhtMcQ3A34z8PaMlJwdxFBoTZ89pHQ+63qNaE4JU3bGomqmEevH NeUK2iA4Z62L3z7Kt3nqB/2lMI0NEEDw103NGfrlPCiB0z6xD+3C/Vho4TSvMLhD ECxcRSmiB8exXnMLJf4uE5HDlvGirTFbAqw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:56 2026 by rpki-client