$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/be73092b-99c5-3625-9088-bb6e8d14cf0c.roa File: be73092b-99c5-3625-9088-bb6e8d14cf0c.roa (raw, json) Hash identifier: O1RCdFZC3gHtpuZPGtRJ+/s9ec0H2XXA4R2BTEvZscI= Subject key identifier: 1F:0F:07:31:E5:47:3F:F8:98:DD:F0:DB:A9:19:90:94:11:E6:89:A3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E128FF4D50236986200880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/be73092b-99c5-3625-9088-bb6e8d14cf0c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:28:ff:4d:50:23:69:86:20:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=aa985abe-ac8f-4f80-a0d9-d24e1b27c020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:65:7a:11:64:67:c5:0c:b3:c2:4a:e5:c2: 8b:57:f4:0b:28:9b:75:f7:99:3e:65:46:c9:d4:8a: ea:32:ae:f9:68:b3:9e:14:92:44:fe:09:ab:7a:fe: 06:87:f9:59:f9:4d:cf:ca:8e:8c:6c:99:56:6c:7b: 4a:cd:9c:1b:55:4f:c3:23:e5:8c:b4:af:91:da:88: 59:73:2c:11:59:ec:ac:db:16:5a:65:f8:07:99:95: 62:b2:0c:6e:1a:42:c5:85:b0:13:ab:08:66:a9:10: b6:08:47:77:25:eb:2a:3e:13:0f:ab:1a:3b:68:da: c4:ad:f9:ed:f0:bf:91:3d:b2:e8:00:91:19:b4:af: 30:07:90:b8:d3:75:9d:2c:7e:85:02:55:76:88:71: a0:0a:3d:3d:45:51:e0:44:f1:79:6a:6b:35:fd:66: 74:25:80:77:0d:66:ad:21:a5:95:42:25:77:10:5c: 88:fc:28:f9:65:5d:89:81:53:2b:19:d4:a5:ae:5d: 6e:59:e5:b8:23:ad:9d:f6:6d:3d:0a:e2:d8:08:c2: b7:d2:53:87:9c:6e:69:ba:69:ca:5d:a9:a3:bd:14: 87:3b:45:53:59:61:86:f7:64:41:82:54:44:6b:9c: c8:a3:6c:7e:21:26:66:f4:92:11:d2:8c:34:f6:2c: b4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0F:07:31:E5:47:3F:F8:98:DD:F0:DB:A9:19:90:94:11:E6:89:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/be73092b-99c5-3625-9088-bb6e8d14cf0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:30:7e:0f:54:4e:d2:ec:e0:09:30:ed:a7:54:dc:be:19:36: 6b:b5:42:91:36:37:6e:f3:3e:d1:4b:c9:b4:be:b7:71:c3:94: 8d:6a:df:b9:4e:9e:97:f4:19:9d:08:5f:14:43:1e:fd:cb:6b: ca:c2:36:a2:0b:c3:ef:61:30:94:f7:aa:4c:03:ee:77:ef:c0: 2a:0f:30:5f:2b:8f:23:d5:c7:cd:60:1c:2a:fe:cf:b7:22:43: 63:d0:10:9e:ce:e0:87:96:8a:e1:80:d2:4f:fb:17:2e:b4:3c: c4:bc:c8:5e:2e:24:fa:8e:70:e4:d6:fb:d3:c4:ea:ec:b4:44: 90:c2:aa:96:85:b0:f3:83:1a:84:40:b2:18:37:1c:ab:b6:c6: 27:f8:c7:59:df:85:d6:bb:43:53:cb:33:37:59:8e:5c:55:bb: 2e:42:da:82:73:01:6c:bb:b6:f9:ad:76:41:1c:19:b1:59:6b: 47:27:b4:4c:8d:35:06:45:50:98:d3:e8:49:8d:5e:d8:85:91: 0c:43:4b:c6:4b:69:d1:0d:52:e8:87:17:a8:58:d6:5b:07:90: 2c:df:5b:9b:81:82:48:e4:73:ff:38:eb:1f:45:8f:95:b1:42: 49:82:e1:d2:55:38:d1:46:d9:e2:bf:5a:1c:46:e7:85:9d:e7: 98:c2:e4:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4Sj/TVAjaYYgCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWE5ODVhYmUtYWM4Zi00ZjgwLWEwZDktZDI0ZTFiMjdjMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3ZlehFkZ8UMs8JK5cKLV/QLKJt195k+ZUbJ 1IrqMq75aLOeFJJE/gmrev4Gh/lZ+U3Pyo6MbJlWbHtKzZwbVU/DI+WMtK+R2ohZ cywRWeys2xZaZfgHmZVisgxuGkLFhbATqwhmqRC2CEd3JesqPhMPqxo7aNrErfnt 8L+RPbLoAJEZtK8wB5C403WdLH6FAlV2iHGgCj09RVHgRPF5ams1/WZ0JYB3DWat IaWVQiV3EFyI/Cj5ZV2JgVMrGdSlrl1uWeW4I62d9m09CuLYCMK30lOHnG5pumnK XamjvRSHO0VTWWGG92RBglREa5zIo2x+ISZm9JIR0ow09iy00wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB8PBzHlRz/4mN3w26kZkJQR5omjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmU3MzA5MmItOTljNS0z NjI1LTkwODgtYmI2ZThkMTRjZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0wfg9UTtLs4Akw7adU3L4ZNmu1QpE2N27zPtFLybS+t3HDlI1q 37lOnpf0GZ0IXxRDHv3La8rCNqILw+9hMJT3qkwD7nfvwCoPMF8rjyPVx81gHCr+ z7ciQ2PQEJ7O4IeWiuGA0k/7Fy60PMS8yF4uJPqOcOTW+9PE6uy0RJDCqpaFsPOD GoRAshg3HKu2xif4x1nfhda7Q1PLMzdZjlxVuy5C2oJzAWy7tvmtdkEcGbFZa0cn tEyNNQZFUJjT6EmNXtiFkQxDS8ZLadENUuiHF6hY1lsHkCzfW5uBgkjkc/846x9F j5WxQkmC4dJVONFG2eK/WhxG54Wd55jC5GY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:43 2026 by rpki-client