$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c8535d2c-b861-3ef0-8198-d791a7698275.roa File: c8535d2c-b861-3ef0-8198-d791a7698275.roa (raw, json) Hash identifier: qzfbRkTiQt7JU5LR5apCu5uwWz7nXfi0JQNBEPtK6j0= Subject key identifier: 47:97:32:63:73:C1:65:D1:D1:8D:B0:CB:FC:98:22:18:F3:E9:34:4C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF79B022839342B8949900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c8535d2c-b861-3ef0-8198-d791a7698275.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:79:b0:22:83:93:42:b8:94:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=25d66138-a96c-4cf9-8730-1ea075254d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:19:ff:4e:ad:ab:15:56:99:29:95:49:1c: 07:27:b6:74:13:40:8c:47:df:f4:44:e2:bd:70:30: 79:b2:b9:10:46:1b:ca:92:4b:be:ca:0b:10:1d:20: 42:1c:85:63:f9:22:79:84:79:88:72:66:c3:54:03: 87:8b:8e:85:7a:95:ee:fb:46:c6:e2:c1:af:27:be: 8f:2b:fb:9c:56:b0:ab:8c:a4:81:d6:c6:29:eb:94: f9:de:e6:78:08:c8:1a:27:31:f1:38:39:2a:30:e5: 87:c8:98:28:c9:2c:81:c0:d8:4a:fb:72:7a:de:7e: 63:b2:7f:72:7c:44:7c:a5:8a:bb:68:42:19:df:35: aa:f8:69:f6:84:27:73:15:5d:56:f4:b5:65:5c:c4: bf:39:d7:86:26:7a:d6:2a:ef:7e:ea:a5:99:0e:2b: 08:8a:2b:cf:db:0f:15:3f:6a:c8:ef:57:ed:f4:28: bf:fe:9e:d1:a8:04:f3:a2:6f:d7:57:66:b5:53:8f: 75:82:39:b0:08:3b:49:0e:af:87:bd:9b:30:5e:aa: b6:2a:4f:45:c1:27:43:6f:90:2d:ca:23:7c:bd:66: ea:94:6b:dc:a9:35:2c:82:01:65:ed:85:12:0c:21: 75:80:0e:2c:10:bc:11:f5:1b:53:10:82:7f:fc:8e: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:97:32:63:73:C1:65:D1:D1:8D:B0:CB:FC:98:22:18:F3:E9:34:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c8535d2c-b861-3ef0-8198-d791a7698275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:60:bf:81:b5:df:6b:6f:8b:82:bb:a9:03:27:fd:00:f1:e3: 67:09:f1:d2:b5:b8:26:51:66:9c:ca:e6:29:88:b6:00:f1:80: 93:df:ba:db:bb:c8:56:bb:db:3a:58:19:00:32:86:14:73:ac: 7a:77:d3:cc:f9:43:44:ba:40:9b:3f:bf:62:cc:6a:85:51:21: 09:29:98:c1:32:e3:a6:d9:8c:1d:3b:99:8d:78:21:7b:f1:d0: aa:4d:8a:35:d0:37:92:f0:aa:5e:87:1e:68:84:be:ea:96:e7: a1:72:7a:2a:c4:c6:45:c6:2b:1f:18:cc:cc:c9:9b:e4:67:e3: ed:f4:4d:dd:21:2d:a7:39:26:48:20:32:59:de:8e:98:09:c9: 5d:fb:9a:3d:75:64:8f:cd:c6:e7:47:a2:86:99:b4:a4:cb:91: 4d:a3:8c:59:75:89:29:9d:76:25:89:64:75:e2:9d:5b:ee:d2: 4f:6f:0b:a8:7b:27:e1:36:fe:c1:75:33:bc:b8:e2:fa:50:98: 51:4c:22:18:c8:4f:29:2e:e0:39:82:f6:00:f3:27:6b:e8:1d: 46:93:3c:40:a7:14:aa:3b:1d:23:a2:10:ef:f0:22:e1:97:66: 11:5a:72:e1:c3:dc:36:63:f3:5d:0d:dc:bf:30:67:1c:fb:9d: e4:2a:6e:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k33mwIoOTQriUmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjVkNjYxMzgtYTk2Yy00Y2Y5LTg3MzAtMWVhMDc1MjU0ZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6AZ/06tqxVWmSmVSRwHJ7Z0E0CMR9/0ROK9 cDB5srkQRhvKkku+ygsQHSBCHIVj+SJ5hHmIcmbDVAOHi46FepXu+0bG4sGvJ76P K/ucVrCrjKSB1sYp65T53uZ4CMgaJzHxODkqMOWHyJgoySyBwNhK+3J63n5jsn9y fER8pYq7aEIZ3zWq+Gn2hCdzFV1W9LVlXMS/OdeGJnrWKu9+6qWZDisIiivP2w8V P2rI71ft9Ci//p7RqATzom/XV2a1U491gjmwCDtJDq+HvZswXqq2Kk9FwSdDb5At yiN8vWbqlGvcqTUsggFl7YUSDCF1gA4sELwR9RtTEIJ//I5vvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEeXMmNzwWXR0Y2wy/yYIhjz6TRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzg1MzVkMmMtYjg2MS0z ZWYwLTgxOTgtZDc5MWE3Njk4Mjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIdgv4G132tvi4K7qQMn/QDx42cJ8dK1uCZRZpzK5imItgDxgJPf utu7yFa72zpYGQAyhhRzrHp308z5Q0S6QJs/v2LMaoVRIQkpmMEy46bZjB07mY14 IXvx0KpNijXQN5Lwql6HHmiEvuqW56FyeirExkXGKx8YzMzJm+Rn4+30Td0hLac5 JkggMlnejpgJyV37mj11ZI/NxudHooaZtKTLkU2jjFl1iSmddiWJZHXinVvu0k9v C6h7J+E2/sF1M7y44vpQmFFMIhjITyku4DmC9gDzJ2voHUaTPECnFKo7HSOiEO/w IuGXZhFacuHD3DZj810N3L8wZxz7neQqbqM= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:54 2026 by rpki-client