$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa File: ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa (raw, json) Hash identifier: oK+BOuq863gLHlkJd26doIx6OaSqRHWU5VtrZo1e9pI= Subject key identifier: 0A:F6:90:0B:99:EB:15:3E:C1:05:9A:C2:70:37:58:C3:FB:8E:F7:21 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF7A7719490358C9E8A180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:7a:77:19:49:03:58:c9:e8:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=fbe4fce4-5d25-4743-8643-e0497a4ff744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e6:2e:e7:54:33:da:c2:46:43:63:3f:8a:28: ff:42:24:f3:33:68:96:18:2a:81:44:27:a5:fd:b1: 1c:c4:5f:6e:d6:1a:86:67:8d:70:39:12:3a:50:a1: 70:1e:80:b5:9b:fc:e0:51:8d:3c:cc:90:6c:87:35: 19:d8:fa:94:fd:99:b6:90:c8:76:6c:ad:b7:2f:03: af:70:07:83:b7:76:ab:3f:d3:58:2d:06:f9:f8:2c: ee:43:8d:98:df:41:5a:64:b2:d6:99:f2:4b:db:30: e8:83:6b:61:d2:91:ab:d6:1f:9c:d6:8e:4e:6a:c4: a7:26:60:80:c6:cb:f7:60:71:79:70:e3:f5:b5:d8: 77:88:5e:d2:c7:04:d0:ba:3d:be:fe:a9:01:9c:6a: 1c:9a:f3:fb:af:64:d2:10:9d:7d:1c:6d:f3:e8:eb: ff:c8:61:1a:78:41:7f:38:48:e4:f9:06:5d:5c:15: 74:2c:c5:30:6a:63:5b:ba:f6:bb:47:74:83:6e:bf: 5b:54:41:fb:94:70:57:31:d6:2b:0b:93:50:a1:a8: 96:31:8a:01:94:4b:56:af:1d:54:53:57:b4:fb:b9: 85:68:0d:f4:8f:16:af:25:fb:6e:5f:2b:70:31:37: 50:3c:48:b3:e9:c3:dd:a0:99:5d:92:88:37:df:02: 33:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F6:90:0B:99:EB:15:3E:C1:05:9A:C2:70:37:58:C3:FB:8E:F7:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a6:d7:10:bc:b1:1c:0f:06:d3:bf:2c:27:db:a6:fd:bd:db: b8:25:a0:54:ac:6f:10:33:ae:5f:95:74:ab:ad:5d:6f:f3:05: cf:a8:96:de:2a:6b:89:53:76:9f:c8:0f:4a:f5:21:42:4e:18: 70:c7:bd:1b:6c:f5:57:b9:ed:26:4d:87:74:d2:3a:15:8b:37: 50:06:53:52:37:c3:82:64:5c:55:cf:de:ca:97:fb:47:b2:f5: 83:85:4c:7c:2e:9c:f0:a7:dc:96:5e:0a:00:fc:dd:66:5c:62: 8a:85:93:73:0b:20:f6:b0:d5:40:a0:df:cb:e3:39:be:45:bd: a9:d4:77:f2:80:ca:a3:42:ad:6b:96:b9:01:93:d9:1e:f8:2d: 3d:38:c2:9c:9d:84:88:e6:43:e9:7c:96:51:95:f0:5b:95:9f: f5:29:b9:8f:f7:73:c4:4f:bd:3f:dc:e8:a4:d9:cb:32:cc:50: d7:c6:3f:a9:dc:fb:d2:32:08:c7:b1:c7:28:3f:fb:55:8d:2c: a5:67:15:49:b3:3f:01:8e:f4:3d:32:4a:a1:be:1d:41:a9:eb: c7:f9:61:20:e0:17:06:f9:4d:63:64:9b:18:b3:0a:59:07:80: f0:c5:47:92:bb:4e:2f:f1:21:63:43:85:39:58:a8:98:15:d6: cf:b1:b4:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k33p3GUkDWMnooYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmJlNGZjZTQtNWQyNS00NzQzLTg2NDMtZTA0OTdhNGZmNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eYu51Qz2sJGQ2M/iij/QiTzM2iWGCqBRCel /bEcxF9u1hqGZ41wORI6UKFwHoC1m/zgUY08zJBshzUZ2PqU/Zm2kMh2bK23LwOv cAeDt3arP9NYLQb5+CzuQ42Y30FaZLLWmfJL2zDog2th0pGr1h+c1o5OasSnJmCA xsv3YHF5cOP1tdh3iF7SxwTQuj2+/qkBnGocmvP7r2TSEJ19HG3z6Ov/yGEaeEF/ OEjk+QZdXBV0LMUwamNbuva7R3SDbr9bVEH7lHBXMdYrC5NQoaiWMYoBlEtWrx1U U1e0+7mFaA30jxavJftuXytwMTdQPEiz6cPdoJldkog33wIzhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAr2kAuZ6xU+wQWawnA3WMP7jvchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2E1N2Y4YWUtMzc4Ny0z OTgyLWI0MjMtZWEzNWJiZjQyYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHSm1xC8sRwPBtO/LCfbpv2927gloFSsbxAzrl+VdKutXW/zBc+o lt4qa4lTdp/ID0r1IUJOGHDHvRts9Ve57SZNh3TSOhWLN1AGU1I3w4JkXFXP3sqX +0ey9YOFTHwunPCn3JZeCgD83WZcYoqFk3MLIPaw1UCg38vjOb5FvanUd/KAyqNC rWuWuQGT2R74LT04wpydhIjmQ+l8llGV8FuVn/UpuY/3c8RPvT/c6KTZyzLMUNfG P6nc+9IyCMexxyg/+1WNLKVnFUmzPwGO9D0ySqG+HUGp68f5YSDgFwb5TWNkmxiz ClkHgPDFR5K7Ti/xIWNDhTlYqJgV1s+xtEg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:03 2026 by rpki-client