$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa File: ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa (raw, json) Hash identifier: jInUd3vUERXqqmYMfa9ZILPzg7AouKaap/2I8NonVlE= Subject key identifier: BE:A3:E5:FF:32:8E:03:37:E2:C6:06:9A:B4:CA:77:1B:FB:77:39:3B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF8FC52A3738B60155EA00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:8f:c5:2a:37:38:b6:01:55:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=fe76e34f-f86b-421e-85b5-1b2a01260798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ce:9b:9d:a5:29:a9:9b:84:af:3b:2d:c6:0f: 06:d6:54:be:2b:48:78:fd:e8:06:f3:1c:57:fb:71: 87:fd:17:05:6e:32:2a:7f:a6:62:83:51:4b:b5:0c: f9:44:ad:16:7f:e6:d4:e1:c8:5d:88:59:d0:d2:4a: af:ae:e6:da:88:a8:ef:d3:2d:4f:c0:1a:ab:c5:f8: 7f:dd:55:f5:2a:ad:56:5a:99:eb:dd:23:04:3d:0e: ac:c5:bc:52:50:12:b6:92:a1:b4:36:f8:aa:92:f9: cf:3f:e4:97:e3:74:0d:a7:20:91:41:a9:c0:3b:f8: 55:27:e9:fa:fc:57:27:c0:a6:4a:e0:5b:3b:d4:20: d9:43:6f:d1:eb:b0:84:13:33:c5:24:97:3b:2e:74: 94:09:79:bf:42:02:f1:95:76:8a:35:d7:0a:a1:11: 91:f1:2b:fd:b4:13:48:ff:92:0e:34:50:ac:dc:d4: 68:70:07:33:ab:b4:c8:a6:b6:aa:00:d6:71:01:7d: a4:a0:70:b1:0d:d7:ab:97:f6:c1:c4:17:09:b7:4b: a6:9c:31:5e:8b:67:dc:d0:d6:6b:b4:22:52:55:e5: fc:3f:ba:60:9d:8b:46:1a:f9:cc:2b:ac:58:02:9d: 6d:2a:d2:a5:c6:67:c7:48:00:a8:d7:f8:c7:ae:48: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A3:E5:FF:32:8E:03:37:E2:C6:06:9A:B4:CA:77:1B:FB:77:39:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce5cc968-c59f-336d-aeea-09e73cf22ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c7:76:c3:ed:a9:15:7a:f6:b3:cf:3e:06:b7:ae:d0:38:7c: 21:d9:7c:f0:b6:17:48:27:c5:c4:7d:41:6a:68:be:f5:9a:fc: 6d:26:6d:9c:a5:c2:54:35:f2:fd:31:3e:97:34:5e:26:48:cd: 1d:c6:29:80:09:a7:59:83:39:91:ba:d1:97:bc:d0:59:4b:97: 8f:5e:8d:3c:1e:c0:ad:b6:d0:ce:54:d4:14:a8:01:20:8e:56: a7:c2:9e:5c:ac:b9:f8:4c:af:d0:a4:6d:50:f2:ab:34:21:c6: b8:e8:c5:a1:3a:cf:b5:fb:49:98:08:41:95:91:a5:5c:f7:c1: b9:a0:86:29:63:a1:3c:2b:d1:7a:d5:9e:f8:2b:44:00:fc:1c: 7e:7a:20:d6:69:8b:c1:ab:2c:cd:70:d7:f7:e2:21:a2:2d:e2: 97:f2:a3:b2:a1:e1:19:7c:42:86:53:89:19:00:a2:b1:5f:11: c8:d0:02:4f:b5:e9:db:2b:53:00:d4:e4:3e:71:f8:6b:5d:8b: de:53:87:6e:e3:ce:c3:f0:ff:19:2a:80:b4:94:e7:ce:8d:39: 1b:47:5d:84:5f:65:6b:61:71:ac:1b:44:65:0a:3c:bb:24:d5: 4d:bf:ac:7b:0b:c3:56:77:23:ce:e8:e8:c3:fd:65:02:c9:44: 04:75:30:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k34/FKjc4tgFV6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmU3NmUzNGYtZjg2Yi00MjFlLTg1YjUtMWIyYTAxMjYwNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc6bnaUpqZuErzstxg8G1lS+K0h4/egG8xxX +3GH/RcFbjIqf6Zig1FLtQz5RK0Wf+bU4chdiFnQ0kqvrubaiKjv0y1PwBqrxfh/ 3VX1Kq1WWpnr3SMEPQ6sxbxSUBK2kqG0NviqkvnPP+SX43QNpyCRQanAO/hVJ+n6 /FcnwKZK4Fs71CDZQ2/R67CEEzPFJJc7LnSUCXm/QgLxlXaKNdcKoRGR8Sv9tBNI /5IONFCs3NRocAczq7TIpraqANZxAX2koHCxDderl/bBxBcJt0umnDFei2fc0NZr tCJSVeX8P7pgnYtGGvnMK6xYAp1tKtKlxmfHSACo1/jHrkjx7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL6j5f8yjgM34sYGmrTKdxv7dzk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2U1Y2M5NjgtYzU5Zi0z MzZkLWFlZWEtMDllNzNjZjIyZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHnHdsPtqRV69rPPPga3rtA4fCHZfPC2F0gnxcR9QWpovvWa/G0m bZylwlQ18v0xPpc0XiZIzR3GKYAJp1mDOZG60Ze80FlLl49ejTwewK220M5U1BSo ASCOVqfCnlysufhMr9CkbVDyqzQhxrjoxaE6z7X7SZgIQZWRpVz3wbmghiljoTwr 0XrVnvgrRAD8HH56INZpi8GrLM1w1/fiIaIt4pfyo7Kh4Rl8QoZTiRkAorFfEcjQ Ak+16dsrUwDU5D5x+Gtdi95Th27jzsPw/xkqgLSU586NORtHXYRfZWthcawbRGUK PLsk1U2/rHsLw1Z3I87o6MP9ZQLJRAR1MKA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:04 2026 by rpki-client