$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cec5457a-a173-3447-ab77-a0e0d56c9157.roa File: cec5457a-a173-3447-ab77-a0e0d56c9157.roa (raw, json) Hash identifier: GFpIVZrv/hHhs9I8cV5Dp5pS9qwNPT48gYrzGTLtEEc= Subject key identifier: AD:89:3B:1C:CA:3B:EA:2F:35:C3:20:F8:A3:C7:4E:CC:CF:D0:D0:8A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E118287869E3A055B4E738 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cec5457a-a173-3447-ab77-a0e0d56c9157.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:18:28:78:69:e3:a0:55:b4:e7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=45b1ec95-8807-4289-82e1-45e2083d39bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1a:8d:d1:cd:6a:09:99:0d:aa:4e:74:7e:35: 28:eb:3f:78:9f:61:fe:8f:9e:a5:b3:33:5c:63:5f: 3a:b3:9b:4d:3f:e3:d5:af:c1:23:56:53:99:d5:10: 0e:b4:81:e3:58:a4:26:bc:eb:09:de:47:23:bc:e2: 8e:f9:ad:42:25:23:f6:50:c9:e4:05:a9:66:ae:2f: 7b:c6:4d:06:3d:a2:67:37:d4:bd:be:76:4f:e6:24: 19:e0:a6:07:47:41:a0:21:55:6a:33:35:ee:71:5a: 0d:18:ea:f1:32:b2:2e:74:6e:04:eb:c7:52:1d:cf: ea:33:a6:d9:70:7a:d8:1a:21:6d:16:21:57:50:20: 60:f7:48:fa:a7:65:05:c5:05:88:db:2c:fa:36:0e: a3:40:09:e7:e1:90:3b:33:27:8c:37:5c:d3:a4:59: 1e:d4:78:0e:d7:d2:ec:f2:95:e8:a2:bb:bc:18:d3: 86:36:a4:63:58:18:e8:ac:cf:2f:88:ee:f9:5f:f0: 88:f2:1e:bc:3c:18:c1:4f:1d:df:7a:82:ab:d0:fd: b8:7a:24:f9:f3:15:3a:e0:a6:2f:4f:c4:50:ac:e2: e9:5f:dd:98:a0:67:73:5d:51:20:97:2c:d3:b1:04: 26:33:29:5c:c8:11:56:de:6e:81:7d:cd:ae:cf:14: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:89:3B:1C:CA:3B:EA:2F:35:C3:20:F8:A3:C7:4E:CC:CF:D0:D0:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cec5457a-a173-3447-ab77-a0e0d56c9157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:09:62:b0:76:c2:69:c3:a0:2d:3b:b5:17:11:0f:b8:16:7c: 75:62:62:a0:0f:6f:55:7b:58:1e:23:38:97:7a:3f:8a:ee:99: 15:6c:3e:4f:89:af:aa:25:08:65:b0:d3:d5:ae:a9:67:7c:a8: 76:70:56:59:f6:53:9b:a8:0c:a0:48:10:e3:5f:6d:35:0b:80: 9d:e8:4d:d2:65:39:8c:c7:81:cf:f4:95:aa:19:e8:af:8e:74: 8c:bb:a5:11:67:2a:45:3b:be:7f:ad:05:ba:fb:50:a3:a5:e7: fe:44:02:58:a1:b9:dc:fa:12:d3:2a:a7:6e:ca:4f:97:1e:5a: 28:55:aa:9a:d3:7e:47:7c:34:c0:db:21:26:7d:8a:0b:8b:88: 41:90:84:e3:cd:34:87:0d:d7:f2:eb:43:20:04:11:ab:13:95: ac:5e:a5:90:20:04:26:41:de:17:be:ef:89:ae:82:cd:32:0c: 2b:61:b7:9c:c2:a7:f3:88:b1:d3:a9:68:e0:ef:47:d0:92:a4: fb:80:e1:b1:6b:9f:78:e1:c6:f2:53:ae:fc:9b:bb:f6:a9:95: f1:5e:87:67:60:40:0f:30:ba:d1:e3:36:3d:41:09:1c:c2:08: b4:04:e2:a7:9f:5c:db:87:57:c9:cd:70:c8:b0:57:28:62:d8: 89:db:7e:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4RgoeGnjoFW05zgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDViMWVjOTUtODgwNy00Mjg5LTgyZTEtNDVlMjA4M2QzOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRqN0c1qCZkNqk50fjUo6z94n2H+j56lszNc Y186s5tNP+PVr8EjVlOZ1RAOtIHjWKQmvOsJ3kcjvOKO+a1CJSP2UMnkBalmri97 xk0GPaJnN9S9vnZP5iQZ4KYHR0GgIVVqMzXucVoNGOrxMrIudG4E68dSHc/qM6bZ cHrYGiFtFiFXUCBg90j6p2UFxQWI2yz6Ng6jQAnn4ZA7MyeMN1zTpFke1HgO19Ls 8pXooru8GNOGNqRjWBjorM8viO75X/CI8h68PBjBTx3feoKr0P24eiT58xU64KYv T8RQrOLpX92YoGdzXVEglyzTsQQmMylcyBFW3m6Bfc2uzxS5LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK2JOxzKO+ovNcMg+KPHTszP0NCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2VjNTQ1N2EtYTE3My0z NDQ3LWFiNzctYTBlMGQ1NmM5MTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHUJYrB2wmnDoC07tRcRD7gWfHViYqAPb1V7WB4jOJd6P4rumRVs Pk+Jr6olCGWw09WuqWd8qHZwVln2U5uoDKBIEONfbTULgJ3oTdJlOYzHgc/0laoZ 6K+OdIy7pRFnKkU7vn+tBbr7UKOl5/5EAlihudz6EtMqp27KT5ceWihVqprTfkd8 NMDbISZ9iguLiEGQhOPNNIcN1/LrQyAEEasTlaxepZAgBCZB3he+74mugs0yDCth t5zCp/OIsdOpaODvR9CSpPuA4bFrn3jhxvJTrvybu/aplfFeh2dgQA8wutHjNj1B CRzCCLQE4qefXNuHV8nNcMiwVyhi2Inbfms= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:18 2026 by rpki-client