$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa File: cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa (raw, json) Hash identifier: 9tzjTxIdkr3M/6o0D716QN8RHG5D8Ndii/AMK6UQUls= Subject key identifier: A8:77:86:F5:81:B7:8E:0B:67:1E:2B:1A:47:18:2A:CC:11:38:67:B4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E134681EFF648BF4ECC8C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:34:68:1e:ff:64:8b:f4:ec:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9de5786c-cfec-4eee-8ab0-0cf2b2fd96f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:10:5c:31:36:d3:30:dc:ae:72:b8:fc:f5: a9:f5:f1:39:2d:48:ef:31:1a:5a:f0:9d:a3:f2:57: 02:e9:00:8c:88:ee:34:87:c5:44:cb:43:2a:12:f1: b0:12:af:9c:ef:50:80:b6:6c:79:52:5f:06:d2:95: 8d:b0:a7:13:9c:64:a0:69:96:20:e5:da:69:1b:5a: 41:64:18:a5:5b:cb:37:c0:60:3d:b8:f5:07:5c:91: cc:34:87:23:ae:89:38:95:1c:30:cb:56:d3:89:78: 9b:04:b7:89:2d:53:53:ce:31:35:43:45:9b:5f:82: 71:9b:56:a4:36:a8:ea:d9:76:57:aa:c8:09:37:fb: f5:6f:de:9e:86:c8:f2:b3:a4:4f:ab:d9:0d:0c:dc: 58:e6:e8:44:4f:e7:4f:02:fe:62:43:1f:be:a7:78: 23:ba:14:9c:ac:ad:e7:13:f4:a9:f8:e5:dc:f2:cf: d6:82:11:9f:ff:46:d1:b0:49:15:c4:c8:96:37:a7: 93:92:4a:e1:e9:c7:5c:09:f1:a2:97:0d:89:da:dc: be:cc:86:91:26:03:e3:50:59:05:a6:16:fc:93:03: 3f:fc:cd:88:45:8a:88:1c:f4:0e:b2:81:d7:75:49: 1b:b1:a1:5e:42:87:78:3f:77:9e:0c:d1:ca:1d:55: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:77:86:F5:81:B7:8E:0B:67:1E:2B:1A:47:18:2A:CC:11:38:67:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7b:0c:12:ef:06:ae:4e:ec:07:a3:27:1b:a3:79:15:f9:e6: 6c:d9:e8:6c:74:6d:93:ed:6b:68:77:80:5a:eb:7e:3e:05:53: 2a:6c:db:7d:0b:7f:38:5f:18:67:e0:d2:ff:06:ac:c4:d9:e7: 37:4a:12:5b:4c:5d:3a:35:70:6e:eb:04:4e:21:18:e4:04:fb: 7e:6e:6d:68:0e:63:ac:55:bf:fc:f4:b0:ca:fc:34:31:cb:69: 65:8b:a1:10:75:67:90:cb:bc:61:e2:2f:2a:82:08:92:1f:86: 91:f8:b2:d2:4e:6d:aa:2d:e9:5d:ee:63:9e:49:4e:c1:b5:e5: fe:e5:58:29:13:88:93:1f:41:49:2f:16:6a:d4:45:0e:29:d3: f9:c9:ed:47:28:e1:b3:41:6b:84:13:3f:db:91:5c:7c:ce:fb: 12:f0:37:03:47:0e:24:8d:3d:30:ee:24:aa:31:58:16:44:99: 8f:a4:79:ef:a3:23:5e:84:d9:ba:35:98:cd:3f:71:64:ab:48: 7a:f0:30:7a:eb:4f:46:20:16:45:f0:89:a4:9a:db:70:d0:bf: f4:b1:45:39:5c:05:b4:2b:7d:03:fc:1e:46:31:f0:2f:4a:58: a9:5f:46:fa:29:03:bb:55:11:c7:af:4b:53:81:d7:95:81:8a: 86:af:58:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4TRoHv9ki/TsyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWRlNTc4NmMtY2ZlYy00ZWVlLThhYjAtMGNmMmIyZmQ5NmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRsQXDE20zDcrnK4/PWp9fE5LUjvMRpa8J2j 8lcC6QCMiO40h8VEy0MqEvGwEq+c71CAtmx5Ul8G0pWNsKcTnGSgaZYg5dppG1pB ZBilW8s3wGA9uPUHXJHMNIcjrok4lRwwy1bTiXibBLeJLVNTzjE1Q0WbX4Jxm1ak Nqjq2XZXqsgJN/v1b96ehsjys6RPq9kNDNxY5uhET+dPAv5iQx++p3gjuhScrK3n E/Sp+OXc8s/WghGf/0bRsEkVxMiWN6eTkkrh6cdcCfGilw2J2ty+zIaRJgPjUFkF phb8kwM//M2IRYqIHPQOsoHXdUkbsaFeQod4P3eeDNHKHVUAgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKh3hvWBt44LZx4rGkcYKswROGe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2Y5M2JjNzgtNDhjMy0z YzY2LWI4ZjktNjMyZWMyOTExNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAl7DBLvBq5O7AejJxujeRX55mzZ6Gx0bZPta2h3gFrrfj4FUyps 230LfzhfGGfg0v8GrMTZ5zdKEltMXTo1cG7rBE4hGOQE+35ubWgOY6xVv/z0sMr8 NDHLaWWLoRB1Z5DLvGHiLyqCCJIfhpH4stJObaot6V3uY55JTsG15f7lWCkTiJMf QUkvFmrURQ4p0/nJ7Uco4bNBa4QTP9uRXHzO+xLwNwNHDiSNPTDuJKoxWBZEmY+k ee+jI16E2bo1mM0/cWSrSHrwMHrrT0YgFkXwiaSa23DQv/SxRTlcBbQrfQP8HkYx 8C9KWKlfRvopA7tVEcevS1OB15WBioavWJo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:37:03 2026 by rpki-client