$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d19b102e-d2c8-3e72-afff-f16e0e8702c0.roa File: d19b102e-d2c8-3e72-afff-f16e0e8702c0.roa (raw, json) Hash identifier: AcfJ0qz3nFZNhelu5q+JJJWMz+zS+/XLxNszX9vpCiU= Subject key identifier: 63:FC:0F:1D:7D:45:03:FA:04:86:6E:75:B2:ED:93:42:A1:88:67:08 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF9BEA17CE8618EA9AF240 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d19b102e-d2c8-3e72-afff-f16e0e8702c0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9b:ea:17:ce:86:18:ea:9a:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d78e5d3c-217e-4464-9095-8ba3ffaf5b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:54:5e:73:46:13:88:9d:ce:a1:f5:73:e7: f4:54:65:d7:19:4e:56:a1:ec:d8:59:ba:06:37:6f: 56:31:23:29:f3:d9:51:19:31:8d:01:d0:22:04:34: f6:88:b4:d4:db:86:9f:e2:e7:43:e2:fd:34:83:8a: 7f:a3:46:a9:4e:82:95:7f:cc:9a:69:37:cb:e6:8b: ff:a3:fc:a2:c3:0f:00:8b:d5:dd:89:5a:9f:b3:23: e3:26:ef:ff:86:af:e0:94:8a:9a:8c:e8:99:c0:66: 38:45:3e:8a:b6:85:dd:3a:97:4a:8b:59:d1:dd:5a: 61:9e:4f:6e:fe:3c:07:2a:e0:c1:ea:7f:05:03:31: a7:8b:14:04:96:96:63:26:4a:94:5f:9b:14:b4:b7: 26:cd:31:8e:34:67:ce:2b:fe:a5:86:32:2e:a6:14: 97:18:8f:3c:4b:8d:6a:f5:6b:ec:c9:5a:a5:38:4c: 4c:91:2b:03:df:0c:55:12:af:6d:3d:9f:4a:e4:4a: ca:6d:44:62:6a:8d:5c:d5:be:c9:d2:c6:5c:df:2f: 62:0d:d6:04:47:eb:a3:1e:64:4b:f2:35:e2:ad:db: 87:68:a6:bf:85:bc:54:6f:5f:33:2d:d8:22:89:08: b0:a4:d8:c7:94:e1:ed:d2:d9:78:52:91:0c:40:b6: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FC:0F:1D:7D:45:03:FA:04:86:6E:75:B2:ED:93:42:A1:88:67:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d19b102e-d2c8-3e72-afff-f16e0e8702c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8e:d7:3c:16:a0:87:6a:1b:70:c7:1a:e3:ba:69:05:24:f2: f0:69:04:7b:5a:35:c6:ca:fb:80:89:ef:83:5e:3f:4a:41:5d: 6f:63:56:6e:1e:de:a0:d3:2d:d8:25:ab:fb:ec:12:90:0b:69: e9:ab:1f:b7:29:f2:7e:29:f0:e1:c1:5f:f0:cc:28:69:a4:71: 28:08:8c:c9:05:f6:7b:2d:48:66:c5:18:82:c8:43:e6:74:ae: e2:22:06:89:c0:69:08:57:08:2e:c5:0f:3a:2a:b1:4b:98:64: a9:f1:49:6c:2c:9c:e9:e7:2f:d9:75:b1:36:d3:cc:bd:42:f8: fb:0a:83:0b:79:84:b2:bd:18:61:b0:a2:10:03:1e:c7:de:cf: 1f:2b:4a:72:09:3f:d6:e7:09:d5:2b:f7:32:dc:be:73:f1:64: cc:f7:5f:cc:8f:c2:50:1c:8d:6e:04:0f:02:b5:1f:da:20:69: c8:b1:42:95:8c:d1:7e:e0:d4:01:0b:3c:c9:a4:23:b5:ed:19: 72:04:72:2b:4f:c0:c4:87:58:2a:97:98:f0:0e:a3:39:7d:b1: 0d:ad:56:ee:0b:91:de:3f:ab:61:b5:76:62:3b:6d:e4:71:1d: b1:c4:e8:83:91:5c:a7:f1:e5:f3:74:1c:2f:01:75:a8:e6:b0: 20:97:3f:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k35vqF86GGOqa8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDc4ZTVkM2MtMjE3ZS00NDY0LTkwOTUtOGJhM2ZmYWY1YjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmypUXnNGE4idzqH1c+f0VGXXGU5WoezYWboG N29WMSMp89lRGTGNAdAiBDT2iLTU24af4udD4v00g4p/o0apToKVf8yaaTfL5ov/ o/yiww8Ai9XdiVqfsyPjJu//hq/glIqajOiZwGY4RT6KtoXdOpdKi1nR3Vphnk9u /jwHKuDB6n8FAzGnixQElpZjJkqUX5sUtLcmzTGONGfOK/6lhjIuphSXGI88S41q 9WvsyVqlOExMkSsD3wxVEq9tPZ9K5ErKbURiao1c1b7J0sZc3y9iDdYER+ujHmRL 8jXirduHaKa/hbxUb18zLdgiiQiwpNjHlOHt0tl4UpEMQLZbmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGP8Dx19RQP6BIZudbLtk0KhiGcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDE5YjEwMmUtZDJjOC0z ZTcyLWFmZmYtZjE2ZTBlODcwMmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIeO1zwWoIdqG3DHGuO6aQUk8vBpBHtaNcbK+4CJ74NeP0pBXW9j Vm4e3qDTLdglq/vsEpALaemrH7cp8n4p8OHBX/DMKGmkcSgIjMkF9nstSGbFGILI Q+Z0ruIiBonAaQhXCC7FDzoqsUuYZKnxSWwsnOnnL9l1sTbTzL1C+PsKgwt5hLK9 GGGwohADHsfezx8rSnIJP9bnCdUr9zLcvnPxZMz3X8yPwlAcjW4EDwK1H9ogacix QpWM0X7g1AELPMmkI7XtGXIEcitPwMSHWCqXmPAOozl9sQ2tVu4Lkd4/q2G1dmI7 beRxHbHE6IORXKfx5fN0HC8BdajmsCCXP2A= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:43 2026 by rpki-client