$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa File: d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa (raw, json) Hash identifier: 4FtsAbVWX8pO352HQ2XMsALDX8ZNu0Nq/6HZj8gDdhE= Subject key identifier: E9:CD:55:E3:8F:7D:F7:61:75:64:21:2B:91:15:5D:12:B8:55:CD:C1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E12B69D1921F0FE8496440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2b:69:d1:92:1f:0f:e8:49:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a89b02c6-ed87-4a6d-a18b-a34d7245857a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:18:44:d6:7a:39:98:71:bd:19:f6:80:4d:0c: d1:a0:6d:92:cd:ca:21:d3:59:94:d4:ea:c2:74:d3: 2e:72:86:89:b4:1d:95:25:db:dd:8c:d2:dc:ec:f7: 33:a7:ad:5f:67:b1:c9:94:19:25:4d:6a:76:0a:7a: ba:97:9b:98:c5:58:c7:7d:95:1f:86:e2:9c:a4:bb: 28:e4:c4:b9:bf:9d:b2:ad:76:7f:56:11:9b:9d:cb: 20:7a:4b:4a:0f:7b:1d:cf:51:69:ac:35:e2:8e:53: 20:1e:74:4b:2f:41:b3:8c:a1:a4:a5:65:6a:7c:c5: 91:74:1d:f7:7a:82:e2:cf:b2:cb:71:34:e7:96:75: b3:3f:31:80:d4:a8:c9:69:b5:b7:c0:19:a8:6c:bb: 66:53:a0:ad:8b:af:0b:4f:8f:cd:ce:e4:45:c6:11: b8:1b:65:67:3b:34:7a:3d:91:c1:ed:39:56:1e:7e: 21:c1:75:ca:5e:37:99:0a:c0:58:71:70:a7:41:eb: cf:b6:77:68:d5:8c:bc:dc:32:36:4b:be:38:90:4a: ed:da:ac:0a:dd:5c:c3:41:35:71:98:11:9b:9b:ca: 06:c5:15:c3:03:a8:a6:26:eb:30:42:0d:ce:0f:3c: 44:72:d4:93:38:16:1c:7e:74:df:1d:0a:69:cc:cb: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CD:55:E3:8F:7D:F7:61:75:64:21:2B:91:15:5D:12:B8:55:CD:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:53:2f:a3:d9:49:2c:5e:7c:06:3c:fa:19:a0:d9:32:cb:0b: 56:f8:d2:29:f8:66:2d:e5:5d:e5:91:d5:5e:f5:4c:bd:76:85: 59:4d:5d:fe:51:3e:81:78:74:fb:fd:06:d8:30:2c:2c:e8:0c: 54:a6:c3:7b:0c:f5:fc:db:f7:b0:80:92:b2:3f:13:7b:68:19: 36:af:f8:3d:b8:bf:80:28:bf:c3:d8:dc:79:31:32:db:ac:86: f2:e9:af:3e:8c:01:91:98:75:ee:23:eb:08:1a:0e:ba:c4:cc: 64:be:f4:6c:9e:32:24:63:36:53:ee:63:d5:bc:d0:4e:10:da: 0f:0a:d4:3b:d1:8c:56:b6:9b:6e:db:5d:1b:28:ec:a6:51:8a: 6a:3e:22:90:85:d0:31:a1:8e:a7:62:1b:e2:cc:ff:8f:ec:c7: 03:0c:7a:83:18:76:80:85:b4:9f:43:0a:62:47:9e:dd:c5:a2: 20:0e:4b:5a:13:90:4e:9a:e9:e1:3c:04:8d:d9:45:66:c8:1c: 4d:1a:a4:28:ce:dd:8e:64:2b:4e:9e:8e:e1:ec:96:84:75:fc: be:6e:1c:7a:60:07:94:c3:00:41:83:ab:28:66:1d:0f:76:61: a3:f1:8a:a2:b9:0d:a0:51:88:99:07:cb:88:7b:c1:44:a0:5d: b9:49:cd:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4Stp0ZIfD+hJZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTg5YjAyYzYtZWQ4Ny00YTZkLWExOGItYTM0ZDcyNDU4NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRhE1no5mHG9GfaATQzRoG2Szcoh01mU1OrC dNMucoaJtB2VJdvdjNLc7Pczp61fZ7HJlBklTWp2Cnq6l5uYxVjHfZUfhuKcpLso 5MS5v52yrXZ/VhGbncsgektKD3sdz1FprDXijlMgHnRLL0GzjKGkpWVqfMWRdB33 eoLiz7LLcTTnlnWzPzGA1KjJabW3wBmobLtmU6Cti68LT4/NzuRFxhG4G2VnOzR6 PZHB7TlWHn4hwXXKXjeZCsBYcXCnQevPtndo1Yy83DI2S744kErt2qwK3VzDQTVx mBGbm8oGxRXDA6imJuswQg3ODzxEctSTOBYcfnTfHQppzMsQ+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOnNVeOPffdhdWQhK5EVXRK4Vc3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDJkODU0ZWQtNjI5NC0z MmIwLThjNzctNDEzZDUxZmU1YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKFTL6PZSSxefAY8+hmg2TLLC1b40in4Zi3lXeWR1V71TL12hVlN Xf5RPoF4dPv9BtgwLCzoDFSmw3sM9fzb97CAkrI/E3toGTav+D24v4Aov8PY3Hkx MtushvLprz6MAZGYde4j6wgaDrrEzGS+9GyeMiRjNlPuY9W80E4Q2g8K1DvRjFa2 m27bXRso7KZRimo+IpCF0DGhjqdiG+LM/4/sxwMMeoMYdoCFtJ9DCmJHnt3FoiAO S1oTkE6a6eE8BI3ZRWbIHE0apCjO3Y5kK06ejuHsloR1/L5uHHpgB5TDAEGDqyhm HQ92YaPxiqK5DaBRiJkHy4h7wUSgXblJzTo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:41 2026 by rpki-client