$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa File: d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa (raw, json) Hash identifier: OXB4GXF4PPpNJmrxhPiKgKIB4FdLBnxnveBamXaxErA= Subject key identifier: DD:2F:97:7C:5B:7D:D6:D1:9C:55:B9:0A:62:44:1C:7F:11:7F:6C:24 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF72D9AB2FF335579B8240 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:4a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:72:d9:ab:2f:f3:35:57:9b:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=be9e15a5-b91d-49b3-a9fa-f85fa380f386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:20:a8:71:87:ac:22:84:39:21:70:ed:ed: 7a:02:b6:a4:ff:59:0c:05:b7:b5:a5:9e:11:b0:ed: a3:1e:6e:d8:9b:4f:10:50:07:75:6e:10:c9:32:40: b1:25:0a:de:91:b1:97:be:8b:15:7c:20:4d:15:57: 75:2c:db:47:44:f2:32:c9:70:2f:6a:4a:9a:97:e2: 6a:83:53:91:58:46:17:7d:4f:ee:7c:c4:0e:5f:64: d6:a5:b4:68:5d:7a:3f:bc:28:80:24:c7:8b:d5:eb: 7e:4c:9f:12:e5:19:9f:ed:07:d3:7c:ba:88:bc:4e: 0a:05:42:90:85:d8:b1:ca:d7:7a:be:a5:f0:f0:e2: d9:fe:6b:85:b2:c4:c9:3e:ea:69:08:c6:0a:c4:d4: d3:9a:c7:a7:28:e4:8d:25:2d:a4:d2:c1:f8:94:6b: 0b:99:3c:e2:15:85:e9:53:42:7d:ed:82:66:6a:ba: b5:10:2f:bb:c1:03:d1:82:35:d5:8a:94:df:35:fd: ef:4a:aa:07:a1:d6:f5:c2:97:0d:2c:2b:90:08:6b: c4:4c:d4:9f:be:db:d8:65:b0:cc:7c:4f:c8:01:fe: 43:3e:59:d9:ed:d8:ac:cd:8b:a4:fe:14:5f:0e:eb: b2:7b:37:13:19:6a:18:df:3c:a0:7b:d2:94:81:86: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2F:97:7C:5B:7D:D6:D1:9C:55:B9:0A:62:44:1C:7F:11:7F:6C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6d:bb:03:88:80:7f:96:0c:09:8f:b1:45:df:07:71:0c:82: ab:d4:a2:9f:6f:10:23:e4:e8:33:10:20:66:69:c2:ca:cf:ba: 8e:e3:f5:d7:5d:51:29:34:ec:44:b0:72:f8:ac:d9:fa:89:9d: cb:35:ab:6f:f1:8f:2a:32:54:e8:67:07:30:49:1e:4e:6e:17: 53:61:d1:bf:76:00:18:23:55:21:6b:68:89:55:28:2a:5c:1c: 11:28:29:38:31:b3:e0:d4:f7:bd:6d:09:f2:25:f3:db:71:24: 64:e1:4c:32:40:a5:57:0e:b1:b9:1d:ab:10:00:e1:f1:8a:a9: 74:ec:3e:b2:71:2d:57:5c:59:77:49:88:8b:6c:03:df:c4:8e: d3:0a:15:a6:16:6e:55:2a:54:f0:8c:be:33:9f:e8:b1:b5:a8: 51:b0:68:f6:66:50:18:ed:2f:a5:cc:f3:d1:4d:a5:6e:77:8f: b0:36:b8:3b:60:39:b5:14:de:d0:fa:23:e1:4f:f7:33:88:dd: 49:ac:99:e3:7f:ac:57:94:0b:db:ad:de:e8:0a:64:25:52:e2: ba:1e:05:71:8e:eb:d6:44:d7:49:3f:1d:2c:fb:ed:6f:e5:20: c0:ed:ed:ae:50:0b:db:eb:a2:4f:8b:92:7b:8b:20:81:06:a1: 55:d1:1b:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k33LZqy/zNVebgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmU5ZTE1YTUtYjkxZC00OWIzLWE5ZmEtZjg1ZmEzODBmMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AogqHGHrCKEOSFw7e16Arak/1kMBbe1pZ4R sO2jHm7Ym08QUAd1bhDJMkCxJQrekbGXvosVfCBNFVd1LNtHRPIyyXAvakqal+Jq g1ORWEYXfU/ufMQOX2TWpbRoXXo/vCiAJMeL1et+TJ8S5Rmf7QfTfLqIvE4KBUKQ hdixytd6vqXw8OLZ/muFssTJPuppCMYKxNTTmsenKOSNJS2k0sH4lGsLmTziFYXp U0J97YJmarq1EC+7wQPRgjXVipTfNf3vSqoHodb1wpcNLCuQCGvETNSfvtvYZbDM fE/IAf5DPlnZ7diszYuk/hRfDuuyezcTGWoY3zyge9KUgYZVlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN0vl3xbfdbRnFW5CmJEHH8Rf2wkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDNmZjQxYjUtMzI2Ni0z NDRkLWJhYjEtNzhiZTE3Y2E0YmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJltuwOIgH+WDAmPsUXfB3EMgqvUop9vECPk6DMQIGZpwsrPuo7j 9dddUSk07ESwcvis2fqJncs1q2/xjyoyVOhnBzBJHk5uF1Nh0b92ABgjVSFraIlV KCpcHBEoKTgxs+DU971tCfIl89txJGThTDJApVcOsbkdqxAA4fGKqXTsPrJxLVdc WXdJiItsA9/EjtMKFaYWblUqVPCMvjOf6LG1qFGwaPZmUBjtL6XM89FNpW53j7A2 uDtgObUU3tD6I+FP9zOI3UmsmeN/rFeUC9ut3ugKZCVS4roeBXGO69ZE10k/HSz7 7W/lIMDt7a5QC9vrok+LknuLIIEGoVXRG34= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:58 2026 by rpki-client