$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa File: d7b76d36-d31b-377f-98aa-7d8bea972932.roa (raw, json) Hash identifier: Jstk96DYSojFlwFftN0xbj9MIQoydoBggPJBg4fKosU= Subject key identifier: D1:99:5A:F7:1A:89:7C:8B:20:FE:28:48:42:E7:2D:7B:17:96:F0:1F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF72E9F61BBA69EDD52C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:72:e9:f6:1b:ba:69:ed:d5:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f9f077b6-e553-4e5b-8850-87ff16ef3a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:b2:a4:88:ee:9a:bf:ef:b6:f2:fd:2c:0c: 6a:18:0f:f3:96:2d:29:e7:ff:2f:3b:7f:ce:ae:1d: 0a:7d:15:e7:9a:92:5f:4b:45:eb:88:60:da:ec:b4: 17:d5:57:cc:b6:84:11:4a:9e:ef:89:58:3d:c2:e9: a6:43:ee:08:16:79:21:53:06:8b:03:52:ad:72:1d: 63:77:a6:7f:a0:e6:96:7a:70:01:19:a3:57:b8:7e: 55:88:0c:d5:2c:fd:46:7c:78:4f:dd:b6:cc:96:ca: bc:80:07:57:a3:e5:9e:1f:34:79:80:db:37:a2:ac: 57:38:73:fc:0d:a1:ab:4e:3d:c3:a4:f4:d4:82:25: 7a:34:a0:00:c2:91:11:60:37:6f:93:36:f5:ef:61: 3f:b7:53:ee:6e:22:dd:36:c2:a1:72:0c:15:e7:26: f4:e8:56:ff:b9:55:2c:03:25:e5:2b:48:75:70:07: 24:a3:a1:da:4f:a4:18:7f:93:82:12:3f:9b:7e:93: d1:74:30:7f:2f:21:44:4e:17:2d:70:ab:55:8d:f1: b4:28:fb:b6:39:44:20:ce:8a:cc:f7:57:10:57:5e: 52:ec:6f:78:3a:ac:03:8d:07:31:d3:20:85:e4:d7: 2c:a1:ee:6c:6b:53:64:80:3d:07:de:d0:83:b1:7f: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:99:5A:F7:1A:89:7C:8B:20:FE:28:48:42:E7:2D:7B:17:96:F0:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7a:66:a0:59:36:6f:b3:1b:73:da:8d:5e:b1:e6:ac:6b:66: c0:18:79:e9:d3:a1:54:48:af:52:39:09:4d:f8:af:ea:cc:18: 26:89:2a:a4:52:91:6d:a5:2d:9a:31:80:5a:e4:c0:b4:1f:ea: 03:1e:bb:c3:24:2f:21:52:55:3d:05:60:42:24:b9:2b:43:12: cc:78:dc:88:48:a8:e1:a5:da:99:44:6f:cf:a3:90:93:cf:a5: 43:58:ca:98:1c:cd:48:53:dd:00:d5:6b:fe:6a:8b:7f:81:f5: 7a:e7:b3:b3:ec:ff:1f:b7:6a:28:c8:5c:44:e5:37:dd:45:af: d8:a9:7b:0a:03:f6:c3:c5:fd:12:86:76:a4:71:65:08:0b:cf: 34:4d:c6:d8:97:ac:97:1d:83:cc:83:fb:68:88:41:1a:67:99: de:8a:12:3c:f8:61:3a:55:9d:ae:ca:46:33:68:ab:24:fb:31: a7:4f:5b:6f:c1:a0:bb:e0:45:e9:68:5d:0f:f8:f0:71:9f:04: db:ae:4d:97:7b:9b:17:5f:8d:75:e9:a2:9e:bf:ce:89:ea:32: 4d:04:8f:ff:69:4b:d8:e2:90:90:6c:f5:6f:8e:76:54:6e:5d: 2e:14:52:c6:3c:96:26:8c:22:ae:b2:d5:66:b1:1b:65:06:e3: b9:53:f9:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k33Lp9hu6ae3VLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjlmMDc3YjYtZTU1My00ZTViLTg4NTAtODdmZjE2ZWYzYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG+ypIjumr/vtvL9LAxqGA/zli0p5/8vO3/O rh0KfRXnmpJfS0XriGDa7LQX1VfMtoQRSp7viVg9wummQ+4IFnkhUwaLA1Ktch1j d6Z/oOaWenABGaNXuH5ViAzVLP1GfHhP3bbMlsq8gAdXo+WeHzR5gNs3oqxXOHP8 DaGrTj3DpPTUgiV6NKAAwpERYDdvkzb172E/t1PubiLdNsKhcgwV5yb06Fb/uVUs AyXlK0h1cAcko6HaT6QYf5OCEj+bfpPRdDB/LyFEThctcKtVjfG0KPu2OUQgzorM 91cQV15S7G94OqwDjQcx0yCF5Ncsoe5sa1NkgD0H3tCDsX+73QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNGZWvcaiXyLIP4oSELnLXsXlvAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDdiNzZkMzYtZDMxYi0z NzdmLTk4YWEtN2Q4YmVhOTcyOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEN6ZqBZNm+zG3PajV6x5qxrZsAYeenToVRIr1I5CU34r+rMGCaJ KqRSkW2lLZoxgFrkwLQf6gMeu8MkLyFSVT0FYEIkuStDEsx43IhIqOGl2plEb8+j kJPPpUNYypgczUhT3QDVa/5qi3+B9Xrns7Ps/x+3aijIXETlN91Fr9ipewoD9sPF /RKGdqRxZQgLzzRNxtiXrJcdg8yD+2iIQRpnmd6KEjz4YTpVna7KRjNoqyT7MadP W2/BoLvgReloXQ/48HGfBNuuTZd7mxdfjXXpop6/zonqMk0Ej/9pS9jikJBs9W+O dlRuXS4UUsY8liaMIq6y1WaxG2UG47lT+dg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:05 2026 by rpki-client