$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa File: d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa (raw, json) Hash identifier: doL1Kzev2Qdp5fWQWv1kPwKzP4zGdt6YU+YMrn+5g8I= Subject key identifier: 7F:6D:CA:CA:EC:A0:43:95:2B:AC:E2:11:58:D4:D5:CC:F6:D9:5F:F7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF7AABACAFF1E465DB3980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:7a:ab:ac:af:f1:e4:65:db:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6e78cefb-7f2e-429f-af87-48899523409e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:7d:7c:9e:bc:be:33:1f:1a:a4:9f:57:28: f3:70:d3:f9:34:38:1d:8a:f2:00:76:5d:0e:e4:d1: 63:57:b3:c9:5f:73:09:54:17:80:e6:2b:3b:36:9f: 41:1d:e9:06:66:5b:bf:7d:7a:46:05:a4:e5:9b:67: f6:d8:73:71:3b:e4:cb:95:62:94:b9:5d:01:03:01: 5f:c0:04:73:7b:f9:a0:8c:57:ca:a7:19:72:71:c5: 4e:99:6f:74:a2:b4:1d:e0:67:06:90:4a:ea:8b:55: 0d:65:a6:25:f6:76:9c:c8:8e:ef:52:bd:6e:f6:9b: 40:81:0f:c2:55:a4:e3:ea:09:2f:18:48:01:df:d2: 32:bc:96:97:41:9e:2c:97:8a:8f:3a:1f:f4:55:ac: b9:ad:33:84:74:d8:12:8c:8b:34:6b:64:4b:a8:1e: 0e:38:c3:a4:11:27:04:f2:11:25:fd:66:67:7b:a7: 16:e2:66:33:63:b9:33:96:4d:f6:0a:56:c9:c1:13: e1:c7:cc:b4:a3:1c:41:7e:39:eb:ac:a6:56:5f:53: 1f:f8:0d:30:8c:ce:68:80:d4:3d:44:a2:2b:9b:fe: 36:9f:f1:17:f7:3a:c0:b6:4a:c9:05:23:93:34:24: 92:1e:d6:43:08:b3:72:2c:b1:4c:6d:3a:fd:61:ff: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6D:CA:CA:EC:A0:43:95:2B:AC:E2:11:58:D4:D5:CC:F6:D9:5F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:36:19:d1:f2:dc:39:4b:71:64:0a:e8:a7:dc:59:15:fb:4b: f6:da:38:07:fd:f6:7f:bf:81:2a:e1:f5:04:09:0f:b5:19:dc: 74:68:71:a2:c7:cd:12:45:f1:17:f2:7e:95:2a:d8:ce:3c:41: 63:c8:dd:7f:e1:2f:6b:66:64:62:35:1e:7f:2f:da:a6:d0:70: 77:fa:12:22:f6:7c:11:97:55:1a:85:67:0e:9a:eb:65:c3:eb: 8a:c8:8f:2e:e8:95:08:ab:bf:a3:dc:cf:62:2b:5f:20:56:d4: 81:c8:52:d1:d4:5f:e0:a2:b8:f8:0e:d1:4c:2f:b8:b1:7f:bf: 36:eb:f1:0e:51:d5:98:45:07:96:7a:a6:80:01:96:9b:d5:d0: 2b:4a:ef:51:fe:de:a4:93:10:c2:56:46:b0:18:63:0f:94:6a: a4:40:29:f0:2f:9e:bf:57:33:20:8b:66:fd:cd:40:bc:67:12: be:54:86:b9:fe:a6:92:a2:b3:99:b4:a2:c2:83:88:14:3a:12: 88:68:c8:95:3c:d2:55:34:14:d9:9c:d6:1d:c3:1c:fc:f4:94: aa:9d:21:09:e7:6f:07:61:50:70:46:2c:06:c1:cb:36:e0:42: 3a:4f:59:7c:d8:6f:de:04:14:ca:ea:8b:e6:ff:b1:dc:35:a2: 3e:56:78:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k33qrrK/x5GXbOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmU3OGNlZmItN2YyZS00MjlmLWFmODctNDg4OTk1MjM0MDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WJ9fJ68vjMfGqSfVyjzcNP5NDgdivIAdl0O 5NFjV7PJX3MJVBeA5is7Np9BHekGZlu/fXpGBaTlm2f22HNxO+TLlWKUuV0BAwFf wARze/mgjFfKpxlyccVOmW90orQd4GcGkErqi1UNZaYl9nacyI7vUr1u9ptAgQ/C VaTj6gkvGEgB39IyvJaXQZ4sl4qPOh/0Vay5rTOEdNgSjIs0a2RLqB4OOMOkEScE 8hEl/WZne6cW4mYzY7kzlk32ClbJwRPhx8y0oxxBfjnrrKZWX1Mf+A0wjM5ogNQ9 RKIrm/42n/EX9zrAtkrJBSOTNCSSHtZDCLNyLLFMbTr9Yf/P0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH9tysrsoEOVK6ziEVjU1cz22V/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDgwYjZjODQtMmE1ZC0z MDJhLTk0YTctYzJhYmMwMTBmZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKI2GdHy3DlLcWQK6KfcWRX7S/baOAf99n+/gSrh9QQJD7UZ3HRo caLHzRJF8RfyfpUq2M48QWPI3X/hL2tmZGI1Hn8v2qbQcHf6EiL2fBGXVRqFZw6a 62XD64rIjy7olQirv6Pcz2IrXyBW1IHIUtHUX+CiuPgO0UwvuLF/vzbr8Q5R1ZhF B5Z6poABlpvV0CtK71H+3qSTEMJWRrAYYw+UaqRAKfAvnr9XMyCLZv3NQLxnEr5U hrn+ppKis5m0osKDiBQ6EohoyJU80lU0FNmc1h3DHPz0lKqdIQnnbwdhUHBGLAbB yzbgQjpPWXzYb94EFMrqi+b/sdw1oj5WeEU= -----END CERTIFICATE-----Generated at Thu Mar 26 20:58:29 2026 by rpki-client