$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d97e7a38-8b7d-3cb8-a06d-289074a13617.roa File: d97e7a38-8b7d-3cb8-a06d-289074a13617.roa (raw, json) Hash identifier: 9G1Kwxq1/VqABm1r6KcFt5CRYZsyOt0l50T1Y0nqzG8= Subject key identifier: 18:29:AF:25:6E:75:DD:98:A8:C1:0A:CF:CF:C7:62:EC:34:80:28:DF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24DF9879385EF58CFF773B00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d97e7a38-8b7d-3cb8-a06d-289074a13617.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:51::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:98:79:38:5e:f5:8c:ff:77:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ab225d42-cf1f-420c-8c2b-adbdf2f6e892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4f:f9:8e:d4:67:42:bc:9a:2e:fa:85:73:88: fb:98:4d:7f:3c:b7:c7:40:7b:1b:07:06:27:93:b6: 38:aa:4e:06:72:cb:ab:e7:66:8d:2d:31:4a:e9:6a: 8a:d8:ec:52:b0:99:a9:d0:c6:96:97:5a:ce:67:a7: a1:31:df:2b:40:3e:08:8f:19:18:52:ac:9f:3f:f8: ae:3a:9b:16:98:a3:b0:09:da:64:4a:82:4d:3c:c9: 66:3f:8e:ec:e5:c3:a0:6b:6a:bc:5c:a4:45:79:90: 63:2f:1a:54:35:76:71:e6:9a:30:3b:3e:e4:b9:d2: 8a:a6:d8:70:95:8b:70:fa:4e:bd:d2:8e:94:75:21: 8e:36:36:c0:42:08:7b:79:67:93:86:e1:13:14:cc: ad:80:29:09:e4:e3:53:dd:9e:75:e1:5c:94:cd:cc: ed:41:f1:3e:13:25:f3:3c:3d:25:c4:97:80:f7:a0: b9:9d:bc:bf:d1:55:af:52:50:1b:71:f1:81:e6:e1: af:83:0a:c6:e1:29:f2:95:2f:45:1d:82:4d:93:7e: 64:75:bd:0c:a2:45:de:17:5b:39:b0:82:46:3e:b0: a1:8d:c2:b5:36:9b:cb:52:71:cf:2c:96:48:47:c0: 01:c8:2f:d5:1d:61:14:79:2b:10:47:ae:ba:b8:85: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:29:AF:25:6E:75:DD:98:A8:C1:0A:CF:CF:C7:62:EC:34:80:28:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d97e7a38-8b7d-3cb8-a06d-289074a13617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:51::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:95:31:e6:bc:1e:56:da:72:66:36:a6:db:22:9d:b5:d0:6b: 90:8a:dd:80:c3:ea:64:a8:01:ae:b3:ce:e8:f8:66:53:35:17: 7f:b5:46:16:93:ad:57:ce:d6:89:bb:fe:c6:e0:fa:2f:ab:3a: 02:4f:19:5c:0c:2e:fb:54:c1:bd:e3:95:41:5b:ca:05:8b:81: 11:28:36:dd:c8:d5:8f:f9:2f:f3:2b:cd:06:d3:20:a6:1d:f8: 0c:a4:5b:05:9a:e7:6c:a4:8c:86:03:d9:42:ca:6c:0b:9b:f6: 4c:fd:64:00:57:2b:ae:67:54:fb:df:d5:a9:47:51:01:de:35: f3:00:84:ee:39:09:29:dd:1b:4e:fb:30:44:95:d5:33:fc:04: 5a:9e:e3:b5:88:88:02:9d:86:64:ad:f4:a1:f8:ff:12:16:ed: 79:d9:49:c4:35:b7:0b:d9:2f:7b:bb:77:84:af:b3:3e:ee:1e: f6:f9:a6:d5:32:5a:68:27:c2:b6:90:19:cc:ec:21:ad:9e:7d: cd:61:ff:51:ff:1e:72:ce:c6:b6:3d:a6:3d:4a:2a:d1:e8:2a: 4a:a1:1b:d4:c6:8b:19:9c:46:a6:70:52:5c:96:3c:fd:58:42: c0:be:8c:e3:b6:49:ce:66:b8:e8:ad:83:61:8d:c9:08:c2:40: 12:f0:0e:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k35h5OF71jP93OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWIyMjVkNDItY2YxZi00MjBjLThjMmItYWRiZGYyZjZlODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U/5jtRnQryaLvqFc4j7mE1/PLfHQHsbBwYn k7Y4qk4Gcsur52aNLTFK6WqK2OxSsJmp0MaWl1rOZ6ehMd8rQD4IjxkYUqyfP/iu OpsWmKOwCdpkSoJNPMlmP47s5cOga2q8XKRFeZBjLxpUNXZx5powOz7kudKKpthw lYtw+k690o6UdSGONjbAQgh7eWeThuETFMytgCkJ5ONT3Z514VyUzcztQfE+EyXz PD0lxJeA96C5nby/0VWvUlAbcfGB5uGvgwrG4SnylS9FHYJNk35kdb0MokXeF1s5 sIJGPrChjcK1NpvLUnHPLJZIR8AByC/VHWEUeSsQR666uIUyDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBgpryVudd2YqMEKz8/HYuw0gCjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDk3ZTdhMzgtOGI3ZC0z Y2I4LWEwNmQtMjg5MDc0YTEzNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIuVMea8HlbacmY2ptsinbXQa5CK3YDD6mSoAa6zzuj4ZlM1F3+1 RhaTrVfO1om7/sbg+i+rOgJPGVwMLvtUwb3jlUFbygWLgREoNt3I1Y/5L/MrzQbT IKYd+AykWwWa52ykjIYD2ULKbAub9kz9ZABXK65nVPvf1alHUQHeNfMAhO45CSnd G077MESV1TP8BFqe47WIiAKdhmSt9KH4/xIW7XnZScQ1twvZL3u7d4Svsz7uHvb5 ptUyWmgnwraQGczsIa2efc1h/1H/HnLOxrY9pj1KKtHoKkqhG9TGixmcRqZwUlyW PP1YQsC+jOO2Sc5muOitg2GNyQjCQBLwDok= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:42 2026 by rpki-client