$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa File: dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa (raw, json) Hash identifier: jOGKMbB9NXkOhNkTLCsJ8E7SlZ+m68XW1rUqNuX3zuE= Subject key identifier: 21:B3:C6:21:F9:A2:DD:FC:4A:37:89:3B:8A:4A:B1:7C:CA:83:4F:1E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E10D55D5991B8D0E443600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:53::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0d:55:d5:99:1b:8d:0e:44:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b7836b7c-2a28-4811-a3ac-30a26443d7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:3c:7c:18:56:03:4e:72:a9:ba:d3:03:57: ff:38:c4:5d:71:10:d5:10:8a:f3:bb:24:a1:6d:f6: f7:5d:6d:be:20:b2:34:70:e2:e0:40:5e:2e:69:1e: be:6d:cc:0f:dd:2d:4e:70:a4:a0:f9:7f:38:c6:2e: d3:f7:a9:b5:46:70:91:22:51:be:c3:fa:7b:5c:a0: 2c:6c:2f:a2:91:ef:69:0b:62:27:b2:e2:d9:57:33: 02:07:5b:fa:b5:6b:26:d7:bd:63:57:fa:6e:5f:b1: f6:ec:8e:27:30:8a:0f:0a:11:d5:d9:01:77:58:e6: 4d:79:56:b2:bd:69:32:7a:0d:5c:9b:8e:a5:5e:2a: 82:47:99:cd:f8:48:f1:27:0d:bc:63:50:ff:5a:bb: ea:09:4c:6c:4e:b5:5f:20:61:64:bd:02:3b:21:9d: a0:18:aa:b2:07:3f:c4:c1:73:e5:b3:63:5c:13:26: 40:71:b8:13:44:01:db:b6:98:ce:42:e9:b5:85:71: ed:74:04:23:a1:7f:57:07:01:ca:69:bb:bf:41:9c: 09:20:74:4a:da:90:28:85:c1:b2:da:b0:f9:40:d1: 86:f9:7d:7a:c5:cb:4a:a9:52:80:46:e2:47:06:b6: a7:38:8d:6a:7b:12:fc:20:93:24:a5:96:90:99:b2: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B3:C6:21:F9:A2:DD:FC:4A:37:89:3B:8A:4A:B1:7C:CA:83:4F:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:53::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e0:c7:9a:e1:d1:94:32:5a:f4:72:5c:e3:ec:fb:df:e4:81: 8e:84:cf:75:8f:3d:e6:da:bd:60:f7:b6:9e:ee:d7:24:84:af: 6d:28:08:68:54:21:3a:70:54:1b:0d:df:32:cd:2e:55:74:6c: 44:84:bc:13:ec:91:f0:15:c5:47:07:f8:74:7f:de:26:c4:2a: 4d:e4:aa:0c:3f:7c:b7:6e:fe:a2:c5:10:12:a9:03:1c:79:3d: e6:f3:b0:22:39:22:e7:42:97:c2:23:1d:d2:b4:35:80:2d:e7: ae:d3:87:82:eb:62:fe:1c:f7:ed:fd:87:6d:b7:52:33:b8:47: c2:bd:5a:04:f4:5d:00:55:95:60:a2:8d:37:a7:fb:e4:95:f5: f5:4d:44:01:14:c1:71:78:aa:b1:79:b5:48:1e:1a:b7:65:8e: 4a:e9:ae:81:79:7e:1f:70:9f:35:a2:02:97:f4:fd:3e:0e:97: 26:21:04:d2:a8:ab:ea:32:4f:44:ad:93:c2:e1:bf:2c:94:3b: b0:9d:7e:dd:cf:c4:7c:a8:a8:66:94:ac:80:2c:3f:59:ec:e6: be:5e:bd:52:77:3e:69:0a:e3:0c:87:bd:36:3b:3d:10:06:06: 82:07:28:22:7b:36:d9:70:b5:5b:0e:51:cc:d1:64:c0:3f:dd: b4:a4:f1:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4Q1V1ZkbjQ5ENgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Yjc4MzZiN2MtMmEyOC00ODExLWEzYWMtMzBhMjY0NDNkN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz88fBhWA05yqbrTA1f/OMRdcRDVEIrzuySh bfb3XW2+ILI0cOLgQF4uaR6+bcwP3S1OcKSg+X84xi7T96m1RnCRIlG+w/p7XKAs bC+ike9pC2InsuLZVzMCB1v6tWsm171jV/puX7H27I4nMIoPChHV2QF3WOZNeVay vWkyeg1cm46lXiqCR5nN+EjxJw28Y1D/WrvqCUxsTrVfIGFkvQI7IZ2gGKqyBz/E wXPls2NcEyZAcbgTRAHbtpjOQum1hXHtdAQjoX9XBwHKabu/QZwJIHRK2pAohcGy 2rD5QNGG+X16xctKqVKARuJHBranOI1qexL8IJMkpZaQmbLhMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCGzxiH5ot38SjeJO4pKsXzKg08eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGVjNTU0ZmEtYzFhYS0z YzA2LTlmNjItNmQ4ZWQ3MDhkZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADLgx5rh0ZQyWvRyXOPs+9/kgY6Ez3WPPebavWD3tp7u1ySEr20o CGhUITpwVBsN3zLNLlV0bESEvBPskfAVxUcH+HR/3ibEKk3kqgw/fLdu/qLFEBKp Axx5PebzsCI5IudCl8IjHdK0NYAt567Th4LrYv4c9+39h223UjO4R8K9WgT0XQBV lWCijTen++SV9fVNRAEUwXF4qrF5tUgeGrdljkrproF5fh9wnzWiApf0/T4OlyYh BNKoq+oyT0Stk8LhvyyUO7Cdft3PxHyoqGaUrIAsP1ns5r5evVJ3PmkK4wyHvTY7 PRAGBoIHKCJ7NtlwtVsOUczRZMA/3bSk8ac= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:16 2026 by rpki-client