$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e109de6d-8211-3cfd-890e-cf8ec51922e0.roa File: e109de6d-8211-3cfd-890e-cf8ec51922e0.roa (raw, json) Hash identifier: bvBLPuhIBNyIp4fcArzNd5oTIpo8xlrjXYLA6Eh+hJo= Subject key identifier: A2:B7:48:4B:CA:2D:A3:B3:63:38:5E:7D:E1:4A:C5:50:7E:35:15:59 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E1115DF3F534354D04BBF0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e109de6d-8211-3cfd-890e-cf8ec51922e0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:11:5d:f3:f5:34:35:4d:04:bb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ab295898-306a-4551-883c-3cbebc8eb2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2e:16:97:83:3c:ed:f0:ad:e3:dc:18:a9:51: 90:52:f8:ae:c9:87:33:58:fe:ee:41:cd:69:c1:95: 69:48:6d:76:ba:14:82:60:a3:a8:54:0f:98:07:dd: a7:99:98:73:09:3a:37:44:79:ff:05:ef:a1:4b:c3: b3:f4:ed:8a:3d:48:13:41:23:33:6f:8d:43:55:95: 24:24:81:2f:5c:90:ea:5e:ad:50:76:cb:36:90:71: fa:31:74:4a:d6:3e:3b:cc:69:53:bf:d4:d8:e2:0e: 36:16:f8:fc:46:3e:c4:29:f4:cc:26:e0:ed:d7:45: cd:fc:63:ee:5a:eb:69:86:01:10:11:09:da:38:5e: b6:32:45:24:d0:4c:ce:35:94:92:15:21:fc:13:46: 7b:0a:41:a6:dd:44:50:41:25:a4:b0:b4:17:5b:d9: 0f:78:ff:03:3d:b9:ee:4f:54:91:21:03:9c:8c:3f: 19:30:c9:53:fa:93:69:48:58:fa:89:cc:df:10:9e: 44:c6:0a:35:49:ad:d4:41:25:24:01:0a:d6:4e:57: ce:25:5b:a3:95:18:a2:e7:15:d4:50:3a:1f:77:23: d4:f2:2b:c3:4c:b1:1e:d5:d5:8f:ba:c3:9d:04:09: da:63:58:3c:1b:2f:93:31:62:0e:53:4c:1e:36:71: e4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B7:48:4B:CA:2D:A3:B3:63:38:5E:7D:E1:4A:C5:50:7E:35:15:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e109de6d-8211-3cfd-890e-cf8ec51922e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:29:0c:e7:f5:2a:ac:70:94:da:72:4e:24:d9:6d:37:d3:7b: 7c:f6:d8:00:fe:b5:d4:d0:3a:75:fa:d1:3e:c5:ff:bd:df:92: 06:36:07:e2:72:ee:69:bd:34:ba:bf:cf:d8:ca:7c:68:ce:22: 0d:c7:01:53:e9:d5:d8:e3:fe:9e:2a:62:52:44:48:5a:13:cd: 43:75:3d:f5:01:47:4f:82:e4:95:4d:13:27:5f:8b:0d:c9:5a: ef:84:39:54:1b:53:11:7a:15:17:d7:7d:32:a5:42:a0:28:f0: 12:71:f0:b6:58:9b:83:b7:27:b0:1b:43:01:55:97:34:32:7d: 38:7a:8d:89:88:44:fb:90:59:6a:70:b1:19:c9:a6:a7:67:f3: 76:f6:20:f4:08:42:1f:51:c7:06:eb:1c:73:2a:5f:51:d0:de: 0a:d1:20:36:b4:d0:63:12:6c:44:ff:08:49:97:82:c4:25:c1: 57:2e:30:4a:44:97:ea:c0:1c:ac:a0:09:e6:93:95:d5:2c:96: 57:1a:ef:25:a0:e4:2b:84:ba:de:96:d0:f2:59:6c:08:24:30: 68:ac:42:17:cb:4e:84:37:df:b7:b8:8d:de:e7:10:ed:11:62: 08:a3:7f:69:dd:07:05:df:a5:62:0f:ac:27:b4:34:a7:e3:27: 01:6d:13:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4RFd8/U0NU0Eu/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWIyOTU4OTgtMzA2YS00NTUxLTg4M2MtM2NiZWJjOGViMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC4Wl4M87fCt49wYqVGQUviuyYczWP7uQc1p wZVpSG12uhSCYKOoVA+YB92nmZhzCTo3RHn/Be+hS8Oz9O2KPUgTQSMzb41DVZUk JIEvXJDqXq1Qdss2kHH6MXRK1j47zGlTv9TY4g42Fvj8Rj7EKfTMJuDt10XN/GPu WutphgEQEQnaOF62MkUk0EzONZSSFSH8E0Z7CkGm3URQQSWksLQXW9kPeP8DPbnu T1SRIQOcjD8ZMMlT+pNpSFj6iczfEJ5Exgo1Sa3UQSUkAQrWTlfOJVujlRii5xXU UDofdyPU8ivDTLEe1dWPusOdBAnaY1g8Gy+TMWIOU0weNnHk2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKK3SEvKLaOzYzhefeFKxVB+NRVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTEwOWRlNmQtODIxMS0z Y2ZkLTg5MGUtY2Y4ZWM1MTkyMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIcpDOf1KqxwlNpyTiTZbTfTe3z22AD+tdTQOnX60T7F/73fkgY2 B+Jy7mm9NLq/z9jKfGjOIg3HAVPp1djj/p4qYlJESFoTzUN1PfUBR0+C5JVNEydf iw3JWu+EOVQbUxF6FRfXfTKlQqAo8BJx8LZYm4O3J7AbQwFVlzQyfTh6jYmIRPuQ WWpwsRnJpqdn83b2IPQIQh9RxwbrHHMqX1HQ3grRIDa00GMSbET/CEmXgsQlwVcu MEpEl+rAHKygCeaTldUsllca7yWg5CuEut6W0PJZbAgkMGisQhfLToQ337e4jd7n EO0RYgijf2ndBwXfpWIPrCe0NKfjJwFtEww= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:29 2026 by rpki-client