$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2bac057-f69e-34d6-9882-0daa2d4dd96e.roa File: e2bac057-f69e-34d6-9882-0daa2d4dd96e.roa (raw, json) Hash identifier: KIqsbPHFfjiFfpxWNJkj+iqNd0h4XSYMhavZuQxzmsw= Subject key identifier: B7:D1:39:FD:C4:F2:C0:ED:05:A4:92:44:1A:B2:6D:70:B5:F5:9C:C7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A5D8E31AAA2A796CA4D80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2bac057-f69e-34d6-9882-0daa2d4dd96e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 2001:500:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:5d:8e:31:aa:a2:a7:96:ca:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=5752803e-d7f1-4c90-b49d-c403eb4ef769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:18:7f:61:b0:39:32:b4:fa:11:2f:4d:32: f1:22:f4:eb:95:2e:5b:09:fe:f3:52:b2:d6:3c:61: d9:f8:0e:c1:a7:65:4b:ca:22:0d:d6:ed:c6:a3:d2: 14:09:6d:92:77:3a:45:5f:45:71:a4:26:46:78:81: 74:4c:81:16:07:54:99:85:3a:50:73:53:29:0f:23: 7e:9d:db:a1:5b:71:e1:9f:45:42:94:d6:ea:e4:50: 85:75:8c:a6:f5:ab:72:d5:6a:6e:9a:25:40:5b:98: 6e:21:2d:52:97:83:37:a7:c1:26:bf:54:3d:73:e4: cb:71:29:6a:9d:0f:41:f7:ac:7d:76:7c:44:6d:11: 82:1b:f2:f1:d2:cf:3c:07:48:85:0a:1d:7f:4b:1f: 88:f2:7a:a8:bc:67:83:db:de:0f:dd:bf:a4:42:d5: 65:13:38:cf:3a:38:0a:3b:5b:52:55:71:fc:0f:c7: 5e:20:3e:0c:44:29:ce:9f:9a:02:cf:52:17:cd:42: 1a:6d:56:31:68:42:35:57:8e:bb:59:bf:92:ac:63: 86:bd:ae:43:b6:19:7e:65:a6:3d:4b:84:40:c7:7d: 50:67:99:ed:91:27:33:ee:36:36:c3:2d:9d:76:08: 86:ac:f2:ab:df:9b:49:6a:00:fb:9b:d7:65:b2:31: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D1:39:FD:C4:F2:C0:ED:05:A4:92:44:1A:B2:6D:70:B5:F5:9C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2bac057-f69e-34d6-9882-0daa2d4dd96e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5e:30:ba:c0:d2:38:51:71:5e:71:8d:56:c6:73:cf:28:00: 17:05:d4:d8:da:41:79:56:01:e5:e8:36:c3:ab:5a:6f:bb:fd: 4b:1c:c6:78:03:a9:f0:2b:e4:f4:ba:8b:b1:9e:07:74:0a:80: ca:a0:55:97:3a:da:d8:59:cc:80:5a:bf:71:df:96:7c:5a:7d: 74:ec:01:cf:1f:13:cc:10:69:ad:48:a1:0f:d0:50:f9:27:43: 6b:cc:1a:48:15:d8:09:6c:dc:04:4a:57:c2:44:54:56:6b:3e: 71:7f:4c:db:10:06:80:e6:4d:51:4e:4f:83:89:61:79:5f:e7: f5:33:32:35:e3:40:41:8e:07:90:cf:aa:3d:e8:89:fa:1c:ca: a1:bf:95:6f:28:fd:15:5c:5b:74:95:eb:22:ba:17:d0:97:72: 95:0b:84:cd:9d:57:ac:6c:79:f8:19:5a:fa:cb:5d:ff:c3:14: d9:9e:a4:77:07:fd:f1:ae:99:3d:91:f2:0d:ba:65:0f:e8:7a: 17:b3:f8:0b:a0:c4:5c:fd:52:50:eb:ae:9e:1c:38:6d:01:d9: ea:be:fa:02:90:78:55:45:46:60:16:54:f5:3b:bc:9b:7e:4c: 35:a3:8c:fd:cd:fa:47:41:c0:7f:bd:48:cf:80:30:18:1d:fc: ec:10:17:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jel2OMaqip5bKTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NTc1MjgwM2UtZDdmMS00YzkwLWI0OWQtYzQwM2ViNGVmNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYIYf2GwOTK0+hEvTTLxIvTrlS5bCf7zUrLW PGHZ+A7Bp2VLyiIN1u3Go9IUCW2SdzpFX0VxpCZGeIF0TIEWB1SZhTpQc1MpDyN+ nduhW3Hhn0VClNbq5FCFdYym9aty1WpumiVAW5huIS1Sl4M3p8Emv1Q9c+TLcSlq nQ9B96x9dnxEbRGCG/Lx0s88B0iFCh1/Sx+I8nqovGeD294P3b+kQtVlEzjPOjgK O1tSVXH8D8deID4MRCnOn5oCz1IXzUIabVYxaEI1V467Wb+SrGOGva5Dthl+ZaY9 S4RAx31QZ5ntkScz7jY2wy2ddgiGrPKr35tJagD7m9dlsjG2DQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLfROf3E8sDtBaSSRBqybXC19ZzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTJiYWMwNTctZjY5ZS0z NGQ2LTk4ODItMGRhYTJkNGRkOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxeMLrA0jhRcV5xjVbGc88oABcF1NjaQXlWAeXoNsOrWm+7/Usc xngDqfAr5PS6i7GeB3QKgMqgVZc62thZzIBav3HflnxafXTsAc8fE8wQaa1IoQ/Q UPknQ2vMGkgV2Als3ARKV8JEVFZrPnF/TNsQBoDmTVFOT4OJYXlf5/UzMjXjQEGO B5DPqj3oifocyqG/lW8o/RVcW3SV6yK6F9CXcpULhM2dV6xsefgZWvrLXf/DFNme pHcH/fGumT2R8g26ZQ/oehez+AugxFz9UlDrrp4cOG0B2eq++gKQeFVFRmAWVPU7 vJt+TDWjjP3N+kdBwH+9SM+AMBgd/OwQFwQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:24 2026 by rpki-client