$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ec88900c-64b6-34e1-a603-b34015c59fde.roa File: ec88900c-64b6-34e1-a603-b34015c59fde.roa (raw, json) Hash identifier: hXmBu7ha42QYlPKECl1ypyZo7d2wS9Nk7T1u6Vj9mIc= Subject key identifier: 08:38:64:1C:F7:9D:52:C8:13:9B:57:FC:A4:F9:47:48:F0:90:6E:69 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A62C931605C806817E700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ec88900c-64b6-34e1-a603-b34015c59fde.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 2001:500:e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:62:c9:31:60:5c:80:68:17:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=3d600fb9-0324-4647-a52e-c4251d97b584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b5:3e:90:38:e4:ef:3f:f1:e0:4e:a0:d6:3e: d1:d4:95:92:4d:20:7c:2d:9c:9a:6f:f6:5c:31:79: cc:a9:ea:5e:87:36:51:c7:bb:1e:3c:55:2f:46:8c: 45:54:f1:e3:ff:4c:d5:00:72:a0:fb:50:30:03:a4: a8:5e:df:1c:7c:7b:a0:fb:5c:e4:56:a6:d2:2e:36: dc:01:4a:83:a2:a2:fd:19:c8:95:20:5a:04:66:87: 1d:a4:ea:c9:51:83:92:a1:f9:d8:26:54:b2:61:93: 46:b4:8a:39:d1:db:0c:39:a6:e2:69:83:a3:38:e6: 72:8b:1a:8e:c1:43:4c:a3:14:e1:ba:55:d9:a3:b6: 1c:6a:06:3b:24:cb:3e:4e:25:7f:8b:bc:6f:fd:9b: 9e:be:fe:75:78:68:b3:70:3f:c9:53:de:8b:cd:0d: 8a:36:3e:37:04:07:9c:ca:0c:87:f1:9f:02:cc:b7: 04:97:11:ba:38:cf:86:d0:2a:86:55:2f:a0:6e:bc: 16:fb:8f:1c:0b:da:7a:f8:54:c5:1f:7c:99:e1:67: 16:99:2a:b9:eb:8c:73:c1:48:12:d7:bd:1d:bf:3c: 9e:53:bf:90:5b:01:84:c4:bd:68:06:73:6f:22:e9: 61:a6:d2:81:b9:56:fb:4c:83:60:7f:43:71:3c:45: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:38:64:1C:F7:9D:52:C8:13:9B:57:FC:A4:F9:47:48:F0:90:6E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ec88900c-64b6-34e1-a603-b34015c59fde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:30:ce:32:67:18:85:80:0a:49:0a:da:d8:98:31:6e:b3:4c: 4c:fb:db:68:37:c8:4b:c3:3d:ba:23:17:ec:d3:29:99:21:19: 39:49:18:4b:1d:d1:ad:a6:ad:3b:20:1f:41:b3:d8:eb:2a:ce: 8a:88:b6:42:e5:a6:1a:8e:36:eb:5b:b7:80:dc:ba:35:a9:f0: e0:cb:6d:54:f6:8b:16:09:bc:5f:bc:70:20:48:c2:e3:e5:6a: 85:85:f3:c3:38:1a:92:00:cb:2e:3d:8e:fd:07:77:55:3a:36: 64:57:8b:47:50:15:1a:18:d3:29:3b:12:a9:fa:d7:75:cf:a1: a8:5a:3b:ae:90:bc:de:b2:7e:4c:b6:46:a0:a3:9c:6f:18:3a: 31:48:4c:b1:4f:63:cc:d8:48:bd:69:af:70:1b:b5:67:17:bd: f4:a8:71:48:34:99:46:4e:d4:76:a6:67:1e:a6:dc:60:07:f3: 12:dc:52:0d:b6:cf:bb:c9:d7:7c:9a:7f:75:1d:10:33:cd:b1: 05:5b:9f:30:6d:71:86:d8:a7:b6:c0:ba:7b:2f:24:b6:6f:cf: fc:36:da:3d:3b:58:18:56:01:56:7e:3b:bb:cb:94:01:01:e6: 4f:12:1a:9e:62:64:74:9d:03:c9:c0:87:b8:5c:71:54:c5:65: 85:d1:b3:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jemLJMWBcgGgX5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk M2Q2MDBmYjktMDMyNC00NjQ3LWE1MmUtYzQyNTFkOTdiNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibU+kDjk7z/x4E6g1j7R1JWSTSB8LZyab/Zc MXnMqepehzZRx7sePFUvRoxFVPHj/0zVAHKg+1AwA6SoXt8cfHug+1zkVqbSLjbc AUqDoqL9GciVIFoEZocdpOrJUYOSofnYJlSyYZNGtIo50dsMOabiaYOjOOZyixqO wUNMoxThulXZo7YcagY7JMs+TiV/i7xv/Zuevv51eGizcD/JU96LzQ2KNj43BAec ygyH8Z8CzLcElxG6OM+G0CqGVS+gbrwW+48cC9p6+FTFH3yZ4WcWmSq564xzwUgS 170dvzyeU7+QWwGExL1oBnNvIulhptKBuVb7TINgf0NxPEVt+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAg4ZBz3nVLIE5tX/KT5R0jwkG5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWM4ODkwMGMtNjRiNi0z NGUxLWE2MDMtYjM0MDE1YzU5ZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA4wzjJnGIWACkkK2tiYMW6zTEz722g3yEvDPbojF+zTKZkhGTlJ GEsd0a2mrTsgH0Gz2OsqzoqItkLlphqONutbt4DcujWp8ODLbVT2ixYJvF+8cCBI wuPlaoWF88M4GpIAyy49jv0Hd1U6NmRXi0dQFRoY0yk7Eqn613XPoahaO66QvN6y fky2RqCjnG8YOjFITLFPY8zYSL1pr3AbtWcXvfSocUg0mUZO1HamZx6m3GAH8xLc Ug22z7vJ13yaf3UdEDPNsQVbnzBtcYbYp7bAunsvJLZvz/w22j07WBhWAVZ+O7vL lAEB5k8SGp5iZHSdA8nAh7hccVTFZYXRsyM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:39:03 2026 by rpki-client