$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa File: f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa (raw, json) Hash identifier: pgQ6Yr7gayMM3qCt95/BAsDXMgHewtQhm9aQjMarsDA= Subject key identifier: 9D:89:EA:38:0A:29:6C:85:24:A6:E9:B0:8F:CD:1F:D5:C5:13:9F:D4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E116C33C14429E11225920 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:16:c3:3c:14:42:9e:11:22:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c0dbf9d2-3f6f-452f-9378-f992cc58a83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:4e:5e:fb:94:ea:3c:fa:5d:73:0b:39:80: 5e:87:58:1c:63:aa:cc:8c:8f:e5:fd:2f:f4:82:c7: 72:16:eb:03:fd:7e:d0:5e:2c:2f:8a:47:67:7e:ce: e5:e4:55:ab:71:60:93:6a:2d:84:e2:39:ce:cc:a7: af:b2:08:3f:b9:47:0c:c6:84:d8:3d:45:4a:70:98: a6:7c:22:da:d9:0d:d9:bd:da:77:00:df:a8:45:7f: ce:08:52:6d:e7:b2:4d:9c:43:b0:9e:df:f1:8a:c5: 39:7c:be:68:83:f2:d0:b9:d6:20:ce:f1:d7:09:4d: a2:a0:cd:57:22:64:32:c3:4c:d7:9f:d1:61:fc:5f: 6b:a2:e0:49:ca:ad:a3:5b:fd:ef:1f:08:02:4d:8b: 6f:7c:fe:c0:2d:46:41:43:c1:f1:4c:cc:e2:43:94: a2:3d:a5:9f:ce:ce:c3:7e:3c:df:4a:be:7f:4b:14: b8:a6:2b:88:d2:4c:92:18:3b:32:37:fe:84:dd:2f: 32:28:9a:2b:87:de:65:b2:4a:be:d0:02:9f:47:e6: f5:2e:77:47:f1:85:5c:0c:6a:4c:06:12:58:99:bc: be:97:4c:7e:ab:d4:ce:ef:8c:46:27:b3:21:b7:b8: 2e:b2:de:06:f9:84:f7:b0:09:ff:a7:55:d2:2f:54: 3f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:89:EA:38:0A:29:6C:85:24:A6:E9:B0:8F:CD:1F:D5:C5:13:9F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c1:f8:3c:e2:7f:9c:ee:ca:69:0b:96:e2:48:4c:36:13:bc: 4f:ee:40:9d:9c:14:74:ab:53:dd:94:7d:9f:bc:25:67:ea:45: 72:cd:d5:1b:a1:e8:a0:54:e8:de:ee:0b:c4:ca:7d:9e:70:50: a1:ee:4a:46:f5:74:1f:6f:1e:cb:7b:96:88:f6:f9:82:e5:82: fe:b4:ee:01:f3:3a:87:e8:76:4f:10:9b:e0:fe:5b:af:93:4d: 6b:b2:b9:23:99:41:b1:7b:f1:7c:36:c1:2b:66:30:4c:b1:ca: b2:74:57:6f:86:e8:4f:64:34:1e:5f:87:a8:98:9f:34:7a:08: 38:51:a8:f2:38:c3:19:bb:96:d2:43:6b:e0:e3:cb:35:1b:1a: 00:89:a7:72:f1:3f:c3:15:63:0f:09:30:48:93:b0:2a:b3:9f: 6c:c3:92:db:f9:88:af:83:0d:20:2e:c6:a8:dc:c2:f2:a2:78: 5e:46:1e:65:5b:37:29:71:34:a2:24:e3:42:4d:c5:f5:58:de: 89:e5:fa:bb:49:e8:24:cd:14:d6:a2:35:05:39:9c:e7:6e:8f: 70:74:0c:1e:72:27:d1:95:e1:36:59:d7:39:c1:50:c6:bd:88: bd:2b:b2:16:4b:3b:2f:4e:7d:c5:ab:7d:81:dd:4d:1f:bc:bd: c5:a5:6c:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4RbDPBRCnhEiWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzBkYmY5ZDItM2Y2Zi00NTJmLTkzNzgtZjk5MmNjNThhODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEhOXvuU6jz6XXMLOYBeh1gcY6rMjI/l/S/0 gsdyFusD/X7QXiwvikdnfs7l5FWrcWCTai2E4jnOzKevsgg/uUcMxoTYPUVKcJim fCLa2Q3Zvdp3AN+oRX/OCFJt57JNnEOwnt/xisU5fL5og/LQudYgzvHXCU2ioM1X ImQyw0zXn9Fh/F9rouBJyq2jW/3vHwgCTYtvfP7ALUZBQ8HxTMziQ5SiPaWfzs7D fjzfSr5/SxS4piuI0kySGDsyN/6E3S8yKJorh95lskq+0AKfR+b1LndH8YVcDGpM BhJYmby+l0x+q9TO74xGJ7Mht7gust4G+YT3sAn/p1XSL1Q/cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ2J6jgKKWyFJKbpsI/NH9XFE5/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjA4MjExNmEtNGMxZC0z Y2QyLTg1ZTEtMmMyODNhMmQxYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF3B+Dzif5zuymkLluJITDYTvE/uQJ2cFHSrU92UfZ+8JWfqRXLN 1Ruh6KBU6N7uC8TKfZ5wUKHuSkb1dB9vHst7loj2+YLlgv607gHzOofodk8Qm+D+ W6+TTWuyuSOZQbF78Xw2wStmMEyxyrJ0V2+G6E9kNB5fh6iYnzR6CDhRqPI4wxm7 ltJDa+DjyzUbGgCJp3LxP8MVYw8JMEiTsCqzn2zDktv5iK+DDSAuxqjcwvKieF5G HmVbNylxNKIk40JNxfVY3onl+rtJ6CTNFNaiNQU5nOduj3B0DB5yJ9GV4TZZ1znB UMa9iL0rshZLOy9OfcWrfYHdTR+8vcWlbIM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:12 2026 by rpki-client