$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f10f2c59-a99e-36fc-b530-00baef18ece2.roa File: f10f2c59-a99e-36fc-b530-00baef18ece2.roa (raw, json) Hash identifier: wLh47y9/llZ9dpRyS2WxF95VCHL29C5ZmT3KCXYA0is= Subject key identifier: 92:1A:CB:71:4B:C5:19:50:A6:58:0E:FD:49:B9:AB:4A:51:0A:86:96 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E1249F463A50B25D9F5102 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f10f2c59-a99e-36fc-b530-00baef18ece2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:4b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:24:9f:46:3a:50:b2:5d:9f:51:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2a01b33e-882e-4029-bf88-670768141620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:29:bb:c8:47:f3:a5:86:ae:77:ba:74:21:f1: df:ca:c6:69:05:b8:d7:59:41:e0:8e:3a:77:8f:97: f7:ef:0e:f7:90:75:f6:02:01:e6:1b:2c:59:13:34: 2c:0f:54:71:3b:96:da:e3:65:bd:30:ba:06:25:3e: 68:16:b1:5c:31:05:41:c4:8c:09:1d:a5:d0:5f:03: 4f:c5:db:4a:6e:ce:62:97:cb:b1:85:cb:12:cd:91: 33:df:33:f1:e8:8e:98:af:99:11:90:da:7e:85:f9: 38:72:fe:b8:99:fa:ae:ca:b4:d4:81:42:f5:ba:f8: 5a:e4:c4:07:62:44:99:5e:0c:08:0a:fb:78:87:1f: 89:0f:b5:37:50:d5:e8:a9:03:43:e5:92:00:d8:f5: 2d:a7:aa:53:54:0c:26:dd:27:7f:a0:51:f7:64:b2: d1:2f:9d:6e:33:81:5d:4b:96:9b:46:d6:26:a5:8d: eb:3a:d8:84:79:a9:fc:55:41:d1:2c:08:65:dd:a1: 3d:f7:e5:ea:a9:4d:a1:39:dc:4b:8c:c0:1d:63:63: d6:db:fe:b5:8b:90:07:21:fc:ae:94:e5:05:2a:35: 69:21:0c:f2:f0:e4:78:be:d2:44:f1:34:be:42:59: e0:a0:c3:12:df:d1:4e:a6:5f:c9:5c:ea:1e:8d:de: ad:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1A:CB:71:4B:C5:19:50:A6:58:0E:FD:49:B9:AB:4A:51:0A:86:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f10f2c59-a99e-36fc-b530-00baef18ece2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:68:0a:d9:23:23:d0:e3:04:ee:00:c8:93:f9:24:86:43:5d: 9b:e7:c7:35:31:ac:17:ce:4a:f6:53:80:0d:e3:ef:76:c7:65: 09:e0:31:6a:22:4f:50:00:13:00:34:0d:3b:68:3c:6e:76:3c: 8c:a0:83:a2:b5:b4:5c:12:b3:0f:98:8e:79:cf:be:8b:c6:90: fc:6a:84:d7:b1:4b:8c:ac:00:01:40:aa:4d:b0:79:3e:11:e8: ea:13:f1:cc:aa:af:b3:88:af:a5:c2:45:c8:53:de:45:c8:19: eb:49:56:b2:9b:4d:e4:8d:53:d6:ee:19:02:64:ff:62:f0:ae: bf:c4:63:69:37:83:b6:d9:dc:78:25:76:a2:a7:c0:20:51:f2: 18:84:ef:57:ab:a8:45:c5:b2:38:60:c7:bc:18:a6:e2:b3:03: 8f:45:b8:0b:e5:39:74:28:dd:1d:a0:2a:60:d8:ea:3c:d9:d4: cd:f4:09:f6:11:8a:2e:07:0a:66:f7:26:9a:f3:21:cb:a1:46: e9:44:44:cc:84:65:10:fe:b6:22:e2:31:0c:d5:9c:f9:ce:67: f2:ff:2b:b8:12:d0:e0:d2:8a:16:53:1f:2e:0c:53:b9:8f:e7: 1c:a6:d4:22:42:47:d3:3c:16:c3:f9:db:40:66:a6:63:17:72: 73:dc:dd:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4SSfRjpQsl2fUQIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmEwMWIzM2UtODgyZS00MDI5LWJmODgtNjcwNzY4MTQxNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySm7yEfzpYaud7p0IfHfysZpBbjXWUHgjjp3 j5f37w73kHX2AgHmGyxZEzQsD1RxO5ba42W9MLoGJT5oFrFcMQVBxIwJHaXQXwNP xdtKbs5il8uxhcsSzZEz3zPx6I6Yr5kRkNp+hfk4cv64mfquyrTUgUL1uvha5MQH YkSZXgwICvt4hx+JD7U3UNXoqQND5ZIA2PUtp6pTVAwm3Sd/oFH3ZLLRL51uM4Fd S5abRtYmpY3rOtiEean8VUHRLAhl3aE99+XqqU2hOdxLjMAdY2PW2/61i5AHIfyu lOUFKjVpIQzy8OR4vtJE8TS+QlngoMMS39FOpl/JXOoejd6teQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJIay3FLxRlQplgO/Um5q0pRCoaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjEwZjJjNTktYTk5ZS0z NmZjLWI1MzAtMDBiYWVmMThlY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIhoCtkjI9DjBO4AyJP5JIZDXZvnxzUxrBfOSvZTgA3j73bHZQng MWoiT1AAEwA0DTtoPG52PIygg6K1tFwSsw+YjnnPvovGkPxqhNexS4ysAAFAqk2w eT4R6OoT8cyqr7OIr6XCRchT3kXIGetJVrKbTeSNU9buGQJk/2Lwrr/EY2k3g7bZ 3HgldqKnwCBR8hiE71erqEXFsjhgx7wYpuKzA49FuAvlOXQo3R2gKmDY6jzZ1M30 CfYRii4HCmb3JprzIcuhRulERMyEZRD+tiLiMQzVnPnOZ/L/K7gS0ODSihZTHy4M U7mP5xym1CJCR9M8FsP520BmpmMXcnPc3Yw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:53 2026 by rpki-client