$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f18c1bc1-26fd-3786-9db6-3e39337100af.roa File: f18c1bc1-26fd-3786-9db6-3e39337100af.roa (raw, json) Hash identifier: wxUVU2OXHfMJ6kt34HnQxZu2SJks5kRAhwzjuc/11LM= Subject key identifier: 17:ED:CA:10:8B:F1:17:48:B8:5B:3D:CD:3E:E5:5F:C4:7C:67:5B:5D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E11AAEB0790B995E54F080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f18c1bc1-26fd-3786-9db6-3e39337100af.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1a:ae:b0:79:0b:99:5e:54:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=40fe80b4-2bb2-4c83-987b-6267ebc07a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:3b:b6:be:3f:25:64:b9:af:e8:a1:fa:dc: 0d:53:5f:1c:32:32:fa:3c:4c:1f:e1:2e:0c:71:26: 11:b8:97:64:79:9e:16:ab:75:49:24:46:70:34:6c: 0e:64:18:13:f3:a1:38:f5:b5:8c:b9:bb:bb:87:85: 36:bb:b7:f8:88:31:08:a5:90:33:cd:52:13:bd:1c: f3:ae:db:4d:36:c7:33:7f:09:b9:79:7e:df:1f:0d: 07:6e:53:4b:1a:48:41:ce:1b:f6:7e:9c:31:a3:a9: 7e:9a:66:db:45:0d:89:a5:7c:58:ee:58:43:f8:89: 98:4d:bc:c4:8e:86:ab:b6:99:7f:e8:30:f9:33:31: c5:2c:5f:82:51:2a:c3:26:97:12:e5:e9:33:74:53: 65:90:18:2a:77:51:72:a2:50:eb:6f:d5:c4:1b:7c: 7c:3f:c9:fe:38:b1:61:7d:e9:ab:a4:25:d9:ac:7e: 1c:ee:cf:d3:06:90:48:bb:36:57:ec:d9:9c:b9:21: 02:4c:47:60:91:c2:ea:fc:1e:32:e6:73:87:fa:34: ea:1d:4f:2e:36:5e:25:2b:26:19:d9:67:47:ef:44: 40:bd:21:22:f9:4c:fb:39:4e:64:f0:c2:e7:10:8a: ca:a6:a2:61:12:18:ab:c3:b8:98:8b:62:e2:e4:45: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:ED:CA:10:8B:F1:17:48:B8:5B:3D:CD:3E:E5:5F:C4:7C:67:5B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f18c1bc1-26fd-3786-9db6-3e39337100af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:19::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:37:33:59:7c:02:79:4f:41:3a:1d:e7:f7:a4:7c:06:21:4e: c1:cf:19:79:e4:db:ea:27:b2:f5:88:31:40:74:51:75:9d:83: 54:00:33:b3:59:3d:10:ae:2c:51:75:ed:f5:e6:03:24:da:11: 59:14:f1:f6:62:ae:8b:9a:e5:09:88:3d:ae:6b:92:c6:b4:32: 35:b6:49:50:5f:af:a3:c5:57:02:c9:68:13:6a:71:d9:29:55: 26:5a:0b:ae:8d:7a:c9:7c:77:d3:c8:62:1e:d7:93:fb:df:1d: 2a:d0:f1:b3:02:c6:0f:55:0a:5f:e3:c1:44:97:5c:ed:55:ac: 9b:f8:c4:e0:78:37:19:95:8f:b8:bb:c4:2d:6d:66:ea:00:0e: b7:5b:d5:39:d4:65:5b:f5:ca:98:9c:c9:00:24:e0:5d:b0:86: a9:89:1d:c6:0e:5a:8d:2b:cd:81:ac:29:8c:46:4b:e8:48:1f: 89:85:c1:07:b7:6b:38:2d:32:82:dc:24:d9:a7:f6:29:e2:e8: 62:b8:72:ea:c4:d9:e1:c5:a1:dd:3b:f7:6c:f9:e9:9e:6f:c3: d4:b1:1a:20:8b:7f:9a:b8:c7:8b:3c:13:bf:ba:09:17:70:4f: 69:8f:d7:e4:0a:d0:8d:f0:72:7d:cf:c6:d8:0d:22:08:e9:ec: eb:b2:ae:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4RqusHkLmV5U8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDBmZTgwYjQtMmJiMi00YzgzLTk4N2ItNjI2N2ViYzA3YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM87tr4/JWS5r+ih+twNU18cMjL6PEwf4S4M cSYRuJdkeZ4Wq3VJJEZwNGwOZBgT86E49bWMubu7h4U2u7f4iDEIpZAzzVITvRzz rttNNsczfwm5eX7fHw0HblNLGkhBzhv2fpwxo6l+mmbbRQ2JpXxY7lhD+ImYTbzE joartpl/6DD5MzHFLF+CUSrDJpcS5ekzdFNlkBgqd1FyolDrb9XEG3x8P8n+OLFh femrpCXZrH4c7s/TBpBIuzZX7NmcuSECTEdgkcLq/B4y5nOH+jTqHU8uNl4lKyYZ 2WdH70RAvSEi+Uz7OU5k8MLnEIrKpqJhEhirw7iYi2Li5EVhkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBftyhCL8RdIuFs9zT7lX8R8Z1tdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjE4YzFiYzEtMjZmZC0z Nzg2LTlkYjYtM2UzOTMzNzEwMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB83M1l8AnlPQTod5/ekfAYhTsHPGXnk2+onsvWIMUB0UXWdg1QA M7NZPRCuLFF17fXmAyTaEVkU8fZiroua5QmIPa5rksa0MjW2SVBfr6PFVwLJaBNq cdkpVSZaC66Nesl8d9PIYh7Xk/vfHSrQ8bMCxg9VCl/jwUSXXO1VrJv4xOB4NxmV j7i7xC1tZuoADrdb1TnUZVv1ypicyQAk4F2whqmJHcYOWo0rzYGsKYxGS+hIH4mF wQe3azgtMoLcJNmn9ini6GK4curE2eHFod0792z56Z5vw9SxGiCLf5q4x4s8E7+6 CRdwT2mP1+QK0I3wcn3PxtgNIgjp7Ouyro0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:28 2026 by rpki-client