$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fcc6c6b5-77f6-31ec-9613-3fe17b0dca0d.roa File: fcc6c6b5-77f6-31ec-9613-3fe17b0dca0d.roa (raw, json) Hash identifier: O2hY1KcwWLA7+2ZvWnZFQ8ZIiUvSVfH9sK3nCtketIU= Subject key identifier: FC:46:89:77:9F:AA:AA:7C:79:AA:B6:F7:23:10:62:B2:35:0A:F9:62 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E12FC9C640DF5690350908 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fcc6c6b5-77f6-31ec-9613-3fe17b0dca0d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2f:c9:c6:40:df:56:90:35:09:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cb1212ea-15ee-4c15-b7d0-f0d76f3024dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:cc:45:ba:4e:14:76:3c:8e:03:03:31:15: 0d:61:ba:88:d1:06:3d:1e:66:87:3a:97:40:e8:d1: f2:3f:5f:3d:e6:bf:91:7e:11:04:e5:6b:9f:08:3d: 24:ec:8f:b5:5f:ba:35:51:a5:64:41:09:7a:ac:a5: 65:08:e0:22:2a:65:3c:d0:6e:ce:95:9f:6f:be:47: a9:41:af:73:30:38:60:18:ff:84:0a:61:ad:30:d6: 43:b9:b7:09:45:66:13:71:e1:e0:9a:5d:65:64:76: 0c:1a:92:10:ca:a9:0a:02:ec:0c:37:79:76:62:27: 4f:21:14:a6:4c:f5:1a:bf:14:a1:55:d9:6a:e2:eb: d9:6e:83:87:30:fd:67:42:24:e3:e1:be:c2:54:39: 81:57:68:75:3a:25:0e:bd:60:38:1a:f0:da:9d:0c: e3:c8:2c:55:ae:af:8b:0c:fe:b2:92:8c:8d:1e:b1: 77:c5:46:81:f6:5d:34:74:50:62:4f:47:4f:44:8e: b1:4f:e3:a4:64:c9:49:1e:f1:f1:09:b3:3a:f8:c0: 9d:6c:ea:28:11:63:64:74:63:15:9b:16:64:e0:3b: 96:d6:59:b7:d9:f1:33:a9:03:e3:62:67:bc:64:a4: 62:a7:f3:e4:c6:1b:d6:e7:9d:93:8b:63:82:42:0a: 86:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:46:89:77:9F:AA:AA:7C:79:AA:B6:F7:23:10:62:B2:35:0A:F9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fcc6c6b5-77f6-31ec-9613-3fe17b0dca0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:87:a8:5a:d9:22:b7:72:04:9d:cd:13:9c:35:9b:d1:a3:c5: 0f:0b:83:65:db:68:64:e7:d6:b9:15:f0:27:52:39:ad:c1:9c: a7:b0:54:77:89:15:b8:bd:a6:59:c0:07:e8:f2:a7:d1:ab:04: 85:a1:fe:70:f7:17:ff:72:a6:e5:22:91:28:53:64:97:60:92: bc:ba:0a:05:84:4a:b4:85:7a:b6:bd:52:8d:3c:41:3f:16:10: e8:0c:8d:6b:8c:66:de:b4:b7:16:0d:6a:e4:53:33:4c:06:e9: af:e8:e2:eb:df:59:56:94:6d:7a:95:a0:b9:f3:69:f7:02:84: c9:8e:98:b4:c7:cd:a7:93:50:f0:b8:b9:3a:8e:14:e6:a4:4d: 21:c0:6c:26:0b:4f:ba:cd:1c:28:e4:20:1e:6a:5f:22:f1:00: 9a:de:d6:4e:50:c2:e5:9b:f1:46:77:52:47:3f:d2:40:24:24: c2:93:a1:f9:14:5d:20:fc:a6:81:5b:43:9b:58:70:69:22:3a: 05:6c:d6:c1:59:ec:8d:d1:9a:89:7e:74:bb:c9:05:d2:f7:ec: 2b:c5:79:22:3d:8b:61:32:d9:99:dc:d3:08:2f:af:11:54:69: 0d:f3:75:e5:e7:a5:4c:24:79:c8:9e:5c:0b:e9:8c:99:44:ab: 12:ba:6a:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4S/JxkDfVpA1CQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2IxMjEyZWEtMTVlZS00YzE1LWI3ZDAtZjBkNzZmMzAyNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyPMRbpOFHY8jgMDMRUNYbqI0QY9HmaHOpdA 6NHyP1895r+RfhEE5WufCD0k7I+1X7o1UaVkQQl6rKVlCOAiKmU80G7OlZ9vvkep Qa9zMDhgGP+ECmGtMNZDubcJRWYTceHgml1lZHYMGpIQyqkKAuwMN3l2YidPIRSm TPUavxShVdlq4uvZboOHMP1nQiTj4b7CVDmBV2h1OiUOvWA4GvDanQzjyCxVrq+L DP6ykoyNHrF3xUaB9l00dFBiT0dPRI6xT+OkZMlJHvHxCbM6+MCdbOooEWNkdGMV mxZk4DuW1lm32fEzqQPjYme8ZKRip/PkxhvW552Ti2OCQgqGCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPxGiXefqqp8eaq29yMQYrI1CvliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmNjNmM2YjUtNzdmNi0z MWVjLTk2MTMtM2ZlMTdiMGRjYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKHqFrZIrdyBJ3NE5w1m9GjxQ8Lg2XbaGTn1rkV8CdSOa3BnKew VHeJFbi9plnAB+jyp9GrBIWh/nD3F/9ypuUikShTZJdgkry6CgWESrSFera9Uo08 QT8WEOgMjWuMZt60txYNauRTM0wG6a/o4uvfWVaUbXqVoLnzafcChMmOmLTHzaeT UPC4uTqOFOakTSHAbCYLT7rNHCjkIB5qXyLxAJre1k5QwuWb8UZ3Ukc/0kAkJMKT ofkUXSD8poFbQ5tYcGkiOgVs1sFZ7I3Rmol+dLvJBdL37CvFeSI9i2Ey2Znc0wgv rxFUaQ3zdeXnpUwkecieXAvpjJlEqxK6au8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:48 2026 by rpki-client