$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa File: ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa (raw, json) Hash identifier: h4lOIjZBfOut2o4qaLaVXdjiBS1T7Fe6+DIZhPJUsvM= Subject key identifier: 01:91:77:9C:CC:35:D1:04:CD:8F:5A:16:22:5C:30:BD:B8:88:9E:5A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D24E131488687834FC3060780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 12041 IP address blocks: 2001:500:d6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:31:48:86:87:83:4f:c3:06:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=816577d9-68f1-42fa-99d4-d4474a9f0f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:93:fc:1c:76:20:7c:d7:32:1e:a6:18:f3:ad: 45:71:22:63:a7:a3:fb:36:17:27:65:31:84:74:88: 3b:85:4a:12:90:02:27:a0:74:07:3e:eb:b0:cf:14: 3c:ec:b0:a1:2a:ec:d2:3d:30:22:e1:ea:1b:66:7d: e4:8a:21:4b:d9:b0:70:50:99:cb:b4:50:d9:cb:50: b1:38:6b:1a:e1:01:58:d6:63:2f:b6:92:d8:9c:c9: 1f:4b:90:bd:1a:e9:87:d9:f1:39:94:69:cb:b7:c7: 8b:0c:93:b9:50:bf:75:cf:74:29:01:b4:e4:09:e9: 26:f3:9a:33:97:81:ae:68:87:a2:34:91:1b:e0:9d: c0:96:5d:e6:5b:d0:60:e8:0e:25:43:1b:06:cd:07: 3f:7e:f0:99:13:4c:72:ef:51:15:2d:c4:a6:ee:57: a1:9c:2b:8a:12:a4:42:a4:f8:a5:0d:13:7c:12:08: 13:65:94:a6:94:40:1c:5e:67:a9:08:ee:71:69:49: 2f:68:74:28:37:02:15:31:d7:1f:2e:b9:36:81:8a: 5a:b1:9d:42:08:5f:e8:99:2c:cf:6f:5e:99:2b:bd: 86:0c:2e:48:16:c7:9a:5d:b0:5e:fd:81:68:4d:27: ae:4b:35:00:f2:e5:c5:8a:43:6c:88:cf:43:d3:0a: 8b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:91:77:9C:CC:35:D1:04:CD:8F:5A:16:22:5C:30:BD:B8:88:9E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:85:d7:22:b5:6f:05:d5:75:60:b9:ed:80:bb:07:cb:04:4e: d0:eb:f4:69:8b:40:23:b3:e4:f0:fa:05:30:6c:e8:2d:7d:aa: dd:fd:30:a0:62:57:cf:ba:11:a1:af:95:0a:ec:0c:ae:8b:0f: 35:ed:58:ce:4c:0b:48:4c:76:4d:27:f7:91:34:b7:bc:d6:da: 1b:29:6a:fe:e8:f3:44:17:d0:70:9f:c1:33:c3:38:08:ab:d8: 66:e1:06:5c:16:d3:fe:1e:fb:45:26:d3:2c:e7:d0:a1:2b:54: ab:49:a1:ec:80:96:29:91:67:5e:8c:02:71:60:ab:67:fe:6e: 41:6b:be:9e:2b:bb:b2:c4:02:b1:a4:cb:66:33:39:35:7a:d3: b7:e2:8f:b3:95:9f:93:3d:39:9f:46:2a:e3:ce:87:5c:56:cc: 09:ae:dd:5f:6d:c9:2b:64:81:9b:8f:a9:57:08:84:0b:05:ca: d4:a0:a1:b9:00:58:c3:e7:f2:a9:99:e0:89:0b:ec:8c:6d:15: d9:c3:58:78:de:19:10:d1:77:73:f2:d7:e3:c1:8c:0c:dc:0c: fe:a0:50:5c:73:b8:ae:3c:7d:f7:4a:b4:20:64:44:da:11:b9: 7b:3a:5f:0a:ef:23:ba:4a:ac:c9:cd:91:13:f3:a1:3c:39:27: 90:b6:6f:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4TFIhoeDT8MGB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODE2NTc3ZDktNjhmMS00MmZhLTk5ZDQtZDQ0NzRhOWYwZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5P8HHYgfNcyHqYY861FcSJjp6P7NhcnZTGE dIg7hUoSkAInoHQHPuuwzxQ87LChKuzSPTAi4eobZn3kiiFL2bBwUJnLtFDZy1Cx OGsa4QFY1mMvtpLYnMkfS5C9GumH2fE5lGnLt8eLDJO5UL91z3QpAbTkCekm85oz l4GuaIeiNJEb4J3All3mW9Bg6A4lQxsGzQc/fvCZE0xy71EVLcSm7lehnCuKEqRC pPilDRN8EggTZZSmlEAcXmepCO5xaUkvaHQoNwIVMdcfLrk2gYpasZ1CCF/omSzP b16ZK72GDC5IFseaXbBe/YFoTSeuSzUA8uXFikNsiM9D0wqLfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAGRd5zMNdEEzY9aFiJcML24iJ5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmY5NWM2ZWUtNjIwNi0z YzQ4LWE4ZmQtZGRlMmE1NmI2NzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB+F1yK1bwXVdWC57YC7B8sETtDr9GmLQCOz5PD6BTBs6C19qt39 MKBiV8+6EaGvlQrsDK6LDzXtWM5MC0hMdk0n95E0t7zW2hspav7o80QX0HCfwTPD OAir2GbhBlwW0/4e+0Um0yzn0KErVKtJoeyAlimRZ16MAnFgq2f+bkFrvp4ru7LE ArGky2YzOTV607fij7OVn5M9OZ9GKuPOh1xWzAmu3V9tyStkgZuPqVcIhAsFytSg obkAWMPn8qmZ4IkL7IxtFdnDWHjeGRDRd3Py1+PBjAzcDP6gUFxzuK48ffdKtCBk RNoRuXs6XwrvI7pKrMnNkRPzoTw5J5C2b70= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:55 2026 by rpki-client