$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa File: 14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa (raw, json) Hash identifier: iXnvWK4ybTTkYg1cpomUGnpmlc0tErUuQE+NoV94cHI= Subject key identifier: D3:D6:E7:18:01:23:AA:21:70:32:37:64:7D:D1:B8:13:4F:A4:00:CD Certificate issuer: /CN=cb49febe-7885-4a3a-8290-3710b3f34905 Certificate serial: 010D0C9F4328584E50849D40544AFC1EFDC284C0 Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 376 IP address blocks: 2001:510:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:9d:40:54:4a:fc:1e:fd:c2:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=1f61b23b-2e67-47f3-95f7-8d19acc3dcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:f5:60:7a:67:ab:56:d9:6f:53:6c:97:b0: 23:0f:c8:2c:5d:ab:f4:e1:4f:85:1d:1e:b9:4d:d5: e0:f2:b0:86:58:04:9a:37:e1:d5:35:3f:a0:d3:ed: 92:d1:84:76:89:63:03:8c:b7:27:3b:a4:91:5e:48: 4f:f3:b1:ab:a8:ec:3c:4c:41:c2:fa:f0:9d:a9:ff: 7e:eb:d6:c5:ed:72:9c:19:48:90:3e:62:11:8b:de: bb:0f:81:38:00:d5:fa:fd:1c:bb:2d:fa:9c:5e:69: 4f:be:ca:e6:f7:29:34:64:6f:4c:7e:d4:df:f7:80: 60:16:36:b2:eb:dd:c8:0e:fb:21:da:bb:50:2d:5a: 2e:0d:81:f1:04:d4:ad:81:b2:e4:aa:0b:e9:8d:84: 99:5c:59:0b:43:0e:e0:43:37:ae:69:94:26:11:55: b4:c8:02:55:46:e6:c7:71:79:21:96:ba:5e:dd:8d: 22:2c:78:a0:d0:bf:b8:27:e8:3e:a5:52:f3:31:27: 87:cb:6f:fc:0b:22:58:32:e4:18:13:ce:51:83:60: 9d:e1:6d:d2:37:a5:dd:38:7f:54:fe:af:25:cf:b1: f7:c2:58:87:16:33:ed:a7:d8:f8:f7:20:fa:d7:6b: c8:61:88:94:43:01:85:bd:e1:30:9f:ff:07:33:f0: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D6:E7:18:01:23:AA:21:70:32:37:64:7D:D1:B8:13:4F:A4:00:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl X509v3 Authority Key Identifier: keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer sbgp-ipAddrBlock: critical IPv6: 2001:510:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:20:32:ea:a6:23:2a:79:a5:7c:60:f3:48:09:73:f4:ba:20: 77:7a:5f:f2:e7:64:6d:c5:e5:b8:24:51:f8:c8:25:95:24:31: bb:d6:a7:19:1d:11:52:f0:ec:a2:8f:4a:42:c5:75:3b:90:88: 09:41:99:95:82:06:3d:41:70:d2:6b:a1:c9:21:14:6a:b8:97: 9d:b5:eb:ac:2d:e7:a2:23:8a:0d:40:68:3b:9e:26:3c:32:f5: a2:96:b9:69:20:b3:f6:11:fb:aa:21:2f:87:4f:fe:0a:99:64: d6:c0:28:af:57:fc:86:f1:96:4f:10:ae:d1:e7:6a:42:21:8b: 42:ab:ca:5f:23:c8:e2:bf:02:9c:3c:c1:bf:89:39:c4:51:c5: a3:db:99:69:64:be:c6:08:d2:e0:bc:28:52:a4:af:a6:83:11: de:39:be:d3:46:07:3f:0c:8b:01:ef:52:81:cc:4e:10:29:aa: 95:13:13:d6:f0:4f:75:e9:e8:83:82:92:60:45:d2:8b:c9:56: ec:b7:a4:35:55:46:e6:04:de:75:84:1e:e2:be:52:38:d7:ed: 1c:5c:18:0f:65:ce:a6:4e:60:05:53:13:e7:d0:d3:a6:7a:de: 4d:5a:63:eb:5c:2e:32:77:61:c3:b7:18:62:e9:58:62:9b:dd: b4:4f:20:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5QhJ1AVEr8Hv3ChMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OWZlYmUtNzg4NS00YTNhLTgyOTAtMzcxMGIzZjM0 OTA1MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk MWY2MWIyM2ItMmU2Ny00N2YzLTk1ZjctOGQxOWFjYzNkY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmT1YHpnq1bZb1Nsl7AjD8gsXav04U+FHR65 TdXg8rCGWASaN+HVNT+g0+2S0YR2iWMDjLcnO6SRXkhP87GrqOw8TEHC+vCdqf9+ 69bF7XKcGUiQPmIRi967D4E4ANX6/Ry7LfqcXmlPvsrm9yk0ZG9MftTf94BgFjay 693IDvsh2rtQLVouDYHxBNStgbLkqgvpjYSZXFkLQw7gQzeuaZQmEVW0yAJVRubH cXkhlrpe3Y0iLHig0L+4J+g+pVLzMSeHy2/8CyJYMuQYE85Rg2Cd4W3SN6XdOH9U /q8lz7H3wliHFjPtp9j49yD612vIYYiUQwGFveEwn/8HM/A3IQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPW5xgBI6ohcDI3ZH3RuBNPpADNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5 ZmViZS03ODg1LTRhM2EtODI5MC0zNzEwYjNmMzQ5MDUvMTRiNmIwZTQtOGM1MC0z YThkLWI3MjEtMGY0MDIzYTBjNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2I0OWZlYmUtNzg4NS00YTNhLTgy OTAtMzcxMGIzZjM0OTA1L2NiNDlmZWJlLTc4ODUtNGEzYS04MjkwLTM3MTBiM2Yz NDkwNS5jcmwwHwYDVR0jBBgwFoAUvOGzZkw5m0aMDRmG67KX3JfQGd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5ZmViZS03ODg1LTRhM2EtODI5MC0zNzEw YjNmMzQ5MDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFEAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGEgMuqmIyp5pXxg80gJc/S6IHd6X/LnZG3F5bgkUfjIJZUkMbvW pxkdEVLw7KKPSkLFdTuQiAlBmZWCBj1BcNJrockhFGq4l52166wt56Ijig1AaDue Jjwy9aKWuWkgs/YR+6ohL4dP/gqZZNbAKK9X/Ibxlk8QrtHnakIhi0Kryl8jyOK/ Apw8wb+JOcRRxaPbmWlkvsYI0uC8KFKkr6aDEd45vtNGBz8MiwHvUoHMThApqpUT E9bwT3Xp6IOCkmBF0ovJVuy3pDVVRuYE3nWEHuK+UjjX7RxcGA9lzqZOYAVTE+fQ 06Z63k1aY+tcLjJ3YcO3GGLpWGKb3bRPIEg= -----END CERTIFICATE-----Generated at Sun Jun 28 19:33:42 2026 by rpki-client