$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa File: 186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa (raw, json) Hash identifier: rH7kSAMRMQp7/VAuZDDvhp+zW1a8OgJXUyt9ZPopPRk= Subject key identifier: 87:92:4E:9F:76:C6:6F:82:A3:1F:DF:02:48:FE:0B:A8:EE:04:19:06 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B33D0BD0E5F5B6C594CC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:33:d0:bd:0e:5f:5b:6c:59:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d002dd0d-66d7-4fb4-a4c6-c63897cee0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:38:55:47:3a:0e:92:10:98:ff:42:c5:a4: 77:e1:40:07:c9:a3:ad:3b:50:8c:f4:6e:ec:d9:dc: fa:08:32:2e:16:40:19:06:be:fe:f7:70:64:b1:f5: 75:be:22:c4:73:4f:1b:2d:d6:95:01:80:30:6a:e4: a0:ba:28:e1:4a:a9:4c:b5:fc:8c:a5:39:cf:1e:30: b6:7a:3b:c9:78:04:7f:f9:e7:38:4c:6c:38:68:39: e9:f6:38:fb:85:e2:3e:eb:11:70:9d:9e:ef:ac:5a: e9:22:e1:c8:26:48:b4:7d:18:79:63:04:bb:b9:8c: 92:e8:17:7f:f1:eb:95:8e:81:a5:78:89:72:0a:f4: 93:73:22:fb:0e:7a:76:dc:40:44:81:ad:a0:38:06: a9:41:fe:6a:05:6c:98:ad:a3:08:c9:97:61:ad:55: 8d:3e:4b:a1:71:76:9a:9c:b1:e1:be:a7:f0:c4:07: c4:d4:93:25:9f:85:e6:1c:7e:96:46:16:d2:60:66: 44:0e:f2:bd:68:b1:b1:0b:c6:54:2b:9f:79:e8:2a: 3d:63:3f:05:00:b6:17:ca:bb:8e:fe:23:64:2a:4c: 9f:b9:21:7b:1c:e1:0c:aa:ea:8b:65:90:d4:f8:91: d3:37:57:c7:0c:65:f3:71:39:61:d0:74:2b:fd:b6: 7c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:92:4E:9F:76:C6:6F:82:A3:1F:DF:02:48:FE:0B:A8:EE:04:19:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:8b:e8:87:31:6e:02:c1:d8:ba:7c:92:15:09:af:aa:98:e1: 21:d9:e0:f7:00:55:a4:d6:52:61:ba:0c:8a:de:4d:63:c3:b0: 12:31:20:f5:e8:57:7c:33:bc:b2:df:d3:7b:5c:68:e4:35:0b: 7e:36:80:c7:91:8d:5a:c5:2b:f7:af:e1:96:b2:67:d8:c4:b6: d6:83:cc:f5:1b:9e:58:93:fc:91:94:5f:f8:55:23:79:53:3a: 97:da:71:4f:bc:72:59:5b:0d:11:00:0f:a0:fc:cf:e1:0a:cc: 9f:e7:aa:eb:32:1a:29:6b:88:c1:73:c4:fc:51:59:24:d3:f1: 27:bc:2e:21:a0:89:6a:52:93:55:79:bc:98:ea:90:ab:ad:19: 47:c6:68:2a:cb:e8:62:f1:7f:79:c2:47:11:00:04:38:8c:54: 4c:60:22:d7:90:e2:f1:d0:47:9a:fd:94:16:58:df:b1:30:df: 87:83:3d:9f:a0:82:5b:db:25:dd:fb:c1:66:b8:50:36:8a:4d: 8b:ec:55:00:7d:ef:fa:9d:b9:3f:82:fb:45:5c:60:7f:4b:ab: 1b:39:a3:25:96:bf:f1:d4:0d:75:df:41:f6:50:a2:59:2e:45: c0:c7:90:9e:39:42:2b:84:4a:5c:e3:a1:60:fe:e7:27:92:d6: 48:3a:7e:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FmzPQvQ5fW2xZTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDAwMmRkMGQtNjZkNy00ZmI0LWE0YzYtYzYzODk3Y2VlMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX44VUc6DpIQmP9CxaR34UAHyaOtO1CM9G7s 2dz6CDIuFkAZBr7+93BksfV1viLEc08bLdaVAYAwauSguijhSqlMtfyMpTnPHjC2 ejvJeAR/+ec4TGw4aDnp9jj7heI+6xFwnZ7vrFrpIuHIJki0fRh5YwS7uYyS6Bd/ 8euVjoGleIlyCvSTcyL7Dnp23EBEga2gOAapQf5qBWyYraMIyZdhrVWNPkuhcXaa nLHhvqfwxAfE1JMln4XmHH6WRhbSYGZEDvK9aLGxC8ZUK5956Co9Yz8FALYXyruO /iNkKkyfuSF7HOEMquqLZZDU+JHTN1fHDGXzcTlh0HQr/bZ8cQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIeSTp92xm+Cox/fAkj+C6juBBkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTg2ZTA1NjktNzUwOS0z ZWIwLTliMmUtM2RjZjJkZWE4ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSL6IcxbgLB2Lp8khUJr6qY4SHZ4PcAVaTWUmG6DIreTWPDsBIx IPXoV3wzvLLf03tcaOQ1C342gMeRjVrFK/ev4ZayZ9jEttaDzPUbnliT/JGUX/hV I3lTOpfacU+8cllbDREAD6D8z+EKzJ/nqusyGilriMFzxPxRWSTT8Se8LiGgiWpS k1V5vJjqkKutGUfGaCrL6GLxf3nCRxEABDiMVExgIteQ4vHQR5r9lBZY37Ew34eD PZ+gglvbJd37wWa4UDaKTYvsVQB97/qduT+C+0VcYH9Lqxs5oyWWv/HUDXXfQfZQ olkuRcDHkJ45QiuESlzjoWD+5yeS1kg6fuo= -----END CERTIFICATE-----Generated at Sat Jun 13 18:31:51 2026 by rpki-client