$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa File: 1dba6855-d043-3318-9f5b-e0247f7172d4.roa (raw, json) Hash identifier: NFNjlbTF/OAsDwrm5HIHtA6FXRALiMMtHYrVhmNI7IQ= Subject key identifier: DD:F1:3F:DB:72:1A:CA:AA:BC:BD:B9:FE:75:C1:0C:E3:E1:71:3F:1F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B434B8309B610BE8DD280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:43:4b:83:09:b6:10:be:8d:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=51a8d624-e13b-4d48-a2f8-7931e94c70d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b4:55:71:b7:04:b9:d4:a0:2d:14:da:54:fc: ae:97:0d:a5:51:6f:c6:12:e8:1b:d5:d4:c4:93:89: b2:c0:f8:12:2c:c0:12:a4:e9:e7:1a:85:d1:c5:63: 35:72:90:d2:4d:49:15:35:b1:2e:8c:a1:a0:25:ed: 6b:49:42:bb:b1:55:57:9a:d8:f4:06:d6:7c:15:ef: ee:5e:0a:3d:bf:76:45:ae:ac:00:83:c6:1d:0e:be: fe:ad:29:a6:d6:00:a3:6e:24:cf:a5:bf:5d:2e:34: 6e:39:4e:88:f8:92:fd:7c:3a:66:89:b3:15:14:eb: 5e:14:23:8c:ce:c4:b4:2d:9d:73:05:2a:8a:ce:85: 24:50:02:62:52:49:05:a0:74:bd:7a:0d:9b:c0:c2: 46:33:83:a8:a6:39:36:1f:28:26:c3:25:03:e5:1a: 37:bc:2e:a5:68:5a:89:ea:5c:bd:3c:c2:b5:c7:2c: 8c:32:22:8a:28:50:0a:b3:3a:40:35:bc:ad:86:b4: 06:40:35:7c:d2:0a:59:3b:82:69:b7:57:28:dd:44: 53:74:39:e7:e5:d1:73:76:5e:cd:e1:8d:ac:0d:c3: 6a:a0:d7:45:73:1d:29:5d:8c:9d:09:ad:a0:7c:45: be:03:f2:00:f8:91:37:b7:1d:a9:07:6f:88:78:96: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F1:3F:DB:72:1A:CA:AA:BC:BD:B9:FE:75:C1:0C:E3:E1:71:3F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dba6855-d043-3318-9f5b-e0247f7172d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:03:86:20:61:74:24:ee:d1:58:0f:db:59:a3:6b:58:ed:b2: c8:fc:cb:dd:45:d5:e8:b4:67:48:40:c8:54:62:f7:ea:40:e7: de:88:71:45:da:94:82:9d:19:58:eb:5a:ab:f1:bf:c8:c5:9c: 7e:a2:0e:c5:ba:f3:21:84:a7:20:8b:13:d7:8e:45:63:95:e0: 18:ce:97:f2:48:34:d2:a3:3e:98:63:23:ba:58:64:ea:1c:94: 41:f7:eb:d9:57:ca:83:9d:27:96:f0:7e:d7:fd:e1:4d:6b:6c: 41:54:dd:f1:0f:ff:13:3d:17:ff:a5:1a:08:a4:e7:5a:1b:98: c1:de:bf:59:6a:95:6e:87:3a:ef:88:e2:ff:f5:b8:ee:de:96: d7:f1:13:27:3f:75:47:0f:d6:be:7f:82:64:40:ed:f0:9d:df: 85:6e:5a:e1:76:ac:6b:af:f5:e5:c9:a1:2c:72:2b:20:5b:18: c8:7f:1e:46:b4:ff:32:4c:58:4b:63:5f:c5:77:42:37:e4:a5: 6b:4d:2d:47:07:b7:b0:ce:a9:71:df:53:60:19:29:f0:d1:71: c6:ee:eb:72:aa:55:83:f5:e5:fe:99:bc:72:6f:b2:65:5d:97: 90:98:32:1d:d3:26:6b:9c:26:85:b0:a0:fc:6c:b6:86:5c:38: 1b:f9:f1:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm0NLgwm2EL6N0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NTFhOGQ2MjQtZTEzYi00ZDQ4LWEyZjgtNzkzMWU5NGM3MGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7RVcbcEudSgLRTaVPyulw2lUW/GEugb1dTE k4mywPgSLMASpOnnGoXRxWM1cpDSTUkVNbEujKGgJe1rSUK7sVVXmtj0BtZ8Fe/u Xgo9v3ZFrqwAg8YdDr7+rSmm1gCjbiTPpb9dLjRuOU6I+JL9fDpmibMVFOteFCOM zsS0LZ1zBSqKzoUkUAJiUkkFoHS9eg2bwMJGM4Oopjk2HygmwyUD5Ro3vC6laFqJ 6ly9PMK1xyyMMiKKKFAKszpANbythrQGQDV80gpZO4Jpt1co3URTdDnn5dFzdl7N 4Y2sDcNqoNdFcx0pXYydCa2gfEW+A/IA+JE3tx2pB2+IeJYMSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN3xP9tyGsqqvL25/nXBDOPhcT8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWRiYTY4NTUtZDA0My0z MzE4LTlmNWItZTAyNDdmNzE3MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUDhiBhdCTu0VgP21mja1jtssj8y91F1ei0Z0hAyFRi9+pA596I cUXalIKdGVjrWqvxv8jFnH6iDsW68yGEpyCLE9eORWOV4BjOl/JINNKjPphjI7pY ZOoclEH369lXyoOdJ5bwftf94U1rbEFU3fEP/xM9F/+lGgik51obmMHev1lqlW6H Ou+I4v/1uO7eltfxEyc/dUcP1r5/gmRA7fCd34VuWuF2rGuv9eXJoSxyKyBbGMh/ Hka0/zJMWEtjX8V3QjfkpWtNLUcHt7DOqXHfU2AZKfDRccbu63KqVYP15f6ZvHJv smVdl5CYMh3TJmucJoWwoPxstoZcOBv58U4= -----END CERTIFICATE-----Generated at Sat Jun 13 18:31:50 2026 by rpki-client