$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/293e684a-7bd4-3127-83af-07287fbf52e0.roa File: 293e684a-7bd4-3127-83af-07287fbf52e0.roa (raw, json) Hash identifier: GtjiD8L5YAI7FL8Ukd/gkCmP8DhT9Dpc8iLItqN820c= Subject key identifier: 28:4E:C3:70:F4:E9:5B:C7:BA:D0:B3:EA:14:1A:9E:E0:AD:B5:B8:A1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C7810DE7EFB52253B5A20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/293e684a-7bd4-3127-83af-07287fbf52e0.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:78:10:de:7e:fb:52:25:3b:5a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=178d86b8-a698-4a04-8671-69bc9ba3371a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:8f:ba:e4:f4:a1:bb:e3:5e:b3:10:a1:01: a6:17:2f:b6:42:5b:0d:bc:d1:f3:64:c4:8e:86:e4: e1:8f:1e:0a:d3:96:e2:0f:1d:14:9a:7b:84:16:9d: a5:90:dd:80:fc:8c:da:80:24:ef:90:20:07:51:28: ee:1e:44:e8:af:1d:96:85:2c:9b:42:be:32:39:52: a5:1e:df:43:82:8b:c0:db:90:56:a0:e8:b1:40:21: bb:69:b5:50:66:38:a8:dc:47:04:ca:c6:79:58:1d: 25:fc:bf:c0:1c:03:68:87:d5:72:9c:f7:4c:54:6f: e7:26:67:dd:b6:14:1f:89:78:f2:e3:f4:1b:d7:d4: 3d:eb:45:05:5f:e9:4d:2c:77:4e:32:9d:1c:bf:b7: 70:42:78:c4:87:9d:7d:06:21:b5:4c:0d:2f:a1:b2: f4:0a:fd:6d:d2:b6:9d:52:39:50:8d:b2:20:59:01: ce:d0:3b:b9:48:7c:92:e0:59:6d:87:e7:5e:6e:86: ff:8e:54:82:c6:71:84:5d:bc:be:a6:f0:96:bd:be: cb:c8:cf:e2:f0:a4:a4:dc:50:4f:a4:52:25:64:65: 74:47:2c:a8:1a:6a:a3:86:c2:6a:5b:06:4e:23:ee: d9:5d:d0:d9:bb:99:eb:ae:38:be:ba:30:18:c1:5b: eb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:C3:70:F4:E9:5B:C7:BA:D0:B3:EA:14:1A:9E:E0:AD:B5:B8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/293e684a-7bd4-3127-83af-07287fbf52e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e5:bd:38:95:c1:a8:cd:3c:7c:eb:91:ec:16:83:5a:04:85: 1a:db:99:66:30:cc:03:ea:d2:79:e2:74:20:aa:af:64:a6:3a: f3:eb:58:8c:77:18:98:94:cd:88:82:e3:06:22:24:aa:9f:14: e4:c2:cd:d4:c2:bf:cd:96:43:09:da:54:af:28:1c:f6:ac:5a: ff:f0:7c:0f:ca:10:8a:ef:60:3f:fe:84:93:09:53:52:a3:65: c4:1f:28:3b:4b:d3:1d:be:ee:db:f5:e9:47:a0:7e:c2:53:d6: c5:04:c9:d7:15:d3:af:26:a9:fa:54:40:e5:bf:94:32:b1:cf: 3d:41:4f:78:dd:86:da:6c:4e:72:0f:78:33:d1:b1:a2:9c:83: 1c:62:49:ba:3d:eb:c6:4d:16:d9:14:f2:fd:c6:23:7c:ad:0f: 79:81:92:bf:d7:a8:86:1c:23:09:db:61:63:45:5e:53:7f:24: 71:e1:c4:98:2a:6f:28:26:8d:32:af:70:ca:0c:e2:d0:9a:15: f0:8b:2c:09:d2:65:35:6c:5e:1b:6c:fd:03:6c:33:96:b0:62: 53:dd:7d:1f:3a:66:1b:fc:5e:82:65:85:0e:51:00:c8:e1:9e: 74:bd:c5:f0:6f:9b:0c:48:38:ba:40:45:53:6f:d2:7f:97:c4: 91:fc:e8:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnHgQ3n77UiU7WiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MTc4ZDg2YjgtYTY5OC00YTA0LTg2NzEtNjliYzliYTMzNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuCPuuT0obvjXrMQoQGmFy+2QlsNvNHzZMSO huThjx4K05biDx0UmnuEFp2lkN2A/IzagCTvkCAHUSjuHkTorx2WhSybQr4yOVKl Ht9DgovA25BWoOixQCG7abVQZjio3EcEysZ5WB0l/L/AHANoh9VynPdMVG/nJmfd thQfiXjy4/Qb19Q960UFX+lNLHdOMp0cv7dwQnjEh519BiG1TA0vobL0Cv1t0rad UjlQjbIgWQHO0Du5SHyS4Flth+debob/jlSCxnGEXby+pvCWvb7LyM/i8KSk3FBP pFIlZGV0RyyoGmqjhsJqWwZOI+7ZXdDZu5nrrji+ujAYwVvrZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFChOw3D06VvHutCz6hQanuCttbihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjkzZTY4NGEtN2JkNC0z MTI3LTgzYWYtMDcyODdmYmY1MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADXlvTiVwajNPHzrkewWg1oEhRrbmWYwzAPq0nnidCCqr2SmOvPr WIx3GJiUzYiC4wYiJKqfFOTCzdTCv82WQwnaVK8oHPasWv/wfA/KEIrvYD/+hJMJ U1KjZcQfKDtL0x2+7tv16UegfsJT1sUEydcV068mqfpUQOW/lDKxzz1BT3jdhtps TnIPeDPRsaKcgxxiSbo968ZNFtkU8v3GI3ytD3mBkr/XqIYcIwnbYWNFXlN/JHHh xJgqbygmjTKvcMoM4tCaFfCLLAnSZTVsXhts/QNsM5awYlPdfR86Zhv8XoJlhQ5R AMjhnnS9xfBvmwxIOLpARVNv0n+XxJH86Gg= -----END CERTIFICATE-----Generated at Sat Jun 13 15:47:12 2026 by rpki-client