$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa File: 4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa (raw, json) Hash identifier: dLvPRDeoZFFctLQZ8KZDpoj89PHQfyORKjPdFwtgUd4= Subject key identifier: DF:F8:96:E5:7C:51:42:2D:7F:7F:67:AE:50:4C:63:9C:DD:F2:4D:C2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C7407A1DC06E223101E40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:74:07:a1:dc:06:e2:23:10:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=0fd9e95a-59b5-4612-8be2-fe836a94350c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:68:bb:a9:d3:ee:c0:2d:a2:f3:71:23:d7: 3c:f3:f6:1a:55:05:ab:5b:f0:18:55:7d:41:c9:4c: 14:b3:29:bd:96:7a:34:1f:8e:ec:35:85:6c:ce:f3: 72:65:79:6d:9e:82:6c:06:81:5a:dc:5b:9c:69:75: 5e:ab:33:3d:6e:ea:e3:f8:02:90:dd:08:4c:b3:79: e2:bd:31:56:46:db:78:57:bc:d8:57:c8:5b:7d:df: 0e:da:01:3e:d6:5b:bc:33:31:c3:1d:2c:44:75:a8: c7:76:6d:92:68:ed:f4:86:97:1d:d0:a9:88:13:3e: 94:11:35:87:d0:8d:08:dd:b9:d5:84:d3:5f:82:9c: 29:45:99:18:4e:16:05:17:de:02:6b:94:c5:9e:56: 64:3f:f5:62:58:77:b2:c4:8d:43:70:e7:e6:a7:c2: 42:7f:fb:d8:d5:db:d4:59:1d:bc:a4:b2:35:96:5b: 0e:45:9e:b6:08:14:9a:96:72:5b:ff:1c:ba:58:ff: 24:47:4f:e6:6c:50:8f:aa:34:b7:5a:04:47:00:08: 04:8e:e4:3a:6b:72:14:0e:c5:20:50:aa:2b:e4:23: db:92:6d:48:d8:32:84:88:e6:c5:1c:b7:f7:73:8c: 3d:10:3f:9d:57:42:b6:04:37:4b:20:ca:a0:5e:33: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F8:96:E5:7C:51:42:2D:7F:7F:67:AE:50:4C:63:9C:DD:F2:4D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4b1ffe5f-4f69-392f-a1c8-d97dda4672d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f7:56:7d:57:b6:9b:1e:ec:3f:e4:ed:29:38:52:21:67:92: 78:74:08:ff:39:69:81:3a:81:c5:3d:06:61:73:d5:52:ee:c2: e0:bc:f3:f4:fd:8b:7f:75:81:00:c5:22:b3:e2:ed:7c:8f:a0: 34:90:9a:7d:65:89:87:7d:1a:52:de:64:c3:2c:34:7a:4e:ea: d1:1b:3d:76:87:c5:d5:c5:b6:54:2a:db:58:51:71:6f:19:d1: 9f:22:9f:67:33:53:23:e4:16:53:20:96:01:40:6f:d4:ab:b8: 90:e0:7f:0f:b9:37:35:b5:75:e6:47:94:e9:5f:ef:0b:09:25: 37:ce:6c:a5:64:1e:db:3c:10:d4:7c:92:0e:5c:fc:72:08:11: f5:b6:f4:80:48:3d:43:cd:74:6b:0e:89:f2:46:16:db:4d:be: c5:2f:78:ae:c8:ed:47:e6:6c:d5:d2:68:16:ca:e4:25:4c:71: 6c:ba:5f:7b:23:be:16:00:f4:63:3f:c2:3d:c0:89:6f:bb:13: 39:ab:1f:88:a2:43:fe:4d:95:78:11:86:af:f1:41:8b:73:ac: 4e:1f:86:67:62:8b:b6:44:b6:e1:b0:08:c0:81:35:e7:1d:4b: 11:2d:81:dc:f2:bc:88:89:0f:c7:ad:e6:c6:ea:e4:cf:7f:eb: d6:4e:04:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnHQHodwG4iMQHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MGZkOWU5NWEtNTliNS00NjEyLThiZTItZmU4MzZhOTQzNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIZou6nT7sAtovNxI9c88/YaVQWrW/AYVX1B yUwUsym9lno0H47sNYVszvNyZXltnoJsBoFa3FucaXVeqzM9burj+AKQ3QhMs3ni vTFWRtt4V7zYV8hbfd8O2gE+1lu8MzHDHSxEdajHdm2SaO30hpcd0KmIEz6UETWH 0I0I3bnVhNNfgpwpRZkYThYFF94Ca5TFnlZkP/ViWHeyxI1DcOfmp8JCf/vY1dvU WR28pLI1llsORZ62CBSalnJb/xy6WP8kR0/mbFCPqjS3WgRHAAgEjuQ6a3IUDsUg UKor5CPbkm1I2DKEiObFHLf3c4w9ED+dV0K2BDdLIMqgXjNkuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN/4luV8UUItf39nrlBMY5zd8k3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGIxZmZlNWYtNGY2OS0z OTJmLWExYzgtZDk3ZGRhNDY3MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAv3Vn1Xtpse7D/k7Sk4UiFnknh0CP85aYE6gcU9BmFz1VLuwuC8 8/T9i391gQDFIrPi7XyPoDSQmn1liYd9GlLeZMMsNHpO6tEbPXaHxdXFtlQq21hR cW8Z0Z8in2czUyPkFlMglgFAb9SruJDgfw+5NzW1deZHlOlf7wsJJTfObKVkHts8 ENR8kg5c/HIIEfW29IBIPUPNdGsOifJGFttNvsUveK7I7UfmbNXSaBbK5CVMcWy6 X3sjvhYA9GM/wj3AiW+7EzmrH4iiQ/5NlXgRhq/xQYtzrE4fhmdii7ZEtuGwCMCB NecdSxEtgdzyvIiJD8et5sbq5M9/69ZOBOw= -----END CERTIFICATE-----Generated at Sat Jun 13 14:21:08 2026 by rpki-client