$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa File: 5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa (raw, json) Hash identifier: MIGHNFTqJYct38zdtakzXPFqbG36zUW4FvD4ckPcRoI= Subject key identifier: 9B:98:EB:49:BB:EC:8B:C7:28:5C:6C:92:6F:71:62:DE:4A:A9:3C:6A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B4CAAD9C9DF1C49DABA80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:4c:aa:d9:c9:df:1c:49:da:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=2cbf65d5-c82a-4eed-ba00-8487b7579163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b4:56:4b:44:e3:b5:54:e6:67:a3:e9:92:da: dc:ed:5d:eb:9d:5a:05:16:c4:79:39:e8:19:e0:ed: 82:55:bd:41:55:a3:50:60:04:30:07:3e:d2:0c:78: 90:c1:c6:cc:31:d0:90:f5:d8:82:3b:28:42:45:b7: db:fc:aa:89:84:33:35:32:18:8c:d2:be:86:44:70: 14:a7:50:82:bd:fc:d5:21:de:6c:87:a2:59:07:02: fc:c3:60:a0:b1:d3:45:c6:8a:9f:3f:85:e5:88:e1: 1f:10:04:a6:eb:0c:e4:d0:b3:58:4b:c1:86:24:4a: cf:e4:b7:d2:3f:ef:03:94:cd:72:f9:64:8c:8c:ef: b7:d1:d2:b2:98:25:7d:68:e9:13:93:cc:c5:07:a9: 18:ab:e5:2f:83:f1:fe:db:a7:cb:92:e8:c2:22:82: 13:2a:b3:56:4a:9f:1c:e0:08:d8:ca:b9:20:e1:56: 0c:84:26:a4:d2:e0:db:4f:24:2a:8c:84:b2:a1:05: db:82:f9:dc:6a:3f:eb:ae:d4:78:15:6c:4a:ed:67: 37:97:28:32:5b:b7:ff:9d:62:bf:38:45:e2:6d:5c: 1c:c6:ef:ab:3a:68:e6:65:cd:96:bd:3e:fe:4c:6b: d4:5e:63:9b:03:c6:c7:2b:9f:43:4f:36:6a:54:cf: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:98:EB:49:BB:EC:8B:C7:28:5C:6C:92:6F:71:62:DE:4A:A9:3C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:42:67:1a:67:36:e3:61:de:5b:45:d8:d7:d6:ff:4d:b4:18: 2d:2a:8c:b6:75:e7:e1:5b:4b:91:60:17:0c:f8:d2:2e:4d:b8: 12:5c:82:48:ac:5d:4b:1c:da:3b:01:c4:81:f8:8a:34:d9:cf: ec:43:ca:74:5f:4f:17:0e:0e:c6:bc:ad:65:3a:e0:fa:4c:c9: c4:62:9f:9f:00:ee:ff:73:32:7a:29:ee:83:b1:e8:0b:59:55: 4c:5c:b8:4e:8e:6c:6b:18:6d:24:07:d3:de:a9:e3:e7:2a:4b: c4:88:c1:92:4d:ec:f3:dc:76:c2:3e:4d:bc:a7:7a:18:69:e6: 82:bf:05:60:cc:17:99:16:c0:2d:64:65:93:b9:a7:e9:d1:15: 76:5f:c3:b9:d4:0c:aa:d6:4f:69:13:3e:a8:c2:bd:f9:cf:ba: e3:52:79:0b:a3:f3:64:df:7f:88:f8:ec:63:31:85:95:6e:5b: 19:9a:67:46:01:c0:87:de:fa:e8:26:4b:75:6c:3c:de:aa:33: 83:f4:55:5f:6f:13:1f:03:76:00:96:73:92:52:08:91:89:6b: f1:94:9d:52:18:ec:98:19:80:a2:07:19:58:a4:d0:7b:8c:d7: ed:3d:70:d5:c4:bc:34:39:be:34:a9:7b:08:21:77:50:9a:50: d1:64:8b:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm0yq2cnfHEnauoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MmNiZjY1ZDUtYzgyYS00ZWVkLWJhMDAtODQ4N2I3NTc5MTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbRWS0TjtVTmZ6Ppktrc7V3rnVoFFsR5OegZ 4O2CVb1BVaNQYAQwBz7SDHiQwcbMMdCQ9diCOyhCRbfb/KqJhDM1MhiM0r6GRHAU p1CCvfzVId5sh6JZBwL8w2CgsdNFxoqfP4XliOEfEASm6wzk0LNYS8GGJErP5LfS P+8DlM1y+WSMjO+30dKymCV9aOkTk8zFB6kYq+Uvg/H+26fLkujCIoITKrNWSp8c 4AjYyrkg4VYMhCak0uDbTyQqjISyoQXbgvncaj/rrtR4FWxK7Wc3lygyW7f/nWK/ OEXibVwcxu+rOmjmZc2WvT7+TGvUXmObA8bHK59DTzZqVM/eSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJuY60m77IvHKFxskm9xYt5KqTxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWJmZmFlNWYtNWNmNi0z YWQ5LThkMDQtNjdiZWY4MTNkMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGlCZxpnNuNh3ltF2NfW/020GC0qjLZ15+FbS5FgFwz40i5NuBJc gkisXUsc2jsBxIH4ijTZz+xDynRfTxcODsa8rWU64PpMycRin58A7v9zMnop7oOx 6AtZVUxcuE6ObGsYbSQH096p4+cqS8SIwZJN7PPcdsI+Tbynehhp5oK/BWDMF5kW wC1kZZO5p+nRFXZfw7nUDKrWT2kTPqjCvfnPuuNSeQuj82Tff4j47GMxhZVuWxma Z0YBwIfe+ugmS3VsPN6qM4P0VV9vEx8DdgCWc5JSCJGJa/GUnVIY7JgZgKIHGVik 0HuM1+09cNXEvDQ5vjSpewghd1CaUNFki/4= -----END CERTIFICATE-----Generated at Sat Jun 13 15:44:25 2026 by rpki-client