$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6727b461-7666-36ca-ac4c-880d3828fd1c.roa File: 6727b461-7666-36ca-ac4c-880d3828fd1c.roa (raw, json) Hash identifier: CnaV0tFMZ8SPvnjJulJCvke6ahxTAz0QpbR8Wv8Xehw= Subject key identifier: EA:06:BE:0A:F3:E8:B7:61:D4:51:3E:A5:EE:72:18:F7:FC:39:7C:79 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C68C18505E962532C1880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6727b461-7666-36ca-ac4c-880d3828fd1c.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:68:c1:85:05:e9:62:53:2c:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=2335f84b-8aa7-4554-bf94-aadc4e371f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:75:fc:83:62:08:ad:0b:58:f9:ce:f7:74: ff:a3:1e:f4:4b:ec:31:05:23:a8:8c:e0:e5:16:b4: b5:3c:aa:67:7c:53:43:6c:66:89:5c:3b:59:52:b4: 84:8d:fe:26:3f:79:ef:2e:6b:7d:7d:26:32:48:f2: bc:5a:26:0a:a4:92:25:6c:32:79:28:47:ce:9d:aa: a7:86:7b:e7:70:fc:24:63:27:00:a9:5a:9e:31:70: 94:ea:34:a2:9a:00:83:2e:48:58:96:9f:7a:20:b1: 16:8a:6c:c2:dc:ba:04:2e:a2:b8:20:e2:19:17:96: d6:8a:73:1c:51:99:f2:28:1a:74:fd:be:d9:3a:80: 6f:65:e1:23:6e:08:22:8b:84:cd:29:1f:68:d2:57: ca:44:48:6d:8d:c6:89:e8:82:d1:2c:4d:db:cb:d4: f1:7d:54:3e:08:57:9f:ca:8e:41:63:e7:58:40:a6: 9a:40:ff:73:f8:4a:43:49:41:8d:e2:7b:b8:d7:9e: 4a:77:af:bc:06:d0:02:72:72:01:cc:a1:ba:4a:b5: 62:5b:97:82:7d:0a:25:f5:df:e6:d2:17:ce:03:89: 60:9c:42:a1:d2:1a:0a:bf:f5:10:58:28:73:cf:04: 38:c6:0b:7d:bc:69:93:a0:3e:8f:88:fa:48:35:10: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:06:BE:0A:F3:E8:B7:61:D4:51:3E:A5:EE:72:18:F7:FC:39:7C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6727b461-7666-36ca-ac4c-880d3828fd1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ea::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9e:e9:66:4c:1d:e2:bf:32:71:53:30:36:cf:4d:b9:53:c9: fa:ff:bf:08:4e:b4:e2:86:f5:52:c0:e4:a6:9f:48:78:97:e7: ef:b9:8b:71:01:6c:85:a5:97:13:1d:21:d2:74:64:7c:ba:d7: f8:c3:43:cb:c0:85:99:70:b3:30:82:ef:73:fc:28:cf:73:08: 4d:c1:46:66:9c:53:5e:25:52:86:77:5c:09:09:7d:01:b6:8a: f9:a6:0b:54:41:b4:58:2f:90:94:eb:f9:5d:dd:e7:ea:51:7f: 51:a8:8b:9a:13:2d:bd:26:6c:16:7d:2d:57:24:20:34:19:f2: 07:d8:e8:ad:89:c5:ea:77:bc:de:a5:40:5e:7f:06:80:48:5a: 0d:89:df:d5:36:61:d9:26:50:d3:bb:53:33:d8:78:e8:91:a9: da:9b:62:b6:ba:df:b2:a8:9c:b3:c2:ca:70:4f:66:b9:8a:08: 95:69:db:3b:74:2d:51:a5:7f:ab:19:3a:23:55:5e:58:08:af: 12:7f:e4:b9:74:b0:41:55:14:4a:5c:95:bd:36:c7:38:17:95: b8:d4:2e:d8:13:e8:5e:fc:35:b8:bf:18:5f:39:b2:72:bb:98: db:02:60:f0:eb:61:d7:99:63:e0:ec:af:60:fb:3b:a5:06:43: 1d:4c:53:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnGjBhQXpYlMsGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MjMzNWY4NGItOGFhNy00NTU0LWJmOTQtYWFkYzRlMzcxZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBZ1/INiCK0LWPnO93T/ox70S+wxBSOojODl FrS1PKpnfFNDbGaJXDtZUrSEjf4mP3nvLmt9fSYySPK8WiYKpJIlbDJ5KEfOnaqn hnvncPwkYycAqVqeMXCU6jSimgCDLkhYlp96ILEWimzC3LoELqK4IOIZF5bWinMc UZnyKBp0/b7ZOoBvZeEjbggii4TNKR9o0lfKREhtjcaJ6ILRLE3by9TxfVQ+CFef yo5BY+dYQKaaQP9z+EpDSUGN4nu4155Kd6+8BtACcnIBzKG6SrViW5eCfQol9d/m 0hfOA4lgnEKh0hoKv/UQWChzzwQ4xgt9vGmToD6PiPpINRCk2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOoGvgrz6Ldh1FE+pe5yGPf8OXx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjcyN2I0NjEtNzY2Ni0z NmNhLWFjNGMtODgwZDM4MjhmZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGWe6WZMHeK/MnFTMDbPTblTyfr/vwhOtOKG9VLA5KafSHiX5++5 i3EBbIWllxMdIdJ0ZHy61/jDQ8vAhZlwszCC73P8KM9zCE3BRmacU14lUoZ3XAkJ fQG2ivmmC1RBtFgvkJTr+V3d5+pRf1Goi5oTLb0mbBZ9LVckIDQZ8gfY6K2Jxep3 vN6lQF5/BoBIWg2J39U2YdkmUNO7UzPYeOiRqdqbYra637KonLPCynBPZrmKCJVp 2zt0LVGlf6sZOiNVXlgIrxJ/5Ll0sEFVFEpclb02xzgXlbjULtgT6F78Nbi/GF85 snK7mNsCYPDrYdeZY+Dsr2D7O6UGQx1MUyM= -----END CERTIFICATE-----Generated at Sat Jun 13 14:24:10 2026 by rpki-client