$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a5f089f-0a19-3def-b03b-0d71364d19ea.roa File: 6a5f089f-0a19-3def-b03b-0d71364d19ea.roa (raw, json) Hash identifier: aTlEJa5b1oM1wQ5zkWBL9HHvsMjoLEVZcziS4WhNBgA= Subject key identifier: 29:A8:5E:5D:3C:F6:E5:59:00:3F:0C:81:70:79:EB:A3:2D:AC:24:DF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B2EBDDD093E4AD8C28F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a5f089f-0a19-3def-b03b-0d71364d19ea.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:2e:bd:dd:09:3e:4a:d8:c2:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=7485b9b2-eb86-43a3-a1fd-7c925bcf6846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:92:fb:29:05:23:f2:20:d7:a6:7c:39:59: 8b:48:b2:99:a2:e5:6b:cd:e2:60:e9:e8:5a:83:e2: 16:04:fb:bd:af:a5:57:16:cf:62:76:03:32:2b:bc: b4:83:4d:a1:53:f8:19:1a:36:07:ed:1b:2a:e6:85: f8:1d:de:29:37:72:44:18:cf:ac:69:30:43:a2:04: 65:3b:8c:e2:9c:b7:13:f3:11:cd:dd:58:fe:39:2a: 92:a6:13:4b:4d:7b:f3:8b:2b:5f:39:5a:96:d8:41: 40:a0:f1:e5:c6:09:e8:27:91:09:d3:b1:c4:d5:56: 18:42:56:18:80:14:04:a8:70:51:7e:9d:05:71:88: f9:7f:63:39:cc:b9:f1:ac:19:36:b1:8e:66:04:f0: 38:5b:2f:63:3a:fc:b4:aa:d7:ef:84:28:28:67:27: 6d:95:77:c4:f3:6c:90:06:b9:fc:72:b4:78:63:04: d5:41:2e:71:68:d9:ee:40:94:16:6d:31:e5:36:e1: 6c:33:f9:a4:1d:08:49:c2:d1:bc:df:3b:4c:cb:27: 07:9a:6c:c4:10:d7:d1:7a:26:ca:c0:5f:eb:f9:00: c5:f3:dc:09:9a:64:40:dc:5e:6c:cb:70:1c:ea:84: 42:7e:83:f8:69:8d:ac:84:71:5d:19:03:f8:16:f2: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A8:5E:5D:3C:F6:E5:59:00:3F:0C:81:70:79:EB:A3:2D:AC:24:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a5f089f-0a19-3def-b03b-0d71364d19ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:79:c8:98:3a:ed:15:0f:f5:be:09:4d:57:ac:cc:07:16:ef: b1:53:ad:b5:26:e9:07:a4:03:f8:8d:08:e0:f1:18:a4:3c:71: 89:d3:9b:95:fc:1d:e3:58:dd:4b:17:12:8f:00:c3:4a:35:38: 7e:54:29:78:8c:68:b2:e2:dd:6b:03:15:ac:77:35:76:7f:e3: f2:a7:f6:2f:16:f9:22:6d:a7:34:6b:ff:fb:4a:87:a5:59:7d: 39:fd:6d:91:cd:e1:38:2d:58:1f:b2:a4:3e:c7:28:6a:cf:99: 7f:dd:e3:b2:24:43:98:ae:5f:a7:90:68:46:fe:aa:6e:42:ce: 23:8b:83:84:32:83:1b:db:35:c1:d8:8b:87:4a:7b:c7:2e:b0: 02:92:ce:d0:41:af:4b:db:3d:83:1d:0f:8e:65:dc:0f:5b:03: 0c:bf:d6:8c:b4:5b:1a:69:c2:6d:34:81:82:be:3c:d1:df:95: 89:16:88:82:58:8e:62:11:64:a1:09:6c:5d:9a:37:16:38:2f: 5e:67:d9:1b:68:9d:ca:92:c7:19:82:76:6d:c9:15:16:bb:70: 5b:14:a3:3b:0b:c5:54:66:3a:76:fc:10:97:8c:7f:99:6e:23: 3e:4e:e6:f9:8d:99:a5:e6:f6:62:83:6c:df:87:4e:a8:fa:d1: f6:18:ff:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fmy693Qk+StjCj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NzQ4NWI5YjItZWI4Ni00M2EzLWExZmQtN2M5MjViY2Y2ODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVeS+ykFI/Ig16Z8OVmLSLKZouVrzeJg6eha g+IWBPu9r6VXFs9idgMyK7y0g02hU/gZGjYH7Rsq5oX4Hd4pN3JEGM+saTBDogRl O4zinLcT8xHN3Vj+OSqSphNLTXvziytfOVqW2EFAoPHlxgnoJ5EJ07HE1VYYQlYY gBQEqHBRfp0FcYj5f2M5zLnxrBk2sY5mBPA4Wy9jOvy0qtfvhCgoZydtlXfE82yQ Brn8crR4YwTVQS5xaNnuQJQWbTHlNuFsM/mkHQhJwtG83ztMyycHmmzEENfReibK wF/r+QDF89wJmmRA3F5sy3Ac6oRCfoP4aY2shHFdGQP4FvKWUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCmoXl089uVZAD8MgXB566MtrCTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmE1ZjA4OWYtMGExOS0z ZGVmLWIwM2ItMGQ3MTM2NGQxOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGR5yJg67RUP9b4JTVeszAcW77FTrbUm6QekA/iNCODxGKQ8cYnT m5X8HeNY3UsXEo8Aw0o1OH5UKXiMaLLi3WsDFax3NXZ/4/Kn9i8W+SJtpzRr//tK h6VZfTn9bZHN4TgtWB+ypD7HKGrPmX/d47IkQ5iuX6eQaEb+qm5CziOLg4Qygxvb NcHYi4dKe8cusAKSztBBr0vbPYMdD45l3A9bAwy/1oy0Wxppwm00gYK+PNHflYkW iIJYjmIRZKEJbF2aNxY4L15n2RtoncqSxxmCdm3JFRa7cFsUozsLxVRmOnb8EJeM f5luIz5O5vmNmaXm9mKDbN+HTqj60fYY//A= -----END CERTIFICATE-----Generated at Sat Jun 13 14:23:36 2026 by rpki-client