$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa File: 88e2c01c-1673-3937-8a2e-6b1b9270b195.roa (raw, json) Hash identifier: Wt4X3eBq/MAJAuKzpLZ6Y27AQzUl7u7VcSd9sufery4= Subject key identifier: 8D:6D:A3:05:5C:B9:19:56:A5:3E:2D:3A:FA:28:EA:7D:F4:4B:AB:99 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B4409C88F8E9A3D9FC580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:44:09:c8:8f:8e:9a:3d:9f:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=c05b02f9-da05-4d09-b5dd-9d4ede762770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:84:3a:10:ba:b7:5f:17:30:ef:1c:b6:a4: 63:10:aa:ba:84:1a:26:45:b6:41:45:d1:18:55:f9: b5:c8:ff:99:0a:f0:ab:02:e8:9f:07:92:f1:44:40: 8f:a0:f1:4f:34:2a:2f:f1:04:f7:51:7f:32:86:74: 05:52:77:15:3f:3a:cf:9b:5a:f9:6a:12:a0:e0:9e: 22:d1:bb:16:b0:44:0c:40:bf:98:53:ea:be:8a:5a: 80:76:29:36:33:f0:75:2f:9f:38:ad:09:11:3b:1f: 93:a7:03:c5:f4:92:a3:b4:46:af:3d:15:ac:29:b4: cb:a4:83:4b:e0:92:a5:dc:f2:f0:9d:e1:5f:eb:de: d6:af:0b:a7:66:bd:c9:b4:d8:10:9c:a7:e2:e4:f4: 9a:76:af:cb:d0:f4:66:fd:ea:7b:c9:c1:33:83:94: 77:6b:33:54:a0:a8:f8:51:f0:b2:37:51:83:55:d4: cf:de:11:96:35:b8:cd:1a:12:87:b5:90:d6:71:cd: 4e:a1:0f:a6:37:de:c7:fa:ed:72:3e:67:05:86:94: 99:20:e5:2b:96:f4:13:aa:30:c8:c1:29:b2:60:34: a9:c2:46:bc:d1:79:f2:cf:d3:65:54:ad:4f:74:25: 07:8a:e3:c7:59:31:e3:a9:58:40:89:bc:3b:ba:2d: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6D:A3:05:5C:B9:19:56:A5:3E:2D:3A:FA:28:EA:7D:F4:4B:AB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/88e2c01c-1673-3937-8a2e-6b1b9270b195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f7:19:d6:07:c8:28:2d:58:77:cb:e6:7e:37:56:9d:38:3a: 57:24:aa:36:5c:c4:3b:b6:6c:87:6a:ea:58:ea:d8:9e:a0:08: 37:8b:ce:ca:dd:c0:6b:06:1c:af:3e:0e:ed:23:19:0a:83:b0: e9:d9:7f:84:e4:f2:d1:61:21:8a:1c:9e:4e:0a:9d:23:c0:9d: 8e:96:9e:55:5b:33:14:07:6d:b7:10:25:84:b2:64:da:f2:47: 3a:ad:dd:39:0d:5c:95:c8:3d:b7:27:d3:6f:c7:f3:7d:3f:e6: 96:e7:17:11:8f:7b:89:fa:3c:b8:9f:f9:fd:30:34:50:3e:fe: 6e:ac:df:38:27:cb:2b:76:ef:65:8f:1a:55:c9:d2:cc:bd:fd: 9a:84:1e:f1:7f:fb:f9:78:be:ac:bd:25:53:5d:f7:e7:c8:39: 39:8c:36:59:7b:61:fa:25:d5:f1:96:5c:9b:ae:46:34:ce:b5: a6:8c:52:bc:8c:11:86:52:06:1f:a5:bb:f8:fc:49:06:be:23: ce:63:dd:da:03:ab:74:22:47:47:4c:f5:1f:30:5b:36:07:d1: aa:f8:8c:08:ba:be:bf:05:f1:9a:46:c8:51:dd:82:d1:a4:c7: 23:8b:a9:b0:bd:b4:86:32:66:32:a3:6f:ea:4d:95:e5:e3:e0: de:54:99:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm0QJyI+Omj2fxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YzA1YjAyZjktZGEwNS00ZDA5LWI1ZGQtOWQ0ZWRlNzYyNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEiEOhC6t18XMO8ctqRjEKq6hBomRbZBRdEY Vfm1yP+ZCvCrAuifB5LxRECPoPFPNCov8QT3UX8yhnQFUncVPzrPm1r5ahKg4J4i 0bsWsEQMQL+YU+q+ilqAdik2M/B1L584rQkROx+TpwPF9JKjtEavPRWsKbTLpINL 4JKl3PLwneFf697WrwunZr3JtNgQnKfi5PSadq/L0PRm/ep7ycEzg5R3azNUoKj4 UfCyN1GDVdTP3hGWNbjNGhKHtZDWcc1OoQ+mN97H+u1yPmcFhpSZIOUrlvQTqjDI wSmyYDSpwka80Xnyz9NlVK1PdCUHiuPHWTHjqVhAibw7ui2JlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1towVcuRlWpT4tOvoo6n30S6uZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODhlMmMwMWMtMTY3My0z OTM3LThhMmUtNmIxYjkyNzBiMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJb3GdYHyCgtWHfL5n43Vp04OlckqjZcxDu2bIdq6ljq2J6gCDeL zsrdwGsGHK8+Du0jGQqDsOnZf4Tk8tFhIYocnk4KnSPAnY6WnlVbMxQHbbcQJYSy ZNryRzqt3TkNXJXIPbcn02/H830/5pbnFxGPe4n6PLif+f0wNFA+/m6s3zgnyyt2 72WPGlXJ0sy9/ZqEHvF/+/l4vqy9JVNd9+fIOTmMNll7Yfol1fGWXJuuRjTOtaaM UryMEYZSBh+lu/j8SQa+I85j3doDq3QiR0dM9R8wWzYH0ar4jAi6vr8F8ZpGyFHd gtGkxyOLqbC9tIYyZjKjb+pNleXj4N5UmQg= -----END CERTIFICATE-----Generated at Sat Jun 13 14:23:37 2026 by rpki-client