$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa File: 95be4890-2931-3ddc-9628-15449cfd5f27.roa (raw, json) Hash identifier: CvJCJMorzqx62+AUI7dZvT/Tw+Hwov+28d+trmyZQ3U= Subject key identifier: 20:07:61:B6:C9:03:1B:3B:7A:22:34:1E:E3:B3:A4:4B:26:9D:68:73 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C72C9F6D85E7484639000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:72:c9:f6:d8:5e:74:84:63:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=277c06f7-60e7-47c4-8360-c1df7ce7e804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:f4:8d:36:29:28:df:76:9a:db:3e:05:d5: f0:f1:59:32:ca:86:35:1f:13:54:6e:8e:65:cf:8f: f7:90:ed:41:3e:81:db:72:81:54:59:22:6a:0f:51: 11:02:13:b2:36:ec:7b:f4:b6:56:9e:74:d8:6d:23: bf:58:9b:66:b0:45:53:ab:2c:28:b8:ac:9e:8a:24: 1e:f9:f3:5f:b8:8b:24:87:bd:f1:4b:d7:bf:67:b8: 47:26:c5:92:d8:c8:17:84:34:16:1b:61:91:f0:25: ec:f5:cf:18:07:73:3e:59:cd:16:fd:b0:bc:69:12: ff:2b:e5:27:0a:30:11:fb:12:2f:8d:b6:05:50:b0: 62:63:86:ec:1f:40:a2:eb:d1:2d:10:82:23:b6:03: 59:65:41:32:f0:80:2e:74:82:e1:9a:37:9e:79:e3: bf:7a:23:43:f0:24:4f:29:78:89:58:43:d6:bb:06: c8:aa:ad:1a:95:a3:7c:cc:eb:dc:46:0f:4e:f2:db: 98:56:9e:7f:0e:8b:33:26:d9:32:07:21:a3:54:bb: 86:0f:63:bb:59:c7:55:3e:f6:4a:f4:31:78:f2:b8: e5:14:f0:af:32:44:ee:7d:b9:58:17:cb:fa:f4:28: be:9b:7e:3e:20:06:32:f1:9e:62:73:00:04:34:63: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:07:61:B6:C9:03:1B:3B:7A:22:34:1E:E3:B3:A4:4B:26:9D:68:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:57:c0:e1:7d:b8:53:07:a8:e6:84:e2:fe:6a:dd:09:16:d7: b7:d3:fe:60:6d:0f:5d:e9:31:9e:c6:77:f3:a2:84:66:1a:e0: bc:41:d8:fa:12:2a:12:72:63:74:f5:85:5b:8a:21:91:2e:ce: c4:71:b1:ba:75:0f:de:f4:b5:0e:fd:59:37:aa:ff:bb:04:17: 7d:57:bb:48:5c:cd:09:3e:37:3f:1c:e4:28:6f:b5:4a:f3:f0: 7c:ad:ec:60:1c:a5:3f:e1:84:99:c9:0a:e0:fa:34:b7:37:a4: a7:58:a4:93:d5:ce:e7:58:e1:86:8f:6e:0c:e9:4e:61:b3:bb: 84:01:43:e4:49:28:79:bd:23:b2:b3:04:31:9b:fb:ee:af:6a: 2c:87:7a:af:78:de:0f:31:7a:03:a3:3d:a7:a1:f1:2b:b3:f2: b6:e8:41:cc:9b:09:58:fe:48:c0:00:ed:de:05:d2:71:60:25: f3:05:5f:5c:f0:33:a5:cd:35:fa:8c:73:d6:f8:0c:f4:20:1c: 53:fc:9f:4f:db:75:bd:67:05:12:e9:b9:fc:07:ee:0d:cf:4f: 09:e7:ae:59:b6:33:8b:67:92:1c:55:0c:1d:28:f3:71:c2:de: f9:e1:24:d1:52:5a:a1:e5:c7:52:be:6a:ae:ef:85:85:d3:9e: 4f:dd:ab:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnHLJ9thedIRjkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk Mjc3YzA2ZjctNjBlNy00N2M0LTgzNjAtYzFkZjdjZTdlODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsX0jTYpKN92mts+BdXw8VkyyoY1HxNUbo5l z4/3kO1BPoHbcoFUWSJqD1ERAhOyNux79LZWnnTYbSO/WJtmsEVTqywouKyeiiQe +fNfuIskh73xS9e/Z7hHJsWS2MgXhDQWG2GR8CXs9c8YB3M+Wc0W/bC8aRL/K+Un CjAR+xIvjbYFULBiY4bsH0Ci69EtEIIjtgNZZUEy8IAudILhmjeeeeO/eiND8CRP KXiJWEPWuwbIqq0alaN8zOvcRg9O8tuYVp5/DoszJtkyByGjVLuGD2O7WcdVPvZK 9DF48rjlFPCvMkTufblYF8v69Ci+m34+IAYy8Z5icwAENGP46QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCAHYbbJAxs7eiI0HuOzpEsmnWhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTViZTQ4OTAtMjkzMS0z ZGRjLTk2MjgtMTU0NDljZmQ1ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABFXwOF9uFMHqOaE4v5q3QkW17fT/mBtD13pMZ7Gd/OihGYa4LxB 2PoSKhJyY3T1hVuKIZEuzsRxsbp1D970tQ79WTeq/7sEF31Xu0hczQk+Nz8c5Chv tUrz8Hyt7GAcpT/hhJnJCuD6NLc3pKdYpJPVzudY4YaPbgzpTmGzu4QBQ+RJKHm9 I7KzBDGb++6vaiyHeq943g8xegOjPaeh8Suz8rboQcybCVj+SMAA7d4F0nFgJfMF X1zwM6XNNfqMc9b4DPQgHFP8n0/bdb1nBRLpufwH7g3PTwnnrlm2M4tnkhxVDB0o 83HC3vnhJNFSWqHlx1K+aq7vhYXTnk/dq9I= -----END CERTIFICATE-----Generated at Sat Jun 13 14:26:38 2026 by rpki-client