$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa File: a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa (raw, json) Hash identifier: ByOr63+0ZsRAiAIOJgkr6Q7Cp41umNnMlAETnWEVAtU= Subject key identifier: 1E:59:98:C5:5C:B6:89:20:BA:6C:9C:47:A7:F1:BD:69:4B:E9:8D:D7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B4AA631BAC991553303B0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:4a:a6:31:ba:c9:91:55:33:03:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=218f53ba-9f8c-427b-a79f-3ba1f754fc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:09:1b:13:dc:2e:d1:55:97:ff:f3:71:20: 45:1c:f5:12:6e:75:e7:69:08:04:27:53:91:30:5d: d7:32:3e:ff:ed:d8:39:e1:69:d5:a2:8a:37:91:f9: 0a:c8:94:ec:80:10:ae:75:93:2e:4e:91:5c:2e:79: 87:93:55:85:7c:c9:d9:c7:0d:c1:0d:6e:66:03:61: b5:f9:d0:1d:15:75:02:24:bd:61:ca:46:9d:f3:a1: 21:40:43:a5:9c:79:f0:c5:c0:8f:71:82:05:94:b1: 46:1a:36:4e:f3:a9:bb:b8:cf:80:5a:76:ca:60:c6: d0:a9:a6:f5:26:78:24:56:13:a5:86:a1:bc:15:be: 84:4d:75:da:4e:f9:46:35:eb:5c:94:6a:54:24:9a: 41:82:65:12:de:99:6b:c4:ef:3f:c2:57:26:20:aa: d7:da:c0:04:8b:c5:6e:3a:33:93:37:59:48:de:6e: 94:a0:67:27:bb:95:f1:98:ec:c7:dc:93:90:fb:50: 73:3d:95:dc:29:9a:c1:27:20:08:16:0f:31:7a:e4: 1a:83:04:95:26:cc:1f:e7:f6:bc:6f:39:15:c5:36: 51:f1:64:20:27:30:fa:33:88:92:cd:e0:ba:c4:de: 0c:f1:84:29:46:50:78:1c:ee:25:4b:66:a8:ae:f3: 95:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:59:98:C5:5C:B6:89:20:BA:6C:9C:47:A7:F1:BD:69:4B:E9:8D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:61:41:ed:1a:35:b0:1a:19:2e:7d:d6:64:93:d2:eb:83:1f: 5a:9c:c2:7c:53:2e:05:4e:77:c4:4a:42:f3:85:17:6e:8f:a0: 93:f1:26:74:d9:c3:ee:c7:5e:fb:6b:2a:34:df:b9:1b:43:6f: 3f:05:1d:cc:72:d9:12:53:96:d9:d4:0d:2c:8c:1b:ad:e1:b9: f8:ec:2a:7e:0f:93:22:6f:0f:3b:cd:f6:0b:41:3e:f4:ec:56: d5:23:58:c5:20:8b:fd:25:86:ef:bd:54:51:a3:bf:88:83:a7: b6:56:c0:dc:7f:4b:e8:7e:df:11:2c:bb:dd:c3:ef:d8:72:4c: 35:e9:98:2f:30:31:cb:eb:fd:b7:78:9c:f6:14:22:56:c0:f4: e2:bd:16:b0:ea:0d:e1:4c:a5:59:9b:9f:8a:1f:f7:d9:33:a7: 24:1d:99:29:c9:5d:a1:c7:71:cd:c8:31:1e:a8:b1:ba:c5:a7: 21:68:3a:f1:b5:45:81:a4:f6:f3:00:1a:91:a7:4f:a9:4b:ea: f0:7a:ad:dc:2b:b8:3f:5b:21:14:a6:02:4d:c6:7a:e6:7f:bc: da:44:58:27:8c:bd:2e:66:f3:14:a1:83:24:17:ed:3c:c7:bf: 41:a8:aa:61:3e:48:36:ba:3b:17:c3:a2:24:cf:99:93:bc:a3: d2:3b:ff:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm0qmMbrJkVUzA7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MjE4ZjUzYmEtOWY4Yy00MjdiLWE3OWYtM2JhMWY3NTRmYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonQJGxPcLtFVl//zcSBFHPUSbnXnaQgEJ1OR MF3XMj7/7dg54WnVooo3kfkKyJTsgBCudZMuTpFcLnmHk1WFfMnZxw3BDW5mA2G1 +dAdFXUCJL1hykad86EhQEOlnHnwxcCPcYIFlLFGGjZO86m7uM+AWnbKYMbQqab1 JngkVhOlhqG8Fb6ETXXaTvlGNetclGpUJJpBgmUS3plrxO8/wlcmIKrX2sAEi8Vu OjOTN1lI3m6UoGcnu5XxmOzH3JOQ+1BzPZXcKZrBJyAIFg8xeuQagwSVJswf5/a8 bzkVxTZR8WQgJzD6M4iSzeC6xN4M8YQpRlB4HO4lS2aorvOV9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB5ZmMVctokgumycR6fxvWlL6Y3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTBjYzg0MWUtYWE2ZS0z NDMyLWFmMjYtNjE2MjFmOGFiM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZhQe0aNbAaGS591mST0uuDH1qcwnxTLgVOd8RKQvOFF26PoJPx JnTZw+7HXvtrKjTfuRtDbz8FHcxy2RJTltnUDSyMG63hufjsKn4PkyJvDzvN9gtB PvTsVtUjWMUgi/0lhu+9VFGjv4iDp7ZWwNx/S+h+3xEsu93D79hyTDXpmC8wMcvr /bd4nPYUIlbA9OK9FrDqDeFMpVmbn4of99kzpyQdmSnJXaHHcc3IMR6osbrFpyFo OvG1RYGk9vMAGpGnT6lL6vB6rdwruD9bIRSmAk3GeuZ/vNpEWCeMvS5m8xShgyQX 7TzHv0GoqmE+SDa6OxfDoiTPmZO8o9I7/3Y= -----END CERTIFICATE-----Generated at Sat Jun 13 14:23:33 2026 by rpki-client