$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8486756-ed27-31b8-a48e-88678765349b.roa File: a8486756-ed27-31b8-a48e-88678765349b.roa (raw, json) Hash identifier: 5s5zTya1wdW+i5wuHURLhin9YYJgE4jN8i2Uwm+qdUM= Subject key identifier: DF:06:E6:BB:2C:F9:25:9D:AF:64:C5:86:EE:4A:E3:35:20:9B:21:F7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C70304A93F10D8D049C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8486756-ed27-31b8-a48e-88678765349b.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:70:30:4a:93:f1:0d:8d:04:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=41e70d9c-0f05-41e9-ba5b-5f0570650531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:d1:af:92:82:5b:fa:95:ad:c4:52:de:2c: 67:d1:96:c6:74:c3:32:b6:d2:66:b0:62:f4:38:a2: 71:f4:fc:01:f0:d9:bb:fa:b9:78:5f:77:6a:57:1b: 07:73:cb:9b:f4:9f:c0:f9:5a:2a:dd:b7:ec:c6:59: 2c:68:a5:29:19:3a:6b:57:49:24:f8:4d:59:ec:3d: 17:a5:b0:f3:d1:57:d0:87:61:57:64:f5:39:ad:a0: 60:a7:92:82:b2:7f:d2:a7:3a:7f:83:23:f4:e5:3f: 64:8c:dc:b4:f1:bf:c5:51:80:92:6a:e2:8d:36:31: 94:96:80:ca:54:9b:b2:98:69:74:84:93:59:53:c3: a8:ae:d3:97:ab:5e:d5:e1:db:e1:6a:a1:10:7c:13: 5d:f5:8c:e8:3c:d2:03:9a:be:d6:58:dc:ca:06:c4: 52:47:ed:e7:81:5f:6c:11:60:e9:b3:de:ad:da:b7: 7c:5e:cb:d3:de:3f:b5:54:7b:b4:26:b7:f7:54:00: 5d:5d:6e:a3:5f:bf:e4:47:2d:99:3f:52:f8:55:a0: 11:e6:4a:91:38:fe:49:ba:09:1f:71:65:f7:24:46: f4:1b:87:a8:bf:2e:5a:16:4f:5b:96:f1:ab:5f:37: a1:e5:d1:56:3d:d3:48:94:e2:92:9b:ea:e9:cc:56: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:06:E6:BB:2C:F9:25:9D:AF:64:C5:86:EE:4A:E3:35:20:9B:21:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8486756-ed27-31b8-a48e-88678765349b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8f:79:01:10:08:fa:63:c7:b8:f8:1c:b6:8a:be:85:11:ae: 26:f7:dd:5a:da:62:f2:4b:b4:17:a4:f2:77:0f:00:b9:b3:4d: 44:6d:da:22:c1:d6:6c:5e:86:6d:a8:59:d9:db:38:22:50:08: cb:a6:92:4c:90:ea:e8:45:bb:eb:df:c2:53:a5:98:f0:34:4e: 6d:fb:6e:20:7f:d3:ee:88:d9:0e:f9:09:d5:a7:08:a4:57:51: ac:0c:e1:8c:9c:fe:7c:ee:3f:4d:f2:03:b2:24:15:35:9b:ad: 51:2e:92:89:41:74:6f:74:76:ce:52:c8:61:53:56:03:2e:4c: 94:f0:f0:63:1c:48:d3:75:d3:10:40:23:75:df:0c:af:72:a0: ad:ee:e3:82:97:6c:a9:ce:8b:27:73:7c:1e:64:4a:5c:73:ab: cd:fd:eb:e7:b5:7e:70:7a:0e:e0:fd:ba:92:c3:55:af:c6:8c: 40:95:3c:5d:59:f5:a1:70:22:45:b0:75:24:8f:39:44:d6:ae: 69:3e:b4:81:59:eb:91:d3:c7:9f:5c:7a:9c:e5:51:43:95:3d: 07:e9:81:5a:35:7b:03:75:40:19:c8:36:5f:b8:fd:b8:ac:f3: ba:0f:e3:08:d2:2d:10:12:0c:95:e1:61:3a:a8:a4:d6:f1:4f: 70:e6:9e:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnHAwSpPxDY0EnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDFlNzBkOWMtMGYwNS00MWU5LWJhNWItNWYwNTcwNjUwNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt13Rr5KCW/qVrcRS3ixn0ZbGdMMyttJmsGL0 OKJx9PwB8Nm7+rl4X3dqVxsHc8ub9J/A+Voq3bfsxlksaKUpGTprV0kk+E1Z7D0X pbDz0VfQh2FXZPU5raBgp5KCsn/Spzp/gyP05T9kjNy08b/FUYCSauKNNjGUloDK VJuymGl0hJNZU8OortOXq17V4dvhaqEQfBNd9YzoPNIDmr7WWNzKBsRSR+3ngV9s EWDps96t2rd8XsvT3j+1VHu0Jrf3VABdXW6jX7/kRy2ZP1L4VaAR5kqROP5Jugkf cWX3JEb0G4eovy5aFk9blvGrXzeh5dFWPdNIlOKSm+rpzFbavwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN8G5rss+SWdr2TFhu5K4zUgmyH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTg0ODY3NTYtZWQyNy0z MWI4LWE0OGUtODg2Nzg3NjUzNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqPeQEQCPpjx7j4HLaKvoURrib33VraYvJLtBek8ncPALmzTURt 2iLB1mxehm2oWdnbOCJQCMumkkyQ6uhFu+vfwlOlmPA0Tm37biB/0+6I2Q75CdWn CKRXUawM4Yyc/nzuP03yA7IkFTWbrVEukolBdG90ds5SyGFTVgMuTJTw8GMcSNN1 0xBAI3XfDK9yoK3u44KXbKnOiydzfB5kSlxzq8396+e1fnB6DuD9upLDVa/GjECV PF1Z9aFwIkWwdSSPOUTWrmk+tIFZ65HTx59cepzlUUOVPQfpgVo1ewN1QBnINl+4 /bis87oP4wjSLRASDJXhYTqopNbxT3DmnmY= -----END CERTIFICATE-----Generated at Sat Jun 13 14:28:18 2026 by rpki-client