$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa File: ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa (raw, json) Hash identifier: 939B1jVjIFMnut1VdXujqHxfnZPl9R3MTz27mxDINa4= Subject key identifier: 0B:E1:FB:C2:8D:08:7D:8B:BC:8D:2E:BA:08:D1:CD:F0:3B:A4:B5:5D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B4929A4C309BFA9138C50 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:49:29:a4:c3:09:bf:a9:13:8c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=e955abe8-d794-4fe0-8c14-4c0a7dcfd4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:41:59:37:b5:f5:c8:75:48:65:ae:80:e0: 2d:da:b1:40:8b:77:a0:50:d7:1b:a1:ac:d7:3e:b6: 2a:4f:39:b7:94:7c:08:0f:8f:70:bb:34:9c:33:43: ac:5a:02:27:07:a0:d5:97:5e:a6:a8:61:e2:74:51: 14:fb:55:69:3e:a0:30:8f:fe:5f:1c:18:b6:7f:52: 9f:be:e4:38:25:94:c6:d0:f8:4f:0d:25:a9:b2:42: b7:be:09:b1:19:a9:0e:41:45:e5:59:ab:aa:26:13: 93:30:ac:6c:c2:35:b0:d6:ad:04:41:1a:4f:73:6c: 2b:1e:45:9c:8a:36:69:7f:1a:fd:9a:c0:45:8c:c3: c3:8d:48:ae:7d:8f:56:61:ac:d7:c3:94:c5:dc:c8: 7c:3a:33:23:10:2d:ef:86:7d:34:86:bb:a7:84:c4: 73:43:78:8d:18:8b:ee:53:be:b4:9d:70:7a:d6:77: ff:0c:bd:79:52:3b:95:20:b1:4c:9d:4a:72:1f:07: 6f:53:e0:30:82:4f:c7:d7:98:9f:f0:d1:c0:5e:8c: a4:77:35:25:48:d7:6c:7a:64:0b:ac:a2:20:e2:dd: b9:48:b8:91:68:57:7e:5e:42:d8:fa:5e:24:15:46: 6a:62:f5:5a:7a:80:9b:73:86:25:f7:93:10:bc:85: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E1:FB:C2:8D:08:7D:8B:BC:8D:2E:BA:08:D1:CD:F0:3B:A4:B5:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ab2677ec-d17f-3c5a-b7cb-0b92feaf9c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bb:05:6a:e4:b7:26:26:28:91:a5:ce:fc:45:27:fa:90:c9: e2:2a:9d:9c:e2:57:42:f2:03:5e:45:b8:f7:dd:fc:a7:61:29: 6b:f7:74:7c:38:8c:de:e1:81:a3:d7:d8:63:32:dc:69:45:ba: 90:6f:50:51:f6:4d:ae:9f:db:2b:f0:81:1c:7f:be:0c:65:59: 5d:18:37:cb:2d:19:a9:f1:78:a7:91:77:58:bb:19:cd:b4:c6: e3:eb:63:48:13:28:f4:95:31:30:d9:21:5f:6e:4b:e8:67:fe: e3:74:5f:7c:0f:bb:31:57:34:d8:72:9a:f4:b8:a9:d1:29:01: df:13:e8:1a:dc:d5:99:2f:a4:b1:4e:53:b0:14:2a:64:8c:86: 88:c6:35:48:44:6d:84:b9:02:82:4f:30:31:e0:a0:bd:3e:99: ff:f5:3f:37:e8:b5:2d:5f:9b:ba:8c:9f:aa:a0:5a:0b:30:4c: 74:be:03:0b:04:2f:08:1b:25:71:c9:1b:ac:3b:8f:f8:59:69: 1e:6f:43:29:35:15:ca:cc:63:29:97:7b:96:22:21:cc:5b:17: bd:2b:fc:ff:9c:1f:b9:f9:04:07:61:ff:8f:fd:0a:6d:5f:84: ab:86:31:d3:71:be:ac:6e:b9:cf:7d:aa:31:1d:84:39:28:0d: 8f:7e:fd:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm0kppMMJv6kTjFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZTk1NWFiZTgtZDc5NC00ZmUwLThjMTQtNGMwYTdkY2ZkNGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ1BWTe19ch1SGWugOAt2rFAi3egUNcboazX PrYqTzm3lHwID49wuzScM0OsWgInB6DVl16mqGHidFEU+1VpPqAwj/5fHBi2f1Kf vuQ4JZTG0PhPDSWpskK3vgmxGakOQUXlWauqJhOTMKxswjWw1q0EQRpPc2wrHkWc ijZpfxr9msBFjMPDjUiufY9WYazXw5TF3Mh8OjMjEC3vhn00hrunhMRzQ3iNGIvu U760nXB61nf/DL15UjuVILFMnUpyHwdvU+Awgk/H15if8NHAXoykdzUlSNdsemQL rKIg4t25SLiRaFd+XkLY+l4kFUZqYvVaeoCbc4Yl95MQvIUP2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAvh+8KNCH2LvI0uugjRzfA7pLVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWIyNjc3ZWMtZDE3Zi0z YzVhLWI3Y2ItMGI5MmZlYWY5YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIy7BWrktyYmKJGlzvxFJ/qQyeIqnZziV0LyA15FuPfd/KdhKWv3 dHw4jN7hgaPX2GMy3GlFupBvUFH2Ta6f2yvwgRx/vgxlWV0YN8stGanxeKeRd1i7 Gc20xuPrY0gTKPSVMTDZIV9uS+hn/uN0X3wPuzFXNNhymvS4qdEpAd8T6Brc1Zkv pLFOU7AUKmSMhojGNUhEbYS5AoJPMDHgoL0+mf/1PzfotS1fm7qMn6qgWgswTHS+ AwsELwgbJXHJG6w7j/hZaR5vQyk1FcrMYymXe5YiIcxbF70r/P+cH7n5BAdh/4/9 Cm1fhKuGMdNxvqxuuc99qjEdhDkoDY9+/Rs= -----END CERTIFICATE-----Generated at Sat Jun 13 21:23:45 2026 by rpki-client