$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa File: baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa (raw, json) Hash identifier: cAOioraTaIGAsOkPjpG2pFS4WJUIdj09Z+pCg0MTg/4= Subject key identifier: C8:77:70:F7:6C:5D:16:68:5D:08:C6:F0:EA:09:0C:5D:AB:C2:AB:24 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B5515B0A833265D67EF80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:55:15:b0:a8:33:26:5d:67:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=44d29bf4-0dd3-41d0-8910-9203de284e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:89:8b:9b:fe:43:9f:b8:d1:d3:fa:e6:81:e1: bc:d5:cc:42:5d:ba:97:35:32:23:bd:06:74:95:12: 1d:b6:77:ca:a5:87:51:66:41:93:1e:ee:47:7f:50: 7e:ea:da:0b:5e:23:23:50:f4:e8:a0:8a:f7:7b:12: bd:dc:7a:b2:04:2a:d0:a7:0a:30:da:28:33:20:46: 4b:9c:f0:f5:a7:d1:cf:1e:81:ff:74:af:e6:ba:51: 6b:14:b1:c4:00:88:6e:8f:1d:05:c8:55:e9:50:de: 73:3e:de:01:e7:69:a2:ea:e5:00:6e:ab:76:45:84: b1:7e:e4:67:ac:a6:88:85:f3:a8:e4:ea:36:c6:a8: b2:59:3b:7e:bc:83:9e:83:94:c1:d3:23:0e:67:f9: f3:fd:98:1c:11:5d:df:72:98:93:89:92:d1:41:0b: b7:aa:b3:bc:de:7e:96:31:9e:7f:4d:f4:62:17:22: 8a:a1:ef:18:ff:bf:b6:f9:5f:bd:cf:ff:cd:01:8c: 99:2f:4a:72:4b:39:f7:93:1d:6a:6b:35:4d:86:9d: 87:32:06:56:e6:2c:b9:72:5e:c6:6a:c3:e7:09:36: 7e:c6:fc:b0:50:6b:90:d6:57:51:26:d9:17:df:a2: eb:e8:bf:3e:bf:0b:8c:96:38:9b:65:45:8f:42:b4: ca:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:70:F7:6C:5D:16:68:5D:08:C6:F0:EA:09:0C:5D:AB:C2:AB:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ce::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:bb:0f:82:dd:66:cf:d8:12:b0:68:42:13:65:6f:67:3e:56: f5:ac:37:1c:23:33:e3:ce:33:c3:74:4a:6c:5c:07:aa:d5:9e: 60:71:76:af:bf:1b:ba:c3:f4:a3:c6:a4:65:98:b6:0b:00:09: 26:e2:dd:7a:7e:0c:9f:9c:84:37:77:6f:72:a5:35:2a:d0:0f: 0b:d0:06:7e:fb:b9:6d:f3:18:17:27:1b:4b:64:77:a7:01:a3: 6a:0b:20:17:6f:6f:50:98:25:a8:d0:be:30:e4:c9:b9:2d:88: f1:92:c7:92:fa:c4:e0:73:22:09:09:18:53:7b:6e:07:ba:d8: 45:a3:45:05:49:9a:23:4d:04:07:d2:91:79:18:59:f9:e6:1e: b5:66:d8:38:fa:40:f5:aa:25:06:12:84:e1:04:72:e2:39:2e: d8:4e:8a:0a:e5:3d:1c:1a:5b:14:4a:a2:38:5f:d3:94:c9:6b: 53:0c:ca:3e:71:1c:f6:b4:c9:dd:82:d4:67:64:e7:73:d3:dd: 32:92:0c:80:8a:ef:00:b8:76:6f:1f:30:d4:89:46:81:00:94: 88:6a:fe:9e:b5:19:12:94:5b:99:35:8b:b3:f7:4b:d1:5b:84: 21:3b:61:ec:a8:ac:d8:1e:64:e9:4b:08:ea:6f:df:c7:27:91: 67:7d:b9:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm1UVsKgzJl1n74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDRkMjliZjQtMGRkMy00MWQwLTg5MTAtOTIwM2RlMjg0ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYmLm/5Dn7jR0/rmgeG81cxCXbqXNTIjvQZ0 lRIdtnfKpYdRZkGTHu5Hf1B+6toLXiMjUPTooIr3exK93HqyBCrQpwow2igzIEZL nPD1p9HPHoH/dK/mulFrFLHEAIhujx0FyFXpUN5zPt4B52mi6uUAbqt2RYSxfuRn rKaIhfOo5Oo2xqiyWTt+vIOeg5TB0yMOZ/nz/ZgcEV3fcpiTiZLRQQu3qrO83n6W MZ5/TfRiFyKKoe8Y/7+2+V+9z//NAYyZL0pySzn3kx1qazVNhp2HMgZW5iy5cl7G asPnCTZ+xvywUGuQ1ldRJtkX36Lr6L8+vwuMljibZUWPQrTKdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMh3cPdsXRZoXQjG8OoJDF2rwqskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmFhNTgyNGMtYTI3ZC0z ZWJiLTg2YzgtYTQ1MGRjYWI5ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABe7D4LdZs/YErBoQhNlb2c+VvWsNxwjM+POM8N0SmxcB6rVnmBx dq+/G7rD9KPGpGWYtgsACSbi3Xp+DJ+chDd3b3KlNSrQDwvQBn77uW3zGBcnG0tk d6cBo2oLIBdvb1CYJajQvjDkybktiPGSx5L6xOBzIgkJGFN7bge62EWjRQVJmiNN BAfSkXkYWfnmHrVm2Dj6QPWqJQYShOEEcuI5LthOigrlPRwaWxRKojhf05TJa1MM yj5xHPa0yd2C1Gdk53PT3TKSDICK7wC4dm8fMNSJRoEAlIhq/p61GRKUW5k1i7P3 S9FbhCE7YeyorNgeZOlLCOpv38cnkWd9uVQ= -----END CERTIFICATE-----Generated at Sat Jun 13 17:07:08 2026 by rpki-client