$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa File: d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa (raw, json) Hash identifier: J526SbOKzV7SeZIhfiUi0EAy0mRPgIn3Nm2BPoj/FYg= Subject key identifier: 13:2A:C6:8C:62:26:21:AE:87:A9:DE:78:6C:0A:2A:8F:C2:3F:67:C0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C6F9539458C97E7F295C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:6f:95:39:45:8c:97:e7:f2:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=87dcbd32-9419-43b6-a4c8-3c3f5164b300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:91:7a:b9:f8:40:a9:37:82:c3:0a:38:ad: 9e:4a:d8:c7:7c:f8:09:f1:d3:d3:0e:07:f1:39:aa: ce:6e:b9:c0:0f:86:a2:e4:43:ec:94:a5:20:04:ae: 85:fc:35:a1:bc:6f:bf:5e:5c:3a:d9:6b:0d:e6:13: d7:6f:8d:fd:3f:9c:c6:d0:04:e8:54:f4:bc:d6:fc: e5:aa:bd:2b:0d:09:00:22:31:a4:fa:7c:e6:b1:2e: 3e:55:d0:c3:8e:58:f2:2c:89:12:2d:ee:36:2d:d6: ca:3f:dd:c3:78:96:9a:37:07:f5:8e:98:32:ab:89: 50:23:4b:b9:68:45:ff:81:f2:c0:31:58:cd:bc:98: 76:80:85:2b:f0:00:ad:13:99:da:1c:a0:b7:89:97: eb:2a:0e:49:36:3f:69:f6:2f:9a:10:43:63:31:55: e4:67:97:0b:96:f9:6f:96:d4:c8:7c:de:43:92:97: 8e:64:cf:52:7d:93:ac:91:3c:34:db:d2:8b:7d:c6: 02:50:29:f9:06:9a:77:24:84:5c:33:45:65:40:29: 4a:f0:c6:2c:55:51:6d:1a:08:d9:eb:ba:1c:75:d1: 31:2e:1c:aa:85:61:40:d0:b3:e6:37:5d:1b:85:73: fa:6b:bc:9b:e6:21:2f:cf:92:d6:cf:89:be:88:f0: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2A:C6:8C:62:26:21:AE:87:A9:DE:78:6C:0A:2A:8F:C2:3F:67:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:39:c1:fd:be:a3:d9:43:cf:b1:8c:1f:ee:3a:b3:9e:7a:7b: 23:66:35:4c:b9:5a:45:ff:a2:ff:a8:f7:49:2c:54:c2:39:a3: 37:e9:5e:54:f0:7b:8f:4f:00:24:96:00:d1:c9:07:8a:7d:e7: 84:b0:e7:96:1b:61:19:65:22:42:d4:24:1a:0c:b4:64:37:8e: 00:73:19:bf:68:6a:6b:ec:b5:2e:f2:02:c5:a8:ba:12:2e:7c: 03:ee:c4:5b:41:ba:34:3e:e0:74:57:39:40:4d:20:0f:57:d3: 81:44:07:2f:54:17:5c:65:5b:a1:66:d7:4c:16:dd:43:d2:c3: c5:67:d9:c0:f6:28:7d:c7:d3:ef:75:21:3d:6c:a5:7b:f0:83: 13:74:86:69:8d:f4:e6:d8:1c:50:28:d2:ef:0a:26:34:8c:4b: 6f:72:31:ef:5a:81:3d:0a:1c:9e:60:5f:13:87:6d:75:87:fd: 76:56:8b:d1:41:3c:54:87:55:98:ad:88:18:15:a9:61:fe:47: 55:9f:92:76:e7:2d:04:19:c8:92:55:cb:a7:c1:db:cf:eb:38: cf:97:24:29:f5:92:30:2a:9e:f1:fa:60:2f:77:27:36:7c:3a: 10:97:aa:e6:5a:17:50:c7:97:fb:7f:88:3f:d7:99:d6:ea:e3: 66:d7:79:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnG+VOUWMl+fylcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ODdkY2JkMzItOTQxOS00M2I2LWE0YzgtM2MzZjUxNjRiMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+iRern4QKk3gsMKOK2eStjHfPgJ8dPTDgfx OarObrnAD4ai5EPslKUgBK6F/DWhvG+/Xlw62WsN5hPXb439P5zG0AToVPS81vzl qr0rDQkAIjGk+nzmsS4+VdDDjljyLIkSLe42LdbKP93DeJaaNwf1jpgyq4lQI0u5 aEX/gfLAMVjNvJh2gIUr8ACtE5naHKC3iZfrKg5JNj9p9i+aEENjMVXkZ5cLlvlv ltTIfN5DkpeOZM9SfZOskTw029KLfcYCUCn5Bpp3JIRcM0VlQClK8MYsVVFtGgjZ 67ocddExLhyqhWFA0LPmN10bhXP6a7yb5iEvz5LWz4m+iPCAuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBMqxoxiJiGuh6neeGwKKo/CP2fAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDJkODU0ZWQtNjI5NC0z MmIwLThjNzctNDEzZDUxZmU1YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEo5wf2+o9lDz7GMH+46s556eyNmNUy5WkX/ov+o90ksVMI5ozfp XlTwe49PACSWANHJB4p954Sw55YbYRllIkLUJBoMtGQ3jgBzGb9oamvstS7yAsWo uhIufAPuxFtBujQ+4HRXOUBNIA9X04FEBy9UF1xlW6Fm10wW3UPSw8Vn2cD2KH3H 0+91IT1spXvwgxN0hmmN9ObYHFAo0u8KJjSMS29yMe9agT0KHJ5gXxOHbXWH/XZW i9FBPFSHVZitiBgVqWH+R1WfknbnLQQZyJJVy6fB28/rOM+XJCn1kjAqnvH6YC93 JzZ8OhCXquZaF1DHl/t/iD/Xmdbq42bXecg= -----END CERTIFICATE-----Generated at Sat Jun 13 15:46:02 2026 by rpki-client