$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa File: d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa (raw, json) Hash identifier: xqQdSoWnfx3X7xbPlCQ4IJwBb5KxX73fItvqLdbk3BA= Subject key identifier: C9:EB:70:22:FF:DF:26:7B:60:D3:DF:77:C6:74:BB:0F:7F:3D:4F:31 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B35615587218E43B6F830 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:4a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:35:61:55:87:21:8e:43:b6:f8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=35eb4698-5589-4712-b26c-cd14f9f75f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1b:44:ec:9f:3e:4a:05:c1:cb:24:d3:d1:25: db:3b:c4:41:43:34:91:c1:7a:08:9b:fe:63:aa:31: 48:ee:14:4a:ab:e9:71:2d:29:bd:56:d4:c6:5c:0d: 81:8f:61:75:7a:bb:17:ab:d4:3a:01:94:47:94:55: 91:1b:f3:d4:bd:71:e4:12:f0:f4:87:7e:76:50:89: 9f:67:93:a2:07:35:9c:fd:91:04:2b:0d:fe:6c:56: cd:8b:be:c4:3b:4d:25:03:cf:44:4e:b1:56:b6:93: fa:50:94:e8:ce:d4:c3:fe:2c:13:49:1c:1d:a7:5c: da:39:1d:e1:12:85:c3:9a:64:18:e3:87:14:0d:23: 74:2a:19:d6:ce:b3:57:70:29:c9:0d:ea:29:15:08: e5:6f:4c:4e:58:8e:ed:b9:dc:2a:a1:38:b2:e0:00: a7:0e:19:d4:b2:13:e9:e9:49:05:db:92:76:71:7b: 25:e0:28:5a:9d:ff:36:b7:35:50:7b:20:32:92:84: 74:d1:54:c9:2a:3c:1a:db:fa:03:0a:89:27:45:15: 2c:6b:a5:c0:fc:4d:af:1a:30:e1:4f:89:73:5d:ae: ad:e6:14:14:2d:14:3a:23:2f:fc:cc:e6:ff:a7:f1: 0a:67:36:51:b4:e9:96:54:8e:f3:1d:df:22:5a:e6: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EB:70:22:FF:DF:26:7B:60:D3:DF:77:C6:74:BB:0F:7F:3D:4F:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ff41b5-3266-344d-bab1-78be17ca4bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:58:ab:a3:29:87:0b:9a:63:50:c8:8f:c5:9c:21:66:31:70: 64:72:08:7a:bd:61:84:02:32:cb:58:fa:e8:d9:7e:ab:46:97: 12:c1:b9:ef:5f:9e:ce:bd:72:25:c3:5a:e7:01:36:f5:86:59: 49:7a:6c:a7:51:c5:90:14:60:c7:f6:38:8f:32:91:ef:9a:ed: ad:47:e0:b6:d3:61:f9:25:25:ae:16:af:6e:9d:2e:d7:38:0d: ea:1c:9d:1c:e5:fb:8b:14:60:e7:c2:f3:dd:a8:c3:c7:96:03: e7:3f:55:4c:32:e2:4f:a5:d7:ff:96:98:6b:a5:bd:56:a1:a7: 8a:a1:af:75:41:dc:05:52:19:9b:e0:25:9d:8f:d7:97:14:9c: 72:3c:2f:f6:9b:48:4d:fb:6e:f8:94:33:31:f7:93:e0:49:38: dd:6f:b7:f5:3a:cd:14:30:a8:23:93:4c:6a:1c:70:80:50:17: 1f:1a:1e:f9:5f:d0:d3:38:ca:0c:7e:9a:42:3f:2a:30:b0:29: f6:34:3d:3f:ce:d6:63:d9:45:39:00:22:24:19:e6:c6:c0:c5: e6:fd:3f:ab:38:e3:f1:fe:3a:fd:30:eb:7f:94:79:bb:e8:bc: 92:ba:07:7e:8c:ba:95:c1:f0:fe:c4:f8:ba:9e:e3:17:8c:a1: 62:a2:d5:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FmzVhVYchjkO2+DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MzVlYjQ2OTgtNTU4OS00NzEyLWIyNmMtY2QxNGY5Zjc1ZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBtE7J8+SgXByyTT0SXbO8RBQzSRwXoIm/5j qjFI7hRKq+lxLSm9VtTGXA2Bj2F1ersXq9Q6AZRHlFWRG/PUvXHkEvD0h352UImf Z5OiBzWc/ZEEKw3+bFbNi77EO00lA89ETrFWtpP6UJToztTD/iwTSRwdp1zaOR3h EoXDmmQY44cUDSN0KhnWzrNXcCnJDeopFQjlb0xOWI7tudwqoTiy4ACnDhnUshPp 6UkF25J2cXsl4Chanf82tzVQeyAykoR00VTJKjwa2/oDCoknRRUsa6XA/E2vGjDh T4lzXa6t5hQULRQ6Iy/8zOb/p/EKZzZRtOmWVI7zHd8iWuZGqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMnrcCL/3yZ7YNPfd8Z0uw9/PU8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDNmZjQxYjUtMzI2Ni0z NDRkLWJhYjEtNzhiZTE3Y2E0YmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFdYq6MphwuaY1DIj8WcIWYxcGRyCHq9YYQCMstY+ujZfqtGlxLB ue9fns69ciXDWucBNvWGWUl6bKdRxZAUYMf2OI8yke+a7a1H4LbTYfklJa4Wr26d Ltc4DeocnRzl+4sUYOfC892ow8eWA+c/VUwy4k+l1/+WmGulvVahp4qhr3VB3AVS GZvgJZ2P15cUnHI8L/abSE37bviUMzH3k+BJON1vt/U6zRQwqCOTTGoccIBQFx8a Hvlf0NM4ygx+mkI/KjCwKfY0PT/O1mPZRTkAIiQZ5sbAxeb9P6s44/H+Ov0w63+U ebvovJK6B36MupXB8P7E+Lqe4xeMoWKi1bM= -----END CERTIFICATE-----Generated at Sat Jun 13 17:07:06 2026 by rpki-client