$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd5996b9-9e4f-3753-b04e-18a43ee1c61e.roa File: dd5996b9-9e4f-3753-b04e-18a43ee1c61e.roa (raw, json) Hash identifier: 1ae5o6Yt6pCRSFnXPkHdezwFBxQIT/F8iqT2b7cpA8Y= Subject key identifier: CB:23:06:77:7E:E8:29:F0:99:07:CD:E0:2B:70:C2:1A:26:47:76:84 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B52383D42064FBB7DC100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd5996b9-9e4f-3753-b04e-18a43ee1c61e.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:52:38:3d:42:06:4f:bb:7d:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=16390ae4-b5c7-41e6-9a05-f88a14e79227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:25:fd:67:67:80:5e:ff:54:67:d0:01:0d: 28:17:15:7e:1f:48:13:2c:3c:2c:82:c3:9b:37:28: 04:53:7d:20:1b:3b:2a:39:7f:63:49:55:21:dc:61: 0c:d6:b4:66:e1:d6:5b:e2:61:5a:36:d3:20:a2:05: a1:e8:ad:9e:f8:72:f2:2a:88:7b:90:70:b9:2c:47: a2:2c:3f:fe:94:d4:af:1e:e4:b3:49:73:49:02:64: 28:2d:ac:23:a4:1a:0b:60:f7:f0:29:75:ad:82:1a: 6f:da:45:cb:1b:a8:09:06:59:a3:26:75:74:df:35: 6a:8e:5f:f7:c7:23:64:9c:55:dd:f9:8f:cd:14:d6: 48:17:da:cc:ed:88:27:9b:58:0b:03:67:90:70:3e: 88:92:22:79:81:72:81:12:f0:ca:c3:55:31:a8:3a: b7:cf:67:87:11:1e:98:3f:a1:62:76:c7:00:8d:49: 5a:bb:92:b0:d6:10:5e:0a:3d:17:b5:b2:6d:dd:91: 47:00:7d:44:13:02:82:07:0c:73:be:75:45:fd:9d: 16:43:9f:94:91:b5:f8:d7:47:1f:d2:67:31:59:10: ec:23:50:62:88:d0:42:2a:b7:e4:8c:f4:10:a2:2f: 37:90:54:d9:8f:23:0e:22:17:4f:97:a2:c9:a4:51: b7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:23:06:77:7E:E8:29:F0:99:07:CD:E0:2B:70:C2:1A:26:47:76:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd5996b9-9e4f-3753-b04e-18a43ee1c61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:be:6e:81:c1:b3:06:ac:93:05:f1:5a:bc:93:2f:45:60:2f: 13:28:e9:7c:59:ea:50:42:93:e6:a0:1a:fe:36:8b:df:38:98: b4:ad:0e:cd:aa:4b:35:fd:4f:6b:ce:fc:69:b7:26:5c:a1:bf: 18:e8:b5:d7:aa:96:3b:62:c1:75:8d:44:8c:9b:ae:b1:26:7d: 3a:3b:f1:c4:9e:71:66:43:e7:77:80:c1:09:c0:82:4a:ff:d0: 01:e7:1d:2c:d3:8d:c2:ac:f1:d4:5a:3e:81:1f:92:0e:b0:3e: 28:ec:e6:9b:1a:fd:d3:46:6e:85:3f:05:9c:ac:02:b4:16:25: 17:d9:c7:73:35:7d:d7:a1:7f:12:c0:78:93:f0:50:c1:83:df: b2:30:b8:f2:3b:53:3f:d5:e7:2d:fc:38:77:17:49:f6:28:4d: fe:63:ac:c5:c4:a6:92:cc:e8:44:e0:46:0f:a2:18:c9:c8:bd: b7:14:45:a8:b4:9e:aa:59:bc:60:f2:10:e2:05:99:90:d8:05: 7b:e2:58:89:2b:82:c4:08:c2:b3:96:75:bf:6d:29:30:31:52: 84:49:67:87:9f:c2:5c:02:30:71:d8:74:e4:1f:5d:5d:a7:68: 96:7c:f2:4b:46:88:66:0d:22:15:ab:45:06:80:ff:fd:ad:0a: 19:44:fc:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm1I4PUIGT7t9wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MTYzOTBhZTQtYjVjNy00MWU2LTlhMDUtZjg4YTE0ZTc5MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgwl/WdngF7/VGfQAQ0oFxV+H0gTLDwsgsOb NygEU30gGzsqOX9jSVUh3GEM1rRm4dZb4mFaNtMgogWh6K2e+HLyKoh7kHC5LEei LD/+lNSvHuSzSXNJAmQoLawjpBoLYPfwKXWtghpv2kXLG6gJBlmjJnV03zVqjl/3 xyNknFXd+Y/NFNZIF9rM7Ygnm1gLA2eQcD6IkiJ5gXKBEvDKw1UxqDq3z2eHER6Y P6FidscAjUlau5Kw1hBeCj0XtbJt3ZFHAH1EEwKCBwxzvnVF/Z0WQ5+UkbX410cf 0mcxWRDsI1BiiNBCKrfkjPQQoi83kFTZjyMOIhdPl6LJpFG3lQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMsjBnd+6CnwmQfN4CtwwhomR3aEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGQ1OTk2YjktOWU0Zi0z NzUzLWIwNGUtMThhNDNlZTFjNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEm+boHBswaskwXxWryTL0VgLxMo6XxZ6lBCk+agGv42i984mLSt Ds2qSzX9T2vO/Gm3JlyhvxjotdeqljtiwXWNRIybrrEmfTo78cSecWZD53eAwQnA gkr/0AHnHSzTjcKs8dRaPoEfkg6wPijs5psa/dNGboU/BZysArQWJRfZx3M1fdeh fxLAeJPwUMGD37IwuPI7Uz/V5y38OHcXSfYoTf5jrMXEppLM6ETgRg+iGMnIvbcU Rai0nqpZvGDyEOIFmZDYBXviWIkrgsQIwrOWdb9tKTAxUoRJZ4efwlwCMHHYdOQf XV2naJZ88ktGiGYNIhWrRQaA//2tChlE/DI= -----END CERTIFICATE-----Generated at Sat Jun 13 15:46:05 2026 by rpki-client