$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa File: 04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa (raw, json) Hash identifier: hpTkhJ9ERqR8obAn76fotczuDGaqW8RiuJrPZs5xv/M= Subject key identifier: CB:E6:81:54:4C:FD:BD:C7:03:7A:60:79:37:5E:F1:CF:74:D0:46:94 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C70D50E14311B79BE0B20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:70:d5:0e:14:31:1b:79:be:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d73d0a23-eb96-4de7-adb4-a84bd186b8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4f:22:e9:81:7e:6c:03:e7:cf:c6:b4:c6:c4: 32:b0:50:af:70:e2:da:30:e0:27:84:0c:30:bf:13: d8:e3:a8:02:12:5d:77:4f:ca:f7:b4:90:a2:b5:1e: 74:08:4c:a0:45:86:e6:43:23:bb:2d:54:87:46:f4: d1:0f:76:9e:ee:8a:af:c1:bc:00:d5:46:55:56:8b: 19:52:c5:cf:08:b6:64:a2:e0:80:95:ed:17:18:ed: 75:40:d1:e5:cd:4a:22:44:85:14:26:1e:c6:fe:68: d5:e4:1e:2a:71:78:f7:bd:60:8c:61:0a:8b:7b:39: 10:02:de:b1:59:08:de:e4:f5:68:51:a3:28:4f:36: 65:fd:bd:d4:03:ac:e3:9c:01:dc:01:63:e3:d9:cd: d5:a6:a8:20:e0:d4:3c:7d:6f:0b:55:10:e5:14:bd: 97:11:ba:9e:2a:ee:cb:b3:c3:22:89:31:68:c6:fd: 4b:d6:d1:b8:02:5a:b0:37:02:85:c0:96:e6:22:c6: a5:97:00:7f:0a:e1:36:38:e6:5b:19:f3:15:2a:c7: 4e:d6:68:67:17:d2:9f:5a:54:e0:7b:78:0a:19:dd: 48:f5:c1:dd:bc:7b:ac:93:d4:a1:a1:3e:4b:b9:bb: 0b:22:17:26:61:1d:e0:f2:10:e2:92:d0:2a:ff:42: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E6:81:54:4C:FD:BD:C7:03:7A:60:79:37:5E:F1:CF:74:D0:46:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1c:97:b4:3b:0e:57:72:48:3f:36:c8:a0:ce:e9:1c:b1:1c: 69:f0:5d:8a:76:59:fc:23:ee:e5:e2:b9:ba:a7:d6:ba:81:88: 5a:79:4b:ca:08:bf:3b:d8:14:a1:31:a6:89:d1:57:98:4b:62: 4c:a1:61:e8:94:9f:28:a8:cd:48:2a:64:41:1f:f4:e6:2c:39: 15:49:d9:83:f2:5b:33:f4:2d:a8:7d:3e:7b:8e:66:c3:b3:05: d0:64:1b:ae:49:61:f5:17:23:a3:34:a7:dc:c9:2b:e3:50:89: 60:30:af:b3:b5:cc:f3:b0:2f:f9:8e:30:cc:26:84:bc:e5:3f: f4:20:ad:13:0f:15:c9:14:88:ba:f6:22:e8:bc:4b:f7:d2:31: 03:4a:90:40:6d:80:1d:47:30:a9:83:fb:01:71:52:79:00:26: 8f:ac:ca:c6:6a:5c:65:a0:51:f3:a6:64:ab:ad:01:6c:59:bf: 08:29:5d:30:b4:7c:ff:9d:db:d8:15:da:d0:a0:f1:c0:8f:06: 25:ce:74:93:b8:51:e3:85:cf:d7:d8:6e:97:72:ab:a0:c4:e2: 0a:83:87:cd:32:29:69:8c:bf:8e:ba:60:11:b0:12:d0:60:5e: eb:0a:5d:46:1f:c3:ba:96:d6:76:22:70:e0:ee:56:cc:2b:bf: 4a:74:bf:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnHDVDhQxG3m+CyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDczZDBhMjMtZWI5Ni00ZGU3LWFkYjQtYTg0YmQxODZiOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm08i6YF+bAPnz8a0xsQysFCvcOLaMOAnhAww vxPY46gCEl13T8r3tJCitR50CEygRYbmQyO7LVSHRvTRD3ae7oqvwbwA1UZVVosZ UsXPCLZkouCAle0XGO11QNHlzUoiRIUUJh7G/mjV5B4qcXj3vWCMYQqLezkQAt6x WQje5PVoUaMoTzZl/b3UA6zjnAHcAWPj2c3Vpqgg4NQ8fW8LVRDlFL2XEbqeKu7L s8MiiTFoxv1L1tG4AlqwNwKFwJbmIsallwB/CuE2OOZbGfMVKsdO1mhnF9KfWlTg e3gKGd1I9cHdvHusk9ShoT5LubsLIhcmYR3g8hDiktAq/0I3/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMvmgVRM/b3HA3pgeTde8c900EaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDRjZTI5MmYtM2FkOS0z ZTM2LWJkMzYtMDllZDFlM2IyMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJEcl7Q7DldySD82yKDO6RyxHGnwXYp2Wfwj7uXiubqn1rqBiFp5 S8oIvzvYFKExponRV5hLYkyhYeiUnyiozUgqZEEf9OYsORVJ2YPyWzP0Lah9PnuO ZsOzBdBkG65JYfUXI6M0p9zJK+NQiWAwr7O1zPOwL/mOMMwmhLzlP/QgrRMPFckU iLr2Iui8S/fSMQNKkEBtgB1HMKmD+wFxUnkAJo+sysZqXGWgUfOmZKutAWxZvwgp XTC0fP+d29gV2tCg8cCPBiXOdJO4UeOFz9fYbpdyq6DE4gqDh80yKWmMv466YBGw EtBgXusKXUYfw7qW1nYicODuVswrv0p0v9w= -----END CERTIFICATE-----Generated at Sat Jun 13 21:26:37 2026 by rpki-client