$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dffa10e-c9c6-3444-9d80-d59171794299.roa File: 0dffa10e-c9c6-3444-9d80-d59171794299.roa (raw, json) Hash identifier: K9puxvhIBxidEfGFfXHpht8KdMx0jBEJXIIkYdoiIxY= Subject key identifier: BB:0E:5E:0E:EE:FB:C3:A2:DB:1B:12:C8:14:CA:29:58:D1:09:56:9F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B5680E0DBA723D7515308 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dffa10e-c9c6-3444-9d80-d59171794299.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:56:80:e0:db:a7:23:d7:51:53:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=e134872f-da05-4228-9a7d-9cfd9dcf8cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:08:e2:20:ad:10:0a:d5:00:ba:6a:ad:cc: c0:b9:84:54:4a:5f:fc:db:b9:af:d8:db:e2:92:e1: 50:19:47:68:81:5c:3e:15:9f:ef:29:10:9c:5f:73: 07:45:f8:b4:db:13:3f:cf:b6:14:1b:a0:bc:81:99: 79:78:30:1f:0a:5e:17:47:79:47:e0:c5:22:52:c6: 92:8b:ff:2b:b7:6d:79:aa:61:dd:f4:04:0b:74:d6: ab:0c:3a:0a:4e:29:70:44:7c:b7:7c:89:12:af:05: fc:f0:de:47:70:ce:a5:e6:c6:d7:8b:c1:82:4a:fd: 13:bf:86:b0:54:b5:e1:9e:8b:6e:c3:99:db:61:bc: 01:ab:ba:cb:d0:9e:cd:4d:96:ce:2d:96:a3:e7:29: 42:5e:26:f2:d4:4b:1b:84:83:38:34:6a:eb:8d:c6: fc:69:9e:54:40:d4:c5:d6:98:86:35:e7:c5:fa:39: 69:0c:b0:da:36:ea:a3:4b:f4:9d:b4:4e:35:9b:4e: fa:d8:cb:ae:2d:e2:8f:07:5a:a2:54:e9:9d:dd:11: fe:e4:a6:97:62:7b:7b:8f:43:7b:ee:44:cd:66:50: 62:4d:fb:f5:7c:ee:56:6f:e7:7c:e1:02:b5:e8:7a: 0b:3a:9a:73:1a:08:f9:cc:5e:fa:4f:f8:79:16:cb: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0E:5E:0E:EE:FB:C3:A2:DB:1B:12:C8:14:CA:29:58:D1:09:56:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dffa10e-c9c6-3444-9d80-d59171794299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6a:5e:74:f6:8d:34:1d:66:b3:e4:d9:f3:39:1d:93:e5:f8: 67:20:c5:5f:56:e0:34:d9:c6:65:70:59:ac:79:49:22:27:ab: 5c:fc:f0:76:9c:0e:4e:cf:ea:89:12:72:b7:6d:10:d4:d2:a3: c5:fc:34:5e:3f:62:bf:74:a2:83:47:4e:37:cc:4b:97:ba:26: cc:6a:72:57:4a:21:54:cd:c9:c3:07:15:b9:05:94:24:2c:a9: f0:bc:3d:e9:f8:1d:2a:ba:4c:06:ae:ec:4e:31:1d:94:41:25: 21:8d:bc:ba:20:1f:fc:7a:00:37:ce:40:8c:d2:db:ce:57:41: 80:9a:de:53:e7:ce:9d:d5:24:7e:a2:23:76:20:3e:2c:90:06: 97:a3:9e:b8:00:b8:22:10:86:58:72:d1:ca:38:a9:6d:84:11: bd:84:3f:a7:0b:f1:e3:5a:73:c7:c0:73:08:7d:87:00:a9:5d: c1:aa:1a:09:10:4d:4b:de:9d:02:6e:96:ea:73:22:cf:88:f3: 6e:39:89:ac:cb:b4:b0:3f:be:5a:89:97:8e:c4:8b:5b:f2:47: 19:a7:e8:94:d0:94:c8:a3:18:a3:26:68:d5:fa:94:f9:b8:f4: 23:89:37:f8:30:6a:b9:df:1b:3f:6c:f6:ce:fc:07:c4:60:94: 4d:20:86:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm1aA4NunI9dRUwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZTEzNDg3MmYtZGEwNS00MjI4LTlhN2QtOWNmZDlkY2Y4Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AYI4iCtEArVALpqrczAuYRUSl/827mv2Nvi kuFQGUdogVw+FZ/vKRCcX3MHRfi02xM/z7YUG6C8gZl5eDAfCl4XR3lH4MUiUsaS i/8rt215qmHd9AQLdNarDDoKTilwRHy3fIkSrwX88N5HcM6l5sbXi8GCSv0Tv4aw VLXhnotuw5nbYbwBq7rL0J7NTZbOLZaj5ylCXiby1EsbhIM4NGrrjcb8aZ5UQNTF 1piGNefF+jlpDLDaNuqjS/SdtE41m0762MuuLeKPB1qiVOmd3RH+5KaXYnt7j0N7 7kTNZlBiTfv1fO5Wb+d84QK16HoLOppzGgj5zF76T/h5FsvBjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLsOXg7u+8Oi2xsSyBTKKVjRCVafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGRmZmExMGUtYzljNi0z NDQ0LTlkODAtZDU5MTcxNzk0Mjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtqXnT2jTQdZrPk2fM5HZPl+GcgxV9W4DTZxmVwWax5SSInq1z8 8HacDk7P6okScrdtENTSo8X8NF4/Yr90ooNHTjfMS5e6JsxqcldKIVTNycMHFbkF lCQsqfC8Pen4HSq6TAau7E4xHZRBJSGNvLogH/x6ADfOQIzS285XQYCa3lPnzp3V JH6iI3YgPiyQBpejnrgAuCIQhlhy0co4qW2EEb2EP6cL8eNac8fAcwh9hwCpXcGq GgkQTUvenQJulupzIs+I8245iazLtLA/vlqJl47Ei1vyRxmn6JTQlMijGKMmaNX6 lPm49COJN/gwarnfGz9s9s78B8RglE0ghik= -----END CERTIFICATE-----Generated at Sat Jun 13 16:04:58 2026 by rpki-client