$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa File: 309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa (raw, json) Hash identifier: F/NV7D+KfsoWidPPnVflO0KrFN5q5MfvGAL5cpRSRU0= Subject key identifier: 14:3B:0E:2D:46:9F:01:F4:DE:EC:8A:03:8E:DD:02:8E:9E:86:D4:BA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C661E0EFD11BA132DAF80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:66:1e:0e:fd:11:ba:13:2d:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=95f61ef8-f08b-4554-a923-86c9967bf9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:f9:c9:c4:3e:29:1e:a3:da:f5:42:b1:e5: 3c:c4:5c:21:17:46:2a:2d:a2:15:76:fe:61:3f:fb: a4:97:5d:62:e6:4c:7a:7a:16:7f:ae:94:e5:82:6e: ed:76:07:13:90:e7:45:3f:76:56:0c:67:f2:51:06: ac:99:75:76:a0:54:db:e6:c8:94:a6:09:7b:0f:d8: c3:78:98:20:8c:92:bc:c6:53:d5:87:dc:8f:9e:b3: 83:5a:42:13:12:7b:c1:4b:74:23:ce:ad:63:1c:6e: ac:0b:2b:56:ea:b8:dd:cd:5f:70:f2:0d:b5:19:15: cf:21:7e:97:eb:dd:e5:ab:17:3e:c2:de:a8:b1:ad: e6:6a:47:6e:8d:34:ea:70:a7:d8:67:18:49:9f:3b: 63:4a:e0:31:1a:9a:b9:69:63:ec:5b:97:38:2f:74: 60:d8:b4:c3:92:de:ec:50:65:72:4f:a3:4f:9b:f7: 10:e7:aa:8f:32:3b:41:2a:6d:6f:4c:93:36:f4:a0: 3c:87:04:38:ba:60:34:5a:12:6f:da:28:28:78:97: 30:38:fd:cd:18:e6:ae:40:70:a6:81:d6:45:db:7b: 59:f5:39:a5:3c:50:eb:aa:77:bd:5c:10:f1:66:bd: c2:27:13:d1:71:85:87:35:78:17:90:02:b4:07:1d: 51:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3B:0E:2D:46:9F:01:F4:DE:EC:8A:03:8E:DD:02:8E:9E:86:D4:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:46::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:fd:cb:d3:ba:33:56:d4:f8:89:77:d8:73:89:6c:dd:3c:48: 02:cc:8e:f1:b1:45:48:1c:aa:c9:54:87:c6:9c:37:0d:ae:78: bd:d5:f5:77:a3:d1:1f:30:6f:6f:cc:3e:d2:8e:a3:3c:3e:4c: 05:0d:95:8c:e1:6a:de:43:54:fe:9e:12:52:56:57:48:31:8b: 4a:b5:10:c3:ec:b4:bf:1c:be:0e:b1:c0:79:ff:1f:3c:88:4f: 80:0c:08:8e:61:00:12:8f:97:e2:ae:f9:93:d8:0f:c6:78:3f: bc:f0:11:4f:ba:b1:cd:bf:69:dd:e2:d1:84:5f:8f:28:a8:47: bc:b6:04:bd:1e:74:d7:98:d1:a2:48:d0:04:be:84:f0:19:22: 54:4b:a2:cb:44:b7:6d:a9:41:10:6c:08:29:64:f3:db:65:7f: 12:ac:93:db:dc:f8:25:7a:55:59:ed:10:78:65:be:f0:30:cb: 5c:35:4e:d9:00:4b:63:76:b1:24:a8:68:56:65:e9:75:56:e2: ab:4d:1d:b1:bb:f8:50:49:60:a9:aa:b0:16:3b:7f:a8:8f:e9: 70:63:16:2f:34:0c:70:8a:14:3f:24:1f:f2:55:50:ce:cb:e2: bd:ae:6a:a8:5c:43:bd:11:d6:19:ec:67:af:78:69:14:4b:6b: 14:a1:0d:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnGYeDv0RuhMtr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk OTVmNjFlZjgtZjA4Yi00NTU0LWE5MjMtODZjOTk2N2JmOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgX5ycQ+KR6j2vVCseU8xFwhF0YqLaIVdv5h P/ukl11i5kx6ehZ/rpTlgm7tdgcTkOdFP3ZWDGfyUQasmXV2oFTb5siUpgl7D9jD eJggjJK8xlPVh9yPnrODWkITEnvBS3Qjzq1jHG6sCytW6rjdzV9w8g21GRXPIX6X 693lqxc+wt6osa3makdujTTqcKfYZxhJnztjSuAxGpq5aWPsW5c4L3Rg2LTDkt7s UGVyT6NPm/cQ56qPMjtBKm1vTJM29KA8hwQ4umA0WhJv2igoeJcwOP3NGOauQHCm gdZF23tZ9TmlPFDrqne9XBDxZr3CJxPRcYWHNXgXkAK0Bx1RlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBQ7Di1GnwH03uyKA47dAo6ehtS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzA5YzkwOTktM2IwMC0z OGM2LWIyYjQtMmJkYmY1ZTc5YTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE39y9O6M1bU+Il32HOJbN08SALMjvGxRUgcqslUh8acNw2ueL3V 9Xej0R8wb2/MPtKOozw+TAUNlYzhat5DVP6eElJWV0gxi0q1EMPstL8cvg6xwHn/ HzyIT4AMCI5hABKPl+Ku+ZPYD8Z4P7zwEU+6sc2/ad3i0YRfjyioR7y2BL0edNeY 0aJI0AS+hPAZIlRLostEt22pQRBsCClk89tlfxKsk9vc+CV6VVntEHhlvvAwy1w1 TtkAS2N2sSSoaFZl6XVW4qtNHbG7+FBJYKmqsBY7f6iP6XBjFi80DHCKFD8kH/JV UM7L4r2uaqhcQ70R1hnsZ694aRRLaxShDe0= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:11 2026 by rpki-client