$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa File: 3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa (raw, json) Hash identifier: 0KFvBcafj+lFZM77bjdltoyZaz1GgBzm5F9cMbvZNmY= Subject key identifier: 43:E4:16:E0:99:25:1C:97:E7:99:2D:D9:E0:45:DE:B3:90:6F:E7:CF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B55CAC560FD720D3CA700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:55:ca:c5:60:fd:72:0d:3c:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d937eb62-ca95-41ae-98d6-eb7f619e78bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:10:37:cb:c5:e3:30:36:4d:ec:08:89:2d: e3:22:b2:f2:a4:97:d3:04:6b:ca:27:4b:34:4d:bb: 48:b0:39:bd:6f:06:e3:96:b1:3b:5a:86:04:9b:b9: bb:1e:29:07:aa:65:93:87:a3:0f:00:75:0a:1c:ec: 1c:15:2f:5a:71:5e:62:38:ed:95:bc:31:ca:90:7f: fd:67:e8:e7:f9:24:0b:18:de:a8:d2:86:7a:50:d6: 2c:27:cc:7d:4c:e9:9f:dc:5b:d1:ce:68:82:3f:0f: e1:67:eb:6c:ff:cc:c8:68:86:11:6b:05:2a:cf:e6: 59:49:1b:51:19:44:1d:00:8c:af:b5:a8:9c:5a:ef: 05:72:e6:28:dc:00:d1:2e:81:92:13:f4:34:35:72: 4a:cd:69:f1:df:50:6f:c2:ca:33:05:a0:b6:ca:7b: b2:88:48:cc:ed:65:45:c0:26:f1:d7:cc:d3:cf:26: 83:27:2c:c0:01:e5:d2:47:6c:11:fb:49:f5:10:62: f9:12:f4:4b:03:bd:bb:b9:54:ae:43:6d:69:02:b3: 9e:db:06:bc:e8:00:c7:94:2d:33:d1:e4:64:c1:69: 35:c2:f3:c8:1a:f5:5e:b2:07:0d:85:dc:c8:2f:bf: 45:b4:b9:ab:bc:93:33:a7:21:69:ad:14:ce:9d:1e: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E4:16:E0:99:25:1C:97:E7:99:2D:D9:E0:45:DE:B3:90:6F:E7:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4a:13:c6:58:bd:bb:53:d1:05:4a:56:30:4d:75:de:03:e3: 35:ed:bc:50:4b:69:28:d6:75:bf:5f:fe:e1:c3:6e:d2:7d:57: 35:c0:a8:98:bd:c4:27:cd:8e:6f:85:6c:10:5a:26:c7:20:7a: 40:fd:02:28:31:bf:e6:eb:ab:c2:e9:c4:32:9c:45:61:24:26: 35:03:c0:72:71:33:a9:ff:3a:f6:58:0c:62:dd:31:db:3b:a4: bb:fa:56:53:36:a8:18:ab:30:56:d0:23:06:2c:00:ab:e4:cc: 97:33:38:59:12:dc:5f:09:0e:17:bc:af:98:98:e0:4f:c6:e8: 24:1f:7c:3e:48:6b:5d:13:70:da:11:91:91:e0:7f:0e:3c:62: a0:54:04:79:09:dd:7c:bb:52:af:f7:db:f0:f4:d7:5e:f2:af: a2:60:75:bd:03:63:e4:06:c5:48:da:af:c9:6e:f7:4a:4f:31: f0:ea:4d:af:89:e1:f6:ea:58:b6:41:5d:cb:63:46:6c:6a:1b: 29:78:97:3a:da:e3:1e:0b:99:d8:e6:3d:7a:3b:cd:56:eb:fb: 9f:17:fc:a9:ef:17:12:90:90:bf:d7:11:33:81:84:ad:85:5d: 03:d4:11:3b:89:cf:45:cf:25:14:67:78:8e:ae:99:05:4b:5e: b0:77:d4:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm1XKxWD9cg08pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDkzN2ViNjItY2E5NS00MWFlLTk4ZDYtZWI3ZjYxOWU3OGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFMQN8vF4zA2TewIiS3jIrLypJfTBGvKJ0s0 TbtIsDm9bwbjlrE7WoYEm7m7HikHqmWTh6MPAHUKHOwcFS9acV5iOO2VvDHKkH/9 Z+jn+SQLGN6o0oZ6UNYsJ8x9TOmf3FvRzmiCPw/hZ+ts/8zIaIYRawUqz+ZZSRtR GUQdAIyvtaicWu8FcuYo3ADRLoGSE/Q0NXJKzWnx31BvwsozBaC2ynuyiEjM7WVF wCbx18zTzyaDJyzAAeXSR2wR+0n1EGL5EvRLA727uVSuQ21pArOe2wa86ADHlC0z 0eRkwWk1wvPIGvVesgcNhdzIL79FtLmrvJMzpyFprRTOnR5r0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEPkFuCZJRyX55kt2eBF3rOQb+fPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Q5ZjkyNmItNDNlNi0z YmRhLTg2YTMtYjBjNGUxN2MwYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKpKE8ZYvbtT0QVKVjBNdd4D4zXtvFBLaSjWdb9f/uHDbtJ9VzXA qJi9xCfNjm+FbBBaJscgekD9Aigxv+brq8LpxDKcRWEkJjUDwHJxM6n/OvZYDGLd Mds7pLv6VlM2qBirMFbQIwYsAKvkzJczOFkS3F8JDhe8r5iY4E/G6CQffD5Ia10T cNoRkZHgfw48YqBUBHkJ3Xy7Uq/32/D0117yr6Jgdb0DY+QGxUjar8lu90pPMfDq Ta+J4fbqWLZBXctjRmxqGyl4lzra4x4LmdjmPXo7zVbr+58X/KnvFxKQkL/XETOB hK2FXQPUETuJz0XPJRRneI6umQVLXrB31Is= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:31 2026 by rpki-client