$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/48b2ba29-f0af-38ab-a323-fea36c2e2ad7.roa File: 48b2ba29-f0af-38ab-a323-fea36c2e2ad7.roa (raw, json) Hash identifier: bRVbBSkaP6RkdrCDI1YuQ+FDUyi1jqSe1/q/EER6IBA= Subject key identifier: 46:01:61:46:E2:0F:CA:F7:A0:53:E5:0A:53:23:60:7A:13:C6:19:31 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C6FCD9F6BB182CF302480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/48b2ba29-f0af-38ab-a323-fea36c2e2ad7.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:6f:cd:9f:6b:b1:82:cf:30:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=0e460315-ffe9-405a-bcc1-e8e4abade5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:72:a5:8b:0a:45:06:a0:d9:57:f5:d7:1e: f9:df:f5:66:b4:ec:04:35:20:34:e7:60:b8:de:83: 70:d9:49:27:1a:30:0e:12:df:42:fe:23:21:6c:d9: 02:1d:25:34:27:f2:78:2e:f2:6e:d9:d9:7e:b1:01: 69:72:d0:4c:b7:51:f2:ff:c7:9c:75:eb:06:66:c1: c5:21:18:6a:fb:91:af:48:98:e9:30:c4:22:d1:e3: 6e:de:a8:2f:68:e9:2a:f4:77:c7:f5:be:3f:11:bd: be:59:74:e0:d1:ba:eb:66:a8:33:1b:5b:73:e8:4d: f5:10:a2:4b:23:b6:39:8c:23:cb:10:3f:75:21:08: 7d:4e:31:45:f5:56:3d:52:e0:35:e1:bd:e6:3a:30: 9d:26:b6:9f:c1:f7:9c:2c:ab:0a:f5:72:40:c3:70: 3f:6a:34:68:39:4b:a9:56:7f:f4:4f:3b:ae:d1:cc: ef:93:06:53:86:eb:03:f9:2d:f4:2f:a5:e6:f0:52: 46:14:ac:21:fe:e3:53:72:90:62:df:57:b9:c8:af: 3a:89:94:54:aa:40:96:40:82:09:55:4a:f7:48:ad: 89:bc:2a:cb:2f:73:96:55:02:a8:c7:fb:61:82:49: 25:49:0a:74:81:f4:10:15:9d:99:ec:af:b3:92:7b: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:01:61:46:E2:0F:CA:F7:A0:53:E5:0A:53:23:60:7A:13:C6:19:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/48b2ba29-f0af-38ab-a323-fea36c2e2ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:85:30:6b:d0:5a:84:22:33:cc:e1:8a:57:91:b3:9a:a1:c6: d8:10:1a:6f:e7:60:e1:6c:05:79:a4:83:c0:5e:a7:18:b7:97: 2a:dc:e9:64:e5:86:30:82:0c:c7:d8:52:6a:7c:8b:bf:ed:e6: d9:0b:4c:0c:06:b9:c8:5f:40:bb:ba:bf:71:31:da:ff:77:f5: fa:7f:48:54:fe:5a:8e:14:0f:54:64:c8:ce:37:9c:26:97:63: fd:7f:61:da:c4:21:d9:e3:f2:f8:7c:58:f8:51:11:40:22:1a: fe:47:ff:a2:5f:84:ec:f1:60:d5:70:39:2a:db:ce:3a:79:93: 9f:b4:49:9f:3f:bd:6b:db:0d:5a:f3:99:b2:21:ce:0c:13:46: b0:86:c8:99:4a:19:01:08:09:a1:85:06:58:de:94:98:68:7a: c6:73:c6:2a:2d:b6:60:f0:d3:60:52:06:64:d0:cc:84:f4:3b: 61:aa:b8:07:ec:32:df:e0:47:98:79:21:b4:ba:09:c1:79:dd: 7a:04:cd:8e:09:f4:c7:86:6b:99:68:5c:1a:da:9c:a0:1b:bb: a6:31:dc:cb:d8:a5:9d:07:44:75:ca:df:ea:c6:ca:14:4f:13: 60:99:db:2a:23:3a:0a:88:80:5a:6d:46:86:89:74:dc:bc:96: f4:dd:88:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnG/Nn2uxgs8wJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MGU0NjAzMTUtZmZlOS00MDVhLWJjYzEtZThlNGFiYWRlNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLNypYsKRQag2Vf11x753/VmtOwENSA052C4 3oNw2UknGjAOEt9C/iMhbNkCHSU0J/J4LvJu2dl+sQFpctBMt1Hy/8ecdesGZsHF IRhq+5GvSJjpMMQi0eNu3qgvaOkq9HfH9b4/Eb2+WXTg0brrZqgzG1tz6E31EKJL I7Y5jCPLED91IQh9TjFF9VY9UuA14b3mOjCdJrafwfecLKsK9XJAw3A/ajRoOUup Vn/0Tzuu0czvkwZThusD+S30L6Xm8FJGFKwh/uNTcpBi31e5yK86iZRUqkCWQIIJ VUr3SK2JvCrLL3OWVQKox/thgkklSQp0gfQQFZ2Z7K+zkns9rwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEYBYUbiD8r3oFPlClMjYHoTxhkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDhiMmJhMjktZjBhZi0z OGFiLWEzMjMtZmVhMzZjMmUyYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKuFMGvQWoQiM8zhileRs5qhxtgQGm/nYOFsBXmkg8Bepxi3lyrc 6WTlhjCCDMfYUmp8i7/t5tkLTAwGuchfQLu6v3Ex2v939fp/SFT+Wo4UD1RkyM43 nCaXY/1/YdrEIdnj8vh8WPhREUAiGv5H/6JfhOzxYNVwOSrbzjp5k5+0SZ8/vWvb DVrzmbIhzgwTRrCGyJlKGQEICaGFBljelJhoesZzxiottmDw02BSBmTQzIT0O2Gq uAfsMt/gR5h5IbS6CcF53XoEzY4J9MeGa5loXBranKAbu6Yx3MvYpZ0HRHXK3+rG yhRPE2CZ2yojOgqIgFptRoaJdNy8lvTdiJA= -----END CERTIFICATE-----Generated at Sat Jun 13 19:59:48 2026 by rpki-client