$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa File: 7143821d-b959-370f-bcec-f9e5be34ed99.roa (raw, json) Hash identifier: Q83mf74v50C0X1YoeKNnq7wLBxbAIylyhsPFuRhokEw= Subject key identifier: E8:E4:FD:F6:E0:69:F5:6C:E4:06:3D:79:54:B2:BA:AB:D8:93:13:11 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C6BE70CF65190DD5E9200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:6b:e7:0c:f6:51:90:dd:5e:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=6ec2de03-3e6f-4021-bbd8-abcde889783c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:45:be:bc:40:e6:e0:0c:7f:74:51:e4:86:7c: 6a:81:c6:fa:c2:31:5f:b0:75:4f:fe:d5:70:37:dd: 3e:13:61:ad:0d:fe:c6:50:31:af:59:4a:50:db:77: 5a:48:c1:eb:f2:55:17:f6:71:5e:97:9c:27:42:6e: 8e:4f:aa:c3:09:48:53:c9:71:cf:a0:0f:e9:c4:dc: 6b:3d:76:cd:0f:49:fb:aa:32:0a:0d:5e:c9:7c:d7: 2c:4e:b6:37:b7:a7:9c:5a:09:bf:0f:65:bc:ee:18: 4f:7a:62:31:df:86:bc:8c:5e:1f:b2:c4:22:fb:81: 1d:89:77:1a:51:16:e8:a1:27:b4:57:4c:56:d7:be: 75:ff:39:11:41:cc:b7:17:a6:b5:ea:b7:d7:f9:77: db:55:5f:29:08:2d:5a:f9:21:21:4d:6e:6e:b7:8f: 1a:9e:f5:c4:55:ec:cb:87:da:f8:22:0c:07:ee:a5: 81:9d:2b:e3:ce:fa:c9:3a:5f:26:52:b9:86:cb:e2: c5:8e:61:d6:b0:97:65:8d:8a:57:68:98:93:f4:b0: 42:3f:84:26:06:c0:20:5d:25:db:88:07:2a:db:11: 9a:10:0f:38:61:ff:87:dd:6b:d0:ab:87:bb:0e:c6: 13:4f:94:e0:79:46:40:7c:a1:e7:33:68:89:21:be: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E4:FD:F6:E0:69:F5:6C:E4:06:3D:79:54:B2:BA:AB:D8:93:13:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:cd:83:ce:c9:db:6b:92:04:4d:2d:7a:2a:69:de:16:44:d8: be:4e:66:ed:f0:42:f5:08:1f:da:f5:0d:82:1c:96:3c:83:d5: 98:1c:0e:44:50:d7:02:03:87:bb:02:58:3d:1b:c9:24:bb:17: 0e:ea:8d:3a:66:a2:59:2f:03:e9:f9:ad:34:5f:cf:69:83:c4: 73:0f:86:d2:ed:8b:b8:86:d5:35:cd:71:70:59:0f:ea:ca:c7: f0:c9:21:da:6e:48:32:86:4c:36:1b:9d:6b:31:0e:36:db:54: a8:fb:71:6d:ec:c1:b0:1e:5b:95:f9:41:01:e9:7a:ac:b4:dc: 14:d8:04:9f:9c:61:19:d0:aa:7e:75:8f:bf:fa:d3:2a:ce:74: 1a:ae:f2:4d:41:a0:9d:01:e2:99:81:cf:24:83:5f:af:4a:66: 67:09:85:61:16:81:80:b6:6d:4c:5d:e6:92:8f:a5:d3:d6:7f: ab:8a:e7:bc:39:e4:09:8e:24:4b:f4:d6:7b:e2:e1:68:9a:e4: 8e:a0:12:c0:a6:91:95:5d:62:ad:1b:7e:dd:45:c2:ba:6b:34: 0e:8b:9f:6c:cd:1d:f9:f1:2a:ee:bc:47:bc:4b:99:5e:4e:5a: 58:8d:ef:de:65:1d:20:3a:f5:dd:2e:7e:46:04:04:00:7c:eb: c8:b7:72:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnGvnDPZRkN1ekgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NmVjMmRlMDMtM2U2Zi00MDIxLWJiZDgtYWJjZGU4ODk3ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EW+vEDm4Ax/dFHkhnxqgcb6wjFfsHVP/tVw N90+E2GtDf7GUDGvWUpQ23daSMHr8lUX9nFel5wnQm6OT6rDCUhTyXHPoA/pxNxr PXbND0n7qjIKDV7JfNcsTrY3t6ecWgm/D2W87hhPemIx34a8jF4fssQi+4EdiXca URbooSe0V0xW1751/zkRQcy3F6a16rfX+XfbVV8pCC1a+SEhTW5ut48anvXEVezL h9r4IgwH7qWBnSvjzvrJOl8mUrmGy+LFjmHWsJdljYpXaJiT9LBCP4QmBsAgXSXb iAcq2xGaEA84Yf+H3WvQq4e7DsYTT5TgeUZAfKHnM2iJIb7B1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOjk/fbgafVs5AY9eVSyuqvYkxMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzE0MzgyMWQtYjk1OS0z NzBmLWJjZWMtZjllNWJlMzRlZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAPNg87J22uSBE0teipp3hZE2L5OZu3wQvUIH9r1DYIcljyD1Zgc DkRQ1wIDh7sCWD0bySS7Fw7qjTpmolkvA+n5rTRfz2mDxHMPhtLti7iG1TXNcXBZ D+rKx/DJIdpuSDKGTDYbnWsxDjbbVKj7cW3swbAeW5X5QQHpeqy03BTYBJ+cYRnQ qn51j7/60yrOdBqu8k1BoJ0B4pmBzySDX69KZmcJhWEWgYC2bUxd5pKPpdPWf6uK 57w55AmOJEv01nvi4Wia5I6gEsCmkZVdYq0bft1FwrprNA6Ln2zNHfnxKu68R7xL mV5OWliN795lHSA69d0ufkYEBAB868i3cqs= -----END CERTIFICATE-----Generated at Sat Jun 13 16:08:10 2026 by rpki-client