$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/78bdb508-e0ce-3ad1-896a-3cc651aa1629.roa File: 78bdb508-e0ce-3ad1-896a-3cc651aa1629.roa (raw, json) Hash identifier: rwzN3Bj5XtDNce9dyYFGfENfHPTDA6vQgcheGnPqf58= Subject key identifier: 3B:4D:78:02:6F:5D:3F:1E:2E:E0:A7:53:B8:F7:EA:60:BE:A4:B8:98 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B49747B90ECEF14F58500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/78bdb508-e0ce-3ad1-896a-3cc651aa1629.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:49:74:7b:90:ec:ef:14:f5:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=84ae4deb-c9e8-4d0b-8724-41995288707c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:80:89:e9:5f:8b:08:13:f5:f3:30:99:ec: 2f:da:38:b7:f0:48:d1:fa:d9:e4:37:4b:a4:ad:fd: 04:8e:65:9f:39:b9:ad:e9:29:25:e7:c9:18:2a:a2: e4:5f:ce:ee:04:19:7f:58:bc:0b:81:05:f7:5d:f4: 8f:bd:0c:4a:dd:aa:d9:2e:b3:d8:71:f4:94:dd:83: 0c:21:02:78:1c:1c:4b:de:e2:8e:74:8e:0e:c7:c8: 31:eb:f7:e0:2a:38:e6:e1:94:09:3c:95:63:53:09: 74:58:cf:b8:c9:ca:88:c3:4d:86:ad:72:0c:c6:51: 6d:3a:d6:16:1c:70:70:f9:ac:f1:ae:10:14:ae:8b: d0:51:a6:2d:95:bf:fe:59:9b:44:3e:8d:57:ce:65: 1a:56:94:70:c6:b1:ef:cf:f2:8f:d3:43:c9:84:90: b9:cc:7a:37:ee:6b:a5:3b:55:8c:0a:2d:d5:e0:46: d5:aa:e8:9b:e3:07:ea:03:11:fa:ab:a7:4b:2f:a6: 70:28:ce:e6:16:4c:46:a8:80:30:f6:7a:e0:a7:73: 1a:25:43:8f:27:55:11:fd:7b:3f:e1:38:76:63:84: b1:d2:a6:65:02:6c:8f:44:a3:da:6d:dc:9d:7d:c4: dc:26:00:cf:e5:32:35:54:f6:41:eb:94:28:e2:51: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4D:78:02:6F:5D:3F:1E:2E:E0:A7:53:B8:F7:EA:60:BE:A4:B8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/78bdb508-e0ce-3ad1-896a-3cc651aa1629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:d7:46:60:57:19:57:18:ad:19:4a:51:27:d2:8b:2a:9d:58: 3d:f7:e6:09:1c:2c:65:34:e9:a6:f3:f2:19:70:f9:b4:3b:6f: e4:58:4c:a1:bf:33:be:5a:db:3f:a9:f2:96:84:df:27:4d:1e: 2b:84:19:bb:2a:5c:80:ce:3e:d7:99:54:54:0f:03:98:e1:5b: 04:83:62:79:6f:c5:bd:97:c3:ec:a4:0f:c6:23:43:6c:72:76: bf:cb:90:b2:49:e5:60:cc:d8:97:a8:3e:1f:fb:e0:59:f8:ec: b1:97:04:4b:0f:35:a4:ac:bd:d0:67:e3:84:9d:07:2e:a4:5e: 56:26:02:7d:d3:fc:82:18:20:a2:49:a4:8c:53:cd:b1:c6:2f: 72:c3:a8:52:07:26:c4:5d:ca:7a:e6:89:27:fc:1d:e7:1c:76: 67:7c:14:97:4f:88:6c:fb:4c:ad:a8:6c:4b:52:38:76:a7:ba: 23:24:25:8d:d6:19:76:d6:64:20:bc:fa:12:b6:e9:17:00:20: a0:12:a5:2f:65:5d:a4:34:a7:14:6e:0b:79:61:54:3b:d1:f6: 81:43:79:78:bd:7e:b0:f4:ae:44:61:07:ef:1e:84:a3:11:a6: 7c:5a:1e:1a:2e:39:2e:3c:26:da:d9:69:59:bf:da:ca:f2:99: 5a:fc:d8:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm0l0e5Ds7xT1hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ODRhZTRkZWItYzllOC00ZDBiLTg3MjQtNDE5OTUyODg3MDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBuAielfiwgT9fMwmewv2ji38EjR+tnkN0uk rf0EjmWfObmt6Skl58kYKqLkX87uBBl/WLwLgQX3XfSPvQxK3arZLrPYcfSU3YMM IQJ4HBxL3uKOdI4Ox8gx6/fgKjjm4ZQJPJVjUwl0WM+4ycqIw02GrXIMxlFtOtYW HHBw+azxrhAUrovQUaYtlb/+WZtEPo1XzmUaVpRwxrHvz/KP00PJhJC5zHo37mul O1WMCi3V4EbVquib4wfqAxH6q6dLL6ZwKM7mFkxGqIAw9nrgp3MaJUOPJ1UR/Xs/ 4Th2Y4Sx0qZlAmyPRKPabdydfcTcJgDP5TI1VPZB65Qo4lGizwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDtNeAJvXT8eLuCnU7j36mC+pLiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzhiZGI1MDgtZTBjZS0z YWQxLTg5NmEtM2NjNjUxYWExNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALTXRmBXGVcYrRlKUSfSiyqdWD335gkcLGU06abz8hlw+bQ7b+RY TKG/M75a2z+p8paE3ydNHiuEGbsqXIDOPteZVFQPA5jhWwSDYnlvxb2Xw+ykD8Yj Q2xydr/LkLJJ5WDM2JeoPh/74Fn47LGXBEsPNaSsvdBn44SdBy6kXlYmAn3T/IIY IKJJpIxTzbHGL3LDqFIHJsRdynrmiSf8Heccdmd8FJdPiGz7TK2obEtSOHanuiMk JY3WGXbWZCC8+hK26RcAIKASpS9lXaQ0pxRuC3lhVDvR9oFDeXi9frD0rkRhB+8e hKMRpnxaHhouOS48JtrZaVm/2srymVr82Gs= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:19 2026 by rpki-client