$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa File: 8f25252a-c003-3570-b9c6-4bc221214d3a.roa (raw, json) Hash identifier: Vascygd7V+gd5dn45HmyCYuKzEKoz7tEo0OSYPM/46g= Subject key identifier: DF:DA:11:37:B4:83:ED:07:90:65:C4:9F:3C:E0:53:C6:F8:2D:A8:95 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C6E1B5EFCDE119D794520 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:6e:1b:5e:fc:de:11:9d:79:45:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=b054d818-3c36-4064-89c2-8151121bc8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:2e:05:cb:f0:f3:fa:57:3d:e1:ef:70:f1: 47:32:e1:19:ac:f6:c7:ca:bf:de:49:79:6c:ca:e0: 35:e4:00:3d:0e:22:26:c5:e3:5f:f7:08:60:15:01: b8:f3:8f:99:2d:77:a7:03:5a:66:58:76:05:3d:6f: 43:06:60:8d:82:a6:fb:44:17:ae:94:31:2e:04:e4: 16:fb:77:75:f9:29:b6:96:bc:15:03:4e:89:68:30: 55:27:ca:91:5e:b9:b3:b5:62:c5:6f:e9:12:d8:ea: 67:12:c6:88:67:76:62:a2:ce:f2:4d:9f:6b:ce:7e: 21:71:24:91:1f:fc:a8:7d:d5:59:e3:b4:45:5c:11: f3:02:b0:40:47:8b:46:a5:a2:73:49:30:6a:8a:0c: ec:65:e3:c1:b4:0a:55:dc:6c:b1:ab:83:76:11:58: b9:b0:5b:f7:f0:74:80:e4:16:4a:fb:d3:4d:b6:71: 0e:22:8a:ad:51:e8:e2:83:ea:60:69:c4:43:41:bf: 65:66:96:e5:02:3f:5b:5e:e0:06:c8:47:d0:6f:6d: 39:d2:c7:f9:d8:34:da:0d:ec:10:9b:05:66:52:e2: 44:d5:bf:56:71:dd:42:71:9f:fb:96:70:27:b9:d6: d1:28:fd:64:4b:38:ec:55:2a:c9:67:ee:2f:fc:4d: 3e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DA:11:37:B4:83:ED:07:90:65:C4:9F:3C:E0:53:C6:F8:2D:A8:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:d7:84:22:ca:d5:3c:b6:09:41:0a:a5:e3:5d:98:4f:39:00: df:fe:dc:88:ab:83:08:9a:88:fc:72:5a:28:80:48:4e:f9:01: d0:eb:ee:fc:45:b1:85:2d:be:9d:e7:d4:8d:cd:14:57:b8:e0: 64:93:59:c1:2a:d3:24:83:12:c4:f2:da:5b:ba:a5:ec:8a:be: 86:77:85:01:14:c2:5d:2b:12:f0:c5:b4:50:69:15:5a:64:05: 70:54:21:27:c2:25:65:1d:86:ed:41:91:e7:c3:7f:10:b1:af: b5:2b:41:db:68:bd:0d:43:d7:3e:1b:d2:01:3f:3b:4d:ba:e9: 80:62:9b:38:bb:71:3b:14:25:35:10:05:10:43:19:b5:ab:46: 40:4a:6a:53:d6:46:ce:01:5f:64:7c:e9:fe:8f:47:3f:c0:62: 8c:a4:9c:d6:dd:7c:6f:b9:d6:a5:d4:84:44:fd:ca:da:11:6a: 78:7a:0e:a9:e0:d5:1f:c4:bc:75:e1:91:04:f7:56:82:ed:b9: 0f:85:4a:47:37:b7:dc:ce:c9:ee:0e:73:c0:de:41:2d:66:d3: 0e:28:c5:b6:13:2d:1f:c0:63:cc:3e:37:66:b6:ef:16:52:af: de:73:07:53:96:a2:c9:82:ce:88:53:a1:4c:cd:11:32:d8:66: 2a:11:2c:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnG4bXvzeEZ15RSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YjA1NGQ4MTgtM2MzNi00MDY0LTg5YzItODE1MTEyMWJjOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocYuBcvw8/pXPeHvcPFHMuEZrPbHyr/eSXls yuA15AA9DiImxeNf9whgFQG484+ZLXenA1pmWHYFPW9DBmCNgqb7RBeulDEuBOQW +3d1+Sm2lrwVA06JaDBVJ8qRXrmztWLFb+kS2OpnEsaIZ3Zios7yTZ9rzn4hcSSR H/yofdVZ47RFXBHzArBAR4tGpaJzSTBqigzsZePBtApV3Gyxq4N2EVi5sFv38HSA 5BZK+9NNtnEOIoqtUejig+pgacRDQb9lZpblAj9bXuAGyEfQb2050sf52DTaDewQ mwVmUuJE1b9Wcd1CcZ/7lnAnudbRKP1kSzjsVSrJZ+4v/E0+UwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN/aETe0g+0HkGXEnzzgU8b4LaiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGYyNTI1MmEtYzAwMy0z NTcwLWI5YzYtNGJjMjIxMjE0ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK3XhCLK1Ty2CUEKpeNdmE85AN/+3IirgwiaiPxyWiiASE75AdDr 7vxFsYUtvp3n1I3NFFe44GSTWcEq0ySDEsTy2lu6peyKvoZ3hQEUwl0rEvDFtFBp FVpkBXBUISfCJWUdhu1BkefDfxCxr7UrQdtovQ1D1z4b0gE/O0266YBimzi7cTsU JTUQBRBDGbWrRkBKalPWRs4BX2R86f6PRz/AYoyknNbdfG+51qXUhET9ytoRanh6 Dqng1R/EvHXhkQT3VoLtuQ+FSkc3t9zOye4Oc8DeQS1m0w4oxbYTLR/AY8w+N2a2 7xZSr95zB1OWosmCzohToUzNETLYZioRLGA= -----END CERTIFICATE-----Generated at Sat Jun 13 16:03:50 2026 by rpki-client