$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa File: 9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa (raw, json) Hash identifier: /IevnSgBhIOYh1Kvz5bPJIlBXOSkYGsjTc4S4tZ5F38= Subject key identifier: A3:7A:6D:A4:59:F2:34:5F:20:4F:8C:18:6D:B1:81:A2:38:23:41:28 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0436180B7AA86B8E26A9A180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 207266 IP address blocks: 2001:500:4d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:18:0b:7a:a8:6b:8e:26:a9:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=3b8bbe4c-2dd0-4861-88c6-5084b1b84e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:51:15:53:41:3d:70:67:8a:e4:09:d8:5d: 7a:8f:c6:8c:5a:12:d5:b5:98:89:43:14:aa:4f:82: 24:8a:4d:ef:10:85:a5:2b:a2:8d:0d:bc:1a:2c:77: 32:dc:41:89:db:84:63:d4:6d:1e:04:55:08:df:27: a4:30:be:58:b3:92:c9:73:a8:04:07:ed:b8:30:d3: eb:18:ac:d4:90:92:d4:a2:b9:6d:9e:06:d9:a7:fa: 35:4c:99:53:cf:60:21:c2:e1:e7:1a:66:3d:b7:b9: 30:b7:49:70:9c:de:27:84:67:e4:8b:9e:1c:7c:5d: 0c:a2:5a:91:d6:40:79:aa:bb:4d:92:ec:d8:c9:3d: 8b:93:09:fc:f9:c6:90:a5:69:51:6b:7e:ae:d4:62: d1:20:11:b0:b9:56:6f:29:5f:79:96:9f:d9:0f:31: a2:e7:74:2c:be:1b:79:24:93:09:e2:2f:44:b2:9e: ee:ee:5f:a1:96:3f:5e:64:03:74:fc:db:d1:04:08: e2:9e:bb:17:9d:ec:a7:de:df:25:fa:d1:04:79:c1: 13:50:54:43:1c:bc:74:f7:f2:15:2f:de:10:74:a2: 39:5e:2f:65:b6:c1:a2:a8:b4:2d:34:11:9f:a1:3b: 9f:9b:c3:62:5c:4a:aa:f3:7a:bb:4b:82:09:57:d6: cf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7A:6D:A4:59:F2:34:5F:20:4F:8C:18:6D:B1:81:A2:38:23:41:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fc:2f:b0:b7:7a:bc:fa:10:a0:71:17:c4:40:be:b7:9a:4d: e6:d5:75:16:bb:8c:10:7b:66:13:b8:7e:7f:5b:f9:94:97:39: 59:0a:1f:e4:5e:ce:55:dd:71:b0:9b:b5:5f:e8:be:7c:11:28: 4b:28:a5:d3:ab:dd:65:19:fb:43:e5:85:58:5b:6b:3b:88:aa: a0:50:3c:48:02:3e:89:f9:ea:07:dd:a3:91:18:e5:9b:38:df: 0a:bb:28:88:c1:ab:64:b8:92:50:c1:8a:7d:89:5a:b8:c5:61: cf:79:7e:dd:82:fb:6e:82:41:ec:0f:10:9a:06:28:b6:2d:55: 2d:c7:fa:ea:53:2c:90:a2:23:50:49:31:0f:91:18:e7:7a:6f: ac:8e:46:d8:94:3c:fe:d5:01:98:4e:0f:80:a2:03:72:63:e6: 14:5f:ac:a6:26:13:52:b0:d8:f5:e2:4c:df:98:24:a7:69:c7: db:f7:3a:64:09:9a:04:bb:4b:15:94:60:1c:ad:78:b3:33:cd: 52:53:18:5a:6b:05:3c:fa:f3:0c:1f:2b:33:57:bc:41:41:a2: bf:7e:27:8f:0b:aa:e6:83:79:81:f2:f7:80:20:e7:f0:6c:fb: 75:4a:d9:c0:45:68:20:35:2e:dc:31:d3:0f:88:67:b8:36:9a: 12:9d:e9:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENhgLeqhrjiapoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk M2I4YmJlNGMtMmRkMC00ODYxLTg4YzYtNTA4NGIxYjg0ZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQNRFVNBPXBniuQJ2F16j8aMWhLVtZiJQxSq T4Ikik3vEIWlK6KNDbwaLHcy3EGJ24Rj1G0eBFUI3yekML5Ys5LJc6gEB+24MNPr GKzUkJLUorltngbZp/o1TJlTz2AhwuHnGmY9t7kwt0lwnN4nhGfki54cfF0MolqR 1kB5qrtNkuzYyT2Lkwn8+caQpWlRa36u1GLRIBGwuVZvKV95lp/ZDzGi53Qsvht5 JJMJ4i9Esp7u7l+hlj9eZAN0/NvRBAjinrsXneyn3t8l+tEEecETUFRDHLx09/IV L94QdKI5Xi9ltsGiqLQtNBGfoTufm8NiXEqq83q7S4IJV9bP/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKN6baRZ8jRfIE+MGG2xgaI4I0EoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTEwMGNjOGMtNGYxMi0z ZmYyLTllNDItZmU3M2U2M2E4ZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACD8L7C3erz6EKBxF8RAvreaTebVdRa7jBB7ZhO4fn9b+ZSXOVkK H+RezlXdcbCbtV/ovnwRKEsopdOr3WUZ+0PlhVhbazuIqqBQPEgCPon56gfdo5EY 5Zs43wq7KIjBq2S4klDBin2JWrjFYc95ft2C+26CQewPEJoGKLYtVS3H+upTLJCi I1BJMQ+RGOd6b6yORtiUPP7VAZhOD4CiA3Jj5hRfrKYmE1Kw2PXiTN+YJKdpx9v3 OmQJmgS7SxWUYByteLMzzVJTGFprBTz68wwfKzNXvEFBor9+J48LquaDeYHy94Ag 5/Bs+3VK2cBFaCA1Ltwx0w+IZ7g2mhKd6Tc= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:23 2026 by rpki-client