$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa File: 91a41c4e-b0c0-3279-9cb1-3434d5687478.roa (raw, json) Hash identifier: Y7ucZfbPjPN9TUjwJeOAyoVbqziddQhdKtTjMViw7A0= Subject key identifier: 2B:9C:BB:A4:2B:6C:20:15:F5:80:BE:64:EA:BC:DC:C2:58:C9:AF:33 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C656BB16C46F74D9D0000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:65:6b:b1:6c:46:f7:4d:9d:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=04d0ec13-10e5-4e0b-ae00-531d7e74932b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7c:d8:e8:e4:73:28:b5:0d:13:13:a2:ec:e0: 49:26:ee:ea:3a:1a:fa:b3:e6:3c:df:bb:72:3a:82: 94:cc:05:c6:d4:5e:f7:2a:e6:20:5a:bc:fe:52:7b: 21:0f:c1:37:72:36:b5:dc:11:7d:a0:eb:ed:61:b2: 8c:03:b0:f9:f0:df:04:fc:db:a3:20:d6:23:ab:d0: af:26:83:be:0c:0d:5a:78:2f:e7:d2:a9:f4:eb:90: 0c:fe:fc:0d:de:a0:7b:3d:5d:d8:8f:c1:60:63:c4: 8a:c9:d3:ec:b5:ef:a5:9b:fc:3e:4b:02:26:df:e4: 74:79:1d:ef:5e:bd:07:7c:f4:32:5d:d7:5f:5b:e4: b2:39:46:1d:d0:a6:1e:b5:4b:a9:24:99:48:b0:e9: 59:0c:e0:37:c0:5a:d7:db:28:a0:0b:39:44:d5:bd: 83:a0:47:7e:fe:fe:90:04:0c:5c:ae:43:5c:ac:ea: 7a:5d:bd:ca:1c:c5:f2:19:e7:b9:22:33:eb:62:48: 5d:f8:f9:17:57:95:e0:b2:91:b2:ce:48:ee:92:cb: d0:1f:0a:ee:dc:e5:bd:60:4d:d5:97:de:ba:28:5b: ac:f3:09:55:b7:9f:a8:22:45:61:40:1e:a8:8b:78: d5:88:d6:ca:ec:09:cf:76:e9:41:ea:34:df:d1:d9: 07:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9C:BB:A4:2B:6C:20:15:F5:80:BE:64:EA:BC:DC:C2:58:C9:AF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:dc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f7:85:ce:34:4e:60:2f:bd:3f:ba:75:68:be:7f:6f:e5:ef: 40:11:f6:53:13:20:fa:12:f1:63:62:c1:22:9d:2b:26:e1:23: 0d:f2:db:c7:c1:aa:75:0f:36:94:84:0b:0a:13:d6:08:07:9d: 41:03:36:d4:31:c3:f1:58:29:dc:87:fa:27:79:41:5a:ea:2b: f4:7f:6c:bc:60:11:f4:8e:0d:d1:ac:b7:c0:58:1d:5d:6d:8f: 1d:c0:5a:c3:5f:ad:ef:be:2b:d5:5d:29:17:b5:07:8c:e4:69: b2:c2:71:48:eb:56:8f:79:0b:1a:c2:fd:fb:b0:2d:35:47:88: c1:50:77:31:6b:a8:a6:f5:a4:0e:a7:75:1a:f1:15:3a:4f:a7: 0c:d8:d9:00:40:71:87:66:5a:b4:c5:2b:c7:13:33:77:96:02: b5:44:35:9a:f3:4c:f0:ce:4c:f4:6e:89:78:01:f0:10:8c:f8: 84:30:8d:d4:c9:59:24:d8:cc:2b:ed:88:57:8f:39:93:61:14: d0:a3:3c:84:6c:20:2b:14:da:8c:46:1b:32:66:94:7c:77:32: 19:8d:68:65:51:6d:5b:f4:cc:c7:8b:87:0a:ab:ba:34:6e:69: 9e:f0:e1:ad:71:59:25:35:9b:77:fd:91:56:88:e4:40:55:4e: a0:c4:3a:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnGVrsWxG902dAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MDRkMGVjMTMtMTBlNS00ZTBiLWFlMDAtNTMxZDdlNzQ5MzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXzY6ORzKLUNExOi7OBJJu7qOhr6s+Y837ty OoKUzAXG1F73KuYgWrz+UnshD8E3cja13BF9oOvtYbKMA7D58N8E/NujINYjq9Cv JoO+DA1aeC/n0qn065AM/vwN3qB7PV3Yj8FgY8SKydPste+lm/w+SwIm3+R0eR3v Xr0HfPQyXddfW+SyOUYd0KYetUupJJlIsOlZDOA3wFrX2yigCzlE1b2DoEd+/v6Q BAxcrkNcrOp6Xb3KHMXyGee5IjPrYkhd+PkXV5XgspGyzkjuksvQHwru3OW9YE3V l966KFus8wlVt5+oIkVhQB6oi3jViNbK7AnPdulB6jTf0dkHdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCucu6QrbCAV9YC+ZOq83MJYya8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTFhNDFjNGUtYjBjMC0z Mjc5LTljYjEtMzQzNGQ1Njg3NDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJf3hc40TmAvvT+6dWi+f2/l70AR9lMTIPoS8WNiwSKdKybhIw3y 28fBqnUPNpSECwoT1ggHnUEDNtQxw/FYKdyH+id5QVrqK/R/bLxgEfSODdGst8BY HV1tjx3AWsNfre++K9VdKRe1B4zkabLCcUjrVo95CxrC/fuwLTVHiMFQdzFrqKb1 pA6ndRrxFTpPpwzY2QBAcYdmWrTFK8cTM3eWArVENZrzTPDOTPRuiXgB8BCM+IQw jdTJWSTYzCvtiFePOZNhFNCjPIRsICsU2oxGGzJmlHx3MhmNaGVRbVv0zMeLhwqr ujRuaZ7w4a1xWSU1m3f9kVaI5EBVTqDEOjg= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:57 2026 by rpki-client