$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa File: 9579d882-eb1c-3901-97ff-7eb7aeae8077.roa (raw, json) Hash identifier: H5QH6Zaveq54HECL3PyZzgkEAaA4AYWAWLai/XMW4dk= Subject key identifier: D1:51:A2:E5:1C:C6:25:97:1F:6A:F2:0F:21:EB:07:1A:45:28:3E:E2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B2C158D92DAB34EA3B500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:2c:15:8d:92:da:b3:4e:a3:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=327a6f0c-5ebe-4fd9-8151-e8f214fc03d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:a0:c9:f9:48:e4:aa:26:99:02:08:92:ea: ff:d5:48:ea:db:47:c8:b6:75:1c:d0:4e:10:49:20: e8:4b:a6:83:5f:75:1a:66:9b:2d:a6:a9:b7:f2:e1: a0:e7:78:25:90:a6:7e:9e:a0:c2:68:df:8d:09:c9: a9:82:8a:60:cc:fe:9d:34:0d:f5:fa:01:39:55:4e: 1b:75:dd:2a:e0:76:36:bb:ba:5f:e2:0a:5a:3b:af: 5e:25:7e:54:6b:ca:42:4c:c6:5a:ed:dc:86:36:e3: 90:d9:a0:1a:f8:01:9a:c2:35:69:1c:d8:b6:09:9a: 23:4e:15:2b:53:68:59:9f:30:33:cf:b1:5f:82:3e: 86:2f:9a:73:30:2a:5a:92:2f:fc:88:0c:ee:05:f9: e1:a4:cb:c3:fb:32:3e:89:2e:da:6e:10:47:fa:47: c1:42:fb:93:c1:c5:eb:f9:3a:bc:69:ca:97:79:e6: 71:cc:6b:bb:a0:87:0a:14:b6:b5:71:fc:1c:f4:c5: de:e2:17:f8:52:b4:3e:11:49:5a:ed:a5:73:5d:ea: b4:b7:8d:9b:11:85:a3:d2:79:24:11:c2:0e:c6:6b: bc:c5:f6:dc:60:04:ea:97:1d:c2:35:08:86:3c:35: 5c:b1:e1:30:f0:35:47:af:1a:ec:c0:59:e5:90:b9: 42:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:51:A2:E5:1C:C6:25:97:1F:6A:F2:0F:21:EB:07:1A:45:28:3E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:55:22:0e:84:79:91:78:75:b6:dc:d6:a5:7d:90:99:b4:52: ae:66:fb:1d:30:49:45:fc:cb:60:3d:83:d0:9b:c0:32:c5:ca: a3:21:f6:35:ad:b6:07:f9:9d:31:f8:4c:45:cb:c5:92:d2:62: 11:3c:64:18:c6:e6:97:a5:13:fb:aa:57:34:af:b4:d5:93:f6: eb:2e:d5:f9:69:76:6e:81:80:1f:37:47:4d:98:45:e6:63:47: f6:c2:5b:04:be:c1:9b:27:a8:0f:8b:d1:fb:bc:04:28:71:e4: b7:33:29:40:b3:f8:cd:48:37:03:44:e7:80:ec:50:ed:69:6a: d3:06:7b:70:0d:0a:9c:12:75:3f:9a:6e:34:54:c3:c9:58:6b: 17:1f:9c:7d:7d:51:40:98:c9:23:12:27:96:d6:a2:4a:5b:e3: ac:bf:70:ab:03:29:fe:6f:80:dd:ed:61:38:a8:34:55:2e:0c: 7a:ae:f9:88:fe:5f:79:ee:82:4a:be:e5:3f:fc:03:c4:7c:49: ea:34:0a:92:e5:39:dc:3b:97:50:29:3b:1a:d7:76:c8:77:c3: 6c:e4:ed:25:12:8f:3b:a7:07:a5:f3:da:f6:6e:66:5f:4c:ae: e6:52:3c:4a:55:22:5d:d4:aa:50:c0:96:a6:29:7b:52:d5:7d: 83:17:d2:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FmywVjZLas06jtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MzI3YTZmMGMtNWViZS00ZmQ5LTgxNTEtZThmMjE0ZmMwM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU2gyflI5KommQIIkur/1Ujq20fItnUc0E4Q SSDoS6aDX3UaZpstpqm38uGg53glkKZ+nqDCaN+NCcmpgopgzP6dNA31+gE5VU4b dd0q4HY2u7pf4gpaO69eJX5Ua8pCTMZa7dyGNuOQ2aAa+AGawjVpHNi2CZojThUr U2hZnzAzz7Ffgj6GL5pzMCpaki/8iAzuBfnhpMvD+zI+iS7abhBH+kfBQvuTwcXr +Tq8acqXeeZxzGu7oIcKFLa1cfwc9MXe4hf4UrQ+EUla7aVzXeq0t42bEYWj0nkk EcIOxmu8xfbcYATqlx3CNQiGPDVcseEw8DVHrxrswFnlkLlCCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNFRouUcxiWXH2ryDyHrBxpFKD7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTU3OWQ4ODItZWIxYy0z OTAxLTk3ZmYtN2ViN2FlYWU4MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVVIg6EeZF4dbbc1qV9kJm0Uq5m+x0wSUX8y2A9g9CbwDLFyqMh 9jWttgf5nTH4TEXLxZLSYhE8ZBjG5pelE/uqVzSvtNWT9usu1flpdm6BgB83R02Y ReZjR/bCWwS+wZsnqA+L0fu8BChx5LczKUCz+M1INwNE54DsUO1patMGe3ANCpwS dT+abjRUw8lYaxcfnH19UUCYySMSJ5bWokpb46y/cKsDKf5vgN3tYTioNFUuDHqu +Yj+X3nugkq+5T/8A8R8Seo0CpLlOdw7l1ApOxrXdsh3w2zk7SUSjzunB6Xz2vZu Zl9MruZSPEpVIl3UqlDAlqYpe1LVfYMX0lA= -----END CERTIFICATE-----Generated at Sat Jun 13 16:00:17 2026 by rpki-client