$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/abc3219c-16f6-331f-98b6-0e29c0c84ddf.roa File: abc3219c-16f6-331f-98b6-0e29c0c84ddf.roa (raw, json) Hash identifier: 3ZXQuuKi8wSZLDiNbj35lPetLlEuTq1xcvzDde4x+yQ= Subject key identifier: FC:BE:20:A0:F0:94:2C:E0:9A:C0:11:35:A9:5B:1A:23:DB:13:E1:A9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B51A77BE265828D62CB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/abc3219c-16f6-331f-98b6-0e29c0c84ddf.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:51:a7:7b:e2:65:82:8d:62:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d4ca169c-3d34-492e-968f-6e6fe2192a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ff:f7:49:da:d6:e2:5d:8f:6c:63:d7:e3:18: d6:3c:8b:a4:db:43:92:d0:45:6f:1c:ce:9e:46:fd: 0a:6d:fa:f1:4f:dd:68:0a:cf:93:b4:b9:2c:f7:46: ad:d5:4b:ca:c0:b8:40:36:6d:41:c1:84:7b:c9:23: e2:c7:79:1c:5b:1b:56:f5:c1:06:6d:1a:13:f3:ba: a4:13:95:83:60:bc:a5:cb:5c:9a:f3:97:2b:fb:aa: 27:1e:cd:66:c1:2a:20:e8:0f:b7:2d:31:70:63:9b: f1:80:33:fd:8d:45:9d:97:10:c2:45:a0:45:86:b2: 7a:f2:af:e8:85:ef:29:f4:bd:b0:bc:c2:89:9c:e7: f4:7f:75:b6:c0:30:8b:78:39:8d:c8:f5:70:8c:41: 1e:39:0e:3d:52:99:9b:5a:1c:a8:81:77:4f:52:36: 72:f0:d5:c9:fc:df:d5:51:48:3d:98:1f:2d:be:f6: ff:6a:c0:c7:77:2b:bc:92:d0:a6:95:b2:e5:12:54: df:df:d2:0c:85:1c:72:37:47:97:cd:94:04:b1:5a: f4:99:58:86:6f:ee:69:ae:f5:69:9c:2b:6f:80:f4: e3:20:44:45:ae:39:e2:3e:6b:ad:b9:9e:2c:f9:6a: b9:1b:ec:72:f3:67:75:69:62:95:95:4f:92:97:12: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BE:20:A0:F0:94:2C:E0:9A:C0:11:35:A9:5B:1A:23:DB:13:E1:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/abc3219c-16f6-331f-98b6-0e29c0c84ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c2:a4:e7:e8:c1:6b:72:95:46:6a:c7:7e:67:7d:c3:08:34: 67:82:10:63:7a:cb:02:19:47:22:61:ff:71:56:88:6c:94:a9: 3b:a8:0e:19:15:6c:ce:31:f5:50:f9:9e:b3:04:52:f4:31:94: 3b:4a:3c:31:33:34:a9:85:28:b9:24:06:d2:dc:2c:8e:ed:a5: 02:41:03:38:9e:32:45:d1:91:15:84:21:2d:bf:eb:16:be:d0: 95:58:3b:8f:a7:68:b5:46:51:81:d2:3a:62:93:09:09:67:6e: a3:3f:01:5d:01:f6:06:02:fd:cd:a9:26:92:3c:e6:1e:ad:75: eb:78:29:b8:01:cc:0a:14:fb:a8:ba:10:ad:c4:f6:eb:8d:b1: e3:9f:d6:46:49:f0:d3:d5:37:aa:c3:0e:b9:50:3d:61:46:88: 54:e5:2e:da:0c:1d:b9:03:b8:43:d2:48:51:fb:79:93:97:f4: 2a:1e:d8:c0:e2:17:ed:18:f3:81:df:4e:00:12:bc:b8:4f:cf: 5c:f0:35:0a:3c:38:90:4a:02:34:fb:3c:84:47:78:a6:91:3c: ec:14:9e:57:77:5d:53:da:9f:d8:0f:ae:8c:b6:43:f7:49:60: c9:37:f8:5b:04:bf:2b:79:f8:92:8b:40:37:b0:36:02:89:6a: 9d:c7:63:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm1Gne+Jlgo1iy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDRjYTE2OWMtM2QzNC00OTJlLTk2OGYtNmU2ZmUyMTkyYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3//3SdrW4l2PbGPX4xjWPIuk20OS0EVvHM6e Rv0KbfrxT91oCs+TtLks90at1UvKwLhANm1BwYR7ySPix3kcWxtW9cEGbRoT87qk E5WDYLyly1ya85cr+6onHs1mwSog6A+3LTFwY5vxgDP9jUWdlxDCRaBFhrJ68q/o he8p9L2wvMKJnOf0f3W2wDCLeDmNyPVwjEEeOQ49UpmbWhyogXdPUjZy8NXJ/N/V UUg9mB8tvvb/asDHdyu8ktCmlbLlElTf39IMhRxyN0eXzZQEsVr0mViGb+5prvVp nCtvgPTjIERFrjniPmutuZ4s+Wq5G+xy82d1aWKVlU+SlxKEcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPy+IKDwlCzgmsARNalbGiPbE+GpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWJjMzIxOWMtMTZmNi0z MzFmLTk4YjYtMGUyOWMwYzg0ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABfCpOfowWtylUZqx35nfcMINGeCEGN6ywIZRyJh/3FWiGyUqTuo DhkVbM4x9VD5nrMEUvQxlDtKPDEzNKmFKLkkBtLcLI7tpQJBAzieMkXRkRWEIS2/ 6xa+0JVYO4+naLVGUYHSOmKTCQlnbqM/AV0B9gYC/c2pJpI85h6tdet4KbgBzAoU +6i6EK3E9uuNseOf1kZJ8NPVN6rDDrlQPWFGiFTlLtoMHbkDuEPSSFH7eZOX9Coe 2MDiF+0Y84HfTgASvLhPz1zwNQo8OJBKAjT7PIRHeKaRPOwUnld3XVPan9gProy2 Q/dJYMk3+FsEvyt5+JKLQDewNgKJap3HY1E= -----END CERTIFICATE-----Generated at Sat Jun 13 18:33:41 2026 by rpki-client