$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d6d62893-1a22-3d29-bab8-c2006df700da.roa File: d6d62893-1a22-3d29-bab8-c2006df700da.roa (raw, json) Hash identifier: sATsZeivj6VI2LVJhzWjadmZ0OvucxHKrgmotYIb+4w= Subject key identifier: 02:7A:02:85:A9:27:49:3B:33:14:C7:09:9D:2B:D0:93:E3:D2:7A:82 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C683CB5519052F8F7B280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d6d62893-1a22-3d29-bab8-c2006df700da.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:68:3c:b5:51:90:52:f8:f7:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=5276411c-67a5-4b9c-9db5-69448ea05623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5a:84:41:52:e7:89:b5:57:90:0e:b4:aa:7d: 07:05:48:14:ea:9a:a2:a1:5f:fb:d1:f5:c7:cf:d2: e9:31:dc:7d:44:39:5e:79:15:6e:47:6f:3d:54:15: 18:74:55:26:46:f3:70:d7:f6:21:92:e6:b5:31:42: 8d:0b:27:f5:9e:9d:6c:db:b5:8c:b7:46:ba:35:fb: 31:76:c2:28:ce:f0:3d:65:85:9c:32:c0:c8:74:4c: c3:d9:a5:35:0d:24:ce:df:07:ab:09:89:28:56:64: 4a:15:0c:be:06:e9:e7:bb:af:65:5d:03:9f:88:e1: cf:74:85:1c:16:f2:3e:f4:7f:92:8b:63:b1:8a:be: 4c:df:05:e2:3a:33:cd:31:4e:9c:e3:50:e1:73:79: 65:24:40:a4:d0:e5:a4:19:fa:f7:5f:58:c5:b0:2d: 53:f4:b9:dc:ca:63:57:97:c9:4d:fa:bd:57:2e:6c: ca:a7:44:41:23:59:a9:a0:83:a2:1d:6d:56:7a:19: cf:de:43:c3:91:9d:6c:28:f5:76:ad:a9:da:26:1b: 64:3f:9d:1c:e5:a7:61:b5:96:9c:00:2c:f8:76:a6: 7a:b8:e0:ae:3d:a9:4c:de:8a:bb:27:25:e2:a0:18: 81:4f:9d:df:8c:94:87:85:0c:30:5e:d2:05:e0:be: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7A:02:85:A9:27:49:3B:33:14:C7:09:9D:2B:D0:93:E3:D2:7A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d6d62893-1a22-3d29-bab8-c2006df700da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a0:aa:e1:90:1c:dc:66:43:3d:30:f7:27:59:e1:a1:8d:11: a5:9f:86:4b:15:07:b9:d0:3f:46:29:cb:f0:5e:ad:2e:9e:14: 4b:77:41:d6:4b:a5:1b:2b:e1:b2:76:96:d3:bf:4d:76:e1:4b: f1:d5:8c:50:7e:ec:7f:24:47:67:d8:55:50:70:6d:27:ec:24: 62:80:43:a6:c2:19:a5:92:b5:3b:03:3c:61:fa:d6:2c:6e:e0: 64:ac:0f:0c:01:a8:5c:ec:67:e1:8d:24:6a:cf:33:75:d1:16: b7:d6:fb:47:e3:b7:98:60:81:fd:57:c3:77:0a:bf:a1:14:50: 0c:6b:0a:f8:5f:ae:f7:d2:c5:fa:56:72:13:61:4c:1a:d9:a7: 14:48:08:97:69:b8:ff:68:ae:8d:e6:94:31:ef:09:8b:05:26: 4c:14:d2:f3:e3:8a:09:39:b2:41:00:ff:e8:5f:2a:0f:e3:9b: 0e:19:85:6d:5b:32:a9:94:e4:33:72:29:68:83:87:a6:94:3e: 49:16:f6:5d:43:f0:5f:a1:d8:ac:4a:9e:56:10:d1:8e:14:3f: ae:5b:ad:0b:1d:6a:7b:ba:03:64:ef:ed:cc:15:3a:28:b5:f4: 3a:8e:31:a1:69:fb:cf:2f:15:59:0a:37:37:b9:56:ff:ac:5e: a6:9a:03:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnGg8tVGQUvj3soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NTI3NjQxMWMtNjdhNS00YjljLTlkYjUtNjk0NDhlYTA1NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylqEQVLnibVXkA60qn0HBUgU6pqioV/70fXH z9LpMdx9RDleeRVuR289VBUYdFUmRvNw1/Yhkua1MUKNCyf1np1s27WMt0a6Nfsx dsIozvA9ZYWcMsDIdEzD2aU1DSTO3werCYkoVmRKFQy+Bunnu69lXQOfiOHPdIUc FvI+9H+Si2Oxir5M3wXiOjPNMU6c41Dhc3llJECk0OWkGfr3X1jFsC1T9LncymNX l8lN+r1XLmzKp0RBI1mpoIOiHW1WehnP3kPDkZ1sKPV2ranaJhtkP50c5adhtZac ACz4dqZ6uOCuPalM3oq7JyXioBiBT53fjJSHhQwwXtIF4L52/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAJ6AoWpJ0k7MxTHCZ0r0JPj0nqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDZkNjI4OTMtMWEyMi0z ZDI5LWJhYjgtYzIwMDZkZjcwMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH+gquGQHNxmQz0w9ydZ4aGNEaWfhksVB7nQP0Ypy/BerS6eFEt3 QdZLpRsr4bJ2ltO/TXbhS/HVjFB+7H8kR2fYVVBwbSfsJGKAQ6bCGaWStTsDPGH6 1ixu4GSsDwwBqFzsZ+GNJGrPM3XRFrfW+0fjt5hggf1Xw3cKv6EUUAxrCvhfrvfS xfpWchNhTBrZpxRICJdpuP9oro3mlDHvCYsFJkwU0vPjigk5skEA/+hfKg/jmw4Z hW1bMqmU5DNyKWiDh6aUPkkW9l1D8F+h2KxKnlYQ0Y4UP65brQsdanu6A2Tv7cwV Oii19DqOMaFp+88vFVkKNze5Vv+sXqaaA90= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:29 2026 by rpki-client