$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa File: de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa (raw, json) Hash identifier: rUoI7B8SXPMEbyfnJ7qDFPtcVAlgerRyffoUEd7AWB4= Subject key identifier: DB:3C:8B:6A:71:A1:FE:23:73:D2:DF:51:F4:52:6E:D0:9D:12:0E:8F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059B357EA35558651FB4A800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:35:7e:a3:55:58:65:1f:b4:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=2018905c-2720-447d-b631-1542fd68a10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:0b:cb:c8:14:b2:fe:a6:12:19:10:98:af: 45:06:ac:b9:6a:41:6f:e9:f3:49:b9:38:07:7c:53: 87:8f:c2:2c:b6:02:bf:e9:67:9a:c5:f0:54:2c:09: 0d:cf:28:cc:aa:cd:23:88:6e:47:52:a5:5d:cd:40: 50:6d:0c:7f:4c:ed:b1:3f:ee:f7:2d:38:a1:ac:0c: 37:17:fc:5c:72:d0:8c:9c:d8:17:25:de:a4:1d:01: 73:74:c1:fe:bc:c5:92:98:cd:a0:94:09:3a:4f:46: dc:62:ac:c2:bb:f4:8c:f9:fe:8b:51:bd:fe:b4:c4: 7f:28:e4:da:e5:99:6c:93:96:ae:7f:41:19:0f:58: e7:4b:92:49:56:16:7e:3d:4e:fc:4a:9a:99:5b:be: 15:32:f4:8f:5e:46:55:be:97:55:5b:33:de:af:c9: 6c:7b:3e:2f:d5:6a:3e:cf:96:c4:f9:6f:3b:26:ab: dd:e3:b6:53:f2:60:ae:f9:55:48:c3:8f:64:e5:bc: e5:ad:b9:15:8c:74:7e:13:15:14:38:38:bf:08:90: 4e:18:43:22:b0:02:84:e6:0d:8a:63:1a:fc:79:b1: 09:57:c6:ad:f6:33:80:64:ec:db:ff:b8:69:7d:a4: 08:6d:df:ab:0f:60:ee:b5:a8:ad:de:93:3e:ce:09: 33:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3C:8B:6A:71:A1:FE:23:73:D2:DF:51:F4:52:6E:D0:9D:12:0E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0c:dc:d2:6a:c3:b7:a3:8f:93:a7:38:bf:17:8e:3b:02:31: 22:36:6f:49:50:f5:cb:d1:d9:0e:38:8d:9a:33:3f:11:98:fb: 27:9a:06:51:49:65:4c:83:67:bc:f2:8a:e2:6d:04:fd:b3:b8: 0b:ae:90:e2:7b:98:3e:73:25:c6:77:47:34:6a:5b:24:b1:ae: c4:66:34:33:2b:4a:29:fd:84:f0:74:94:b8:32:47:d0:2f:33: fa:12:40:2e:0e:fe:58:1a:b8:0b:ae:76:8b:1f:aa:46:e4:cd: bf:e8:a3:ed:2d:83:d5:db:82:f0:75:ce:79:50:ab:17:81:23: 68:7e:88:dc:e6:30:0a:d7:69:9d:a2:c4:28:c4:67:8c:44:53: 1b:5d:96:aa:c8:a9:97:d2:da:ce:18:86:7f:70:5e:2a:7d:46: a3:75:d9:b0:e7:a7:8b:2e:05:7e:70:70:26:b4:ed:08:3e:ef: 99:61:42:76:cc:77:53:59:9a:88:a2:57:64:15:81:8d:a4:f7: 1d:07:42:20:6c:b2:db:4f:76:f9:31:21:da:65:24:ce:5e:07: e4:d1:3d:bf:11:69:fe:a9:f5:d2:31:9c:29:89:49:4e:1e:b0: d7:ab:84:83:8f:0b:4d:ec:62:f6:ec:dd:d8:34:8f:35:01:2e: 0d:2e:23:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FmzV+o1VYZR+0qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MjAxODkwNWMtMjcyMC00NDdkLWI2MzEtMTU0MmZkNjhhMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBYLy8gUsv6mEhkQmK9FBqy5akFv6fNJuTgH fFOHj8IstgK/6WeaxfBULAkNzyjMqs0jiG5HUqVdzUBQbQx/TO2xP+73LTihrAw3 F/xcctCMnNgXJd6kHQFzdMH+vMWSmM2glAk6T0bcYqzCu/SM+f6LUb3+tMR/KOTa 5Zlsk5auf0EZD1jnS5JJVhZ+PU78SpqZW74VMvSPXkZVvpdVWzPer8lsez4v1Wo+ z5bE+W87Jqvd47ZT8mCu+VVIw49k5bzlrbkVjHR+ExUUODi/CJBOGEMisAKE5g2K Yxr8ebEJV8at9jOAZOzb/7hpfaQIbd+rD2Dutait3pM+zgkzYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNs8i2pxof4jc9LfUfRSbtCdEg6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGU5MjEzZDYtNmJhMC0z NjI1LWFjOWMtMDNlMGQ2YzI1MTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEEM3NJqw7ejj5OnOL8XjjsCMSI2b0lQ9cvR2Q44jZozPxGY+yea BlFJZUyDZ7zyiuJtBP2zuAuukOJ7mD5zJcZ3RzRqWySxrsRmNDMrSin9hPB0lLgy R9AvM/oSQC4O/lgauAuudosfqkbkzb/oo+0tg9XbgvB1znlQqxeBI2h+iNzmMArX aZ2ixCjEZ4xEUxtdlqrIqZfS2s4Yhn9wXip9RqN12bDnp4suBX5wcCa07Qg+75lh QnbMd1NZmoiiV2QVgY2k9x0HQiBssttPdvkxIdplJM5eB+TRPb8Raf6p9dIxnCmJ SU4esNerhIOPC03sYvbs3dg0jzUBLg0uIxI= -----END CERTIFICATE-----Generated at Sat Jun 13 17:27:57 2026 by rpki-client