$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa File: f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa (raw, json) Hash identifier: edheg30iKbzw/oQeSFLI1xEYOuNBWhNQzJpsV6MUiN8= Subject key identifier: 13:52:41:5C:D3:43:28:DE:4F:47:96:3A:1E:59:9A:F0:B4:9D:9A:93 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D4D5A98F45485DE87EDBBB800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13901 IP address blocks: 2001:500:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:98:f4:54:85:de:87:ed:bb:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=b8027170-0cb8-40b1-84fc-fecc9c0a9693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bd:a8:79:fe:35:c9:74:83:aa:91:f1:fe:4f: bc:0b:1a:2f:5d:04:cf:ba:17:2e:94:68:75:0b:00: 60:42:7e:16:59:f7:35:a0:31:0c:4c:56:bd:51:10: 1d:89:21:52:63:67:ae:67:0e:db:fd:f5:e8:be:c6: 65:5a:e2:37:1c:f2:8e:0c:d5:ef:72:59:c4:3b:2b: 49:74:10:7d:78:bc:8c:18:7b:2d:a9:3d:14:21:7c: 29:a7:5c:e7:ff:7c:97:6a:df:48:8a:1a:03:cf:76: 5d:a0:f7:78:a9:e4:2f:70:8a:5f:36:5e:fb:e7:11: 89:67:25:ad:bb:4c:59:8a:35:7d:28:82:cd:de:c3: cf:d1:84:0a:51:59:82:80:62:4b:b1:34:07:ef:2d: 7b:8a:60:e0:64:f3:cd:e0:00:03:8a:dc:1e:e3:71: 2f:a5:be:e6:9a:75:dc:f1:04:5d:7c:75:d3:93:00: 6a:54:36:f4:5c:0c:f7:c1:4a:7c:cb:c9:36:d0:f9: b4:12:1b:83:cf:4f:6b:0c:d5:14:45:c1:90:97:97: 74:9e:e7:a2:f9:0c:8f:e8:4a:88:36:59:33:2e:78: a3:a5:18:5f:6f:77:72:a7:5f:2d:9b:c5:db:a5:37: b0:90:9f:bb:79:88:76:c7:14:99:be:14:02:ab:d2: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:52:41:5C:D3:43:28:DE:4F:47:96:3A:1E:59:9A:F0:B4:9D:9A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5f:95:89:d7:6c:f0:84:27:a2:c9:c3:69:b2:4c:b6:8d:a5: ac:de:37:41:80:5f:9b:62:c9:79:09:2c:2b:cd:5a:c3:11:bb: e6:bd:2a:ea:29:35:40:b2:7d:74:da:00:a9:0a:8c:7a:8e:08: bf:6a:80:51:58:39:7a:a6:fe:24:be:96:b0:22:92:e0:5d:92: 2d:0b:4a:0a:55:0e:be:34:3d:9c:85:a4:ed:15:e5:df:be:36: c4:54:7a:10:29:c6:48:6a:fd:14:bd:f3:63:b8:ba:b7:56:09: 72:05:0c:da:54:82:9e:9f:24:e3:cb:dd:29:77:a6:cf:10:fc: 2d:13:35:6d:8a:4a:dc:b8:54:08:7f:a3:a4:65:86:14:60:ca: 5a:50:58:63:80:09:2e:56:0f:07:1b:0c:06:16:be:5a:aa:40: 6a:f3:bc:dd:e2:e6:d7:f8:77:49:58:07:d0:1a:fb:91:33:69: ee:65:32:e9:4c:27:4c:e6:28:6e:51:09:48:8d:77:eb:a0:04: 3c:5e:7c:38:26:2a:8e:4e:8d:24:7b:a7:00:87:f4:82:60:2e: 3b:60:66:34:0d:d8:99:2b:f2:e9:d4:9b:57:45:88:63:ae:75: d7:b8:1b:3d:fc:4d:ae:7e:24:d9:7d:f7:c5:17:b1:00:e9:e6: 20:8d:81:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWpj0VIXeh+27uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YjgwMjcxNzAtMGNiOC00MGIxLTg0ZmMtZmVjYzljMGE5NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr2oef41yXSDqpHx/k+8CxovXQTPuhculGh1 CwBgQn4WWfc1oDEMTFa9URAdiSFSY2euZw7b/fXovsZlWuI3HPKODNXvclnEOytJ dBB9eLyMGHstqT0UIXwpp1zn/3yXat9IihoDz3ZdoPd4qeQvcIpfNl775xGJZyWt u0xZijV9KILN3sPP0YQKUVmCgGJLsTQH7y17imDgZPPN4AADitwe43Evpb7mmnXc 8QRdfHXTkwBqVDb0XAz3wUp8y8k20Pm0EhuDz09rDNUURcGQl5d0nuei+QyP6EqI NlkzLnijpRhfb3dyp18tm8XbpTewkJ+7eYh2xxSZvhQCq9KC1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBNSQVzTQyjeT0eWOh5ZmvC0nZqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjBhNjQyNjYtZmFmZS0z NTUzLThiYjEtODliYjljMWE3M2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZflYnXbPCEJ6LJw2myTLaNpazeN0GAX5tiyXkJLCvNWsMRu+a9 KuopNUCyfXTaAKkKjHqOCL9qgFFYOXqm/iS+lrAikuBdki0LSgpVDr40PZyFpO0V 5d++NsRUehApxkhq/RS982O4urdWCXIFDNpUgp6fJOPL3Sl3ps8Q/C0TNW2KSty4 VAh/o6RlhhRgylpQWGOACS5WDwcbDAYWvlqqQGrzvN3i5tf4d0lYB9Aa+5Ezae5l MulMJ0zmKG5RCUiNd+ugBDxefDgmKo5OjSR7pwCH9IJgLjtgZjQN2Jkr8unUm1dF iGOudde4Gz38Ta5+JNl998UXsQDp5iCNgVw= -----END CERTIFICATE-----Generated at Fri Apr 17 14:32:49 2026 by rpki-client