$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa File: ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa (raw, json) Hash identifier: PE7TFN8WqYHAZOk23uzucYGTX0k2+JNQ8ZOA2DJeXRY= Subject key identifier: 1B:D8:C1:D1:86:43:E9:53:00:4E:AF:60:D5:33:28:6A:D7:2D:85:A4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C73E581CB316D98E6E580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:d6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:73:e5:81:cb:31:6d:98:e6:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d0576b92-2b99-4080-bd82-0dc8625aac6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:28:2c:8f:73:94:ba:cb:a3:90:7f:d7:f4: 91:c7:8b:51:5e:96:bd:fc:79:c8:79:ff:6b:b1:15: 75:47:03:b3:8c:e4:73:6b:f5:09:8a:5a:fb:68:36: d2:ac:41:4f:2d:6d:6a:8e:3e:c8:ad:33:e0:89:e6: 60:d0:6c:a8:4d:b8:17:c8:f3:2c:cb:34:df:14:b9: f2:bd:9e:a1:1e:e1:19:c9:94:03:a4:68:af:9b:55: 70:8c:e8:40:4f:8e:c4:19:8e:3e:cb:84:4b:69:00: 33:5c:4c:a1:10:8b:27:16:73:e6:b3:0e:8f:50:4d: 01:5f:b2:61:b2:d8:b7:5a:1b:55:9a:e8:66:b2:d8: 12:f8:3d:9e:38:82:60:26:4d:bf:3e:6d:6b:ae:67: bc:ae:db:8e:13:6e:50:bb:cb:3e:d3:68:1e:d2:86: 42:eb:78:8a:2c:90:02:7e:34:3b:8f:18:37:f0:31: f0:73:5d:c7:ba:1f:fb:be:cf:9c:3a:a7:55:4e:c8: 84:eb:84:56:96:35:44:34:9d:42:29:79:7c:a3:eb: f5:01:a0:8e:18:ec:33:dc:50:64:22:c5:44:c8:0c: 7a:ec:86:4e:0d:8e:67:bb:11:3f:3a:00:7e:08:87: d3:b9:5e:a9:f8:d3:aa:43:10:1e:3e:dd:06:bf:08: fd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D8:C1:D1:86:43:E9:53:00:4E:AF:60:D5:33:28:6A:D7:2D:85:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ff95c6ee-6206-3c48-a8fd-dde2a56b6741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:52:96:72:0c:6f:95:bb:ac:ed:d4:fd:1d:2c:97:af:a4:81: b3:fa:54:93:e7:40:6c:61:8c:a1:a8:d4:1e:ea:0c:a4:22:0c: 41:b4:8a:fa:6c:c9:13:a0:09:4f:f2:77:38:a7:bd:fe:1e:ae: f8:7c:c6:40:87:69:83:17:96:66:43:4c:9c:cb:dc:77:71:7a: d6:60:02:b6:9c:72:f9:21:98:f2:85:41:9b:2a:a2:6d:23:e9: e1:85:05:6e:6a:eb:f7:c8:c4:b0:d8:cf:22:9c:0a:46:cf:f2: ca:de:52:4a:44:5c:e0:f0:3c:8d:13:4a:22:1b:d3:4c:de:e1: e5:97:eb:a5:6c:59:de:c4:28:3a:99:cd:d7:1d:89:6c:95:bc: 6b:35:ea:b3:55:0e:26:cd:10:55:15:fd:b7:e5:24:97:18:09: 35:e4:1a:f6:da:3c:44:87:55:78:ae:12:8a:a0:71:a9:1f:22: 23:72:a3:1b:f3:93:7f:74:eb:bc:45:cc:31:98:6b:c4:b5:0f: 22:f7:d9:6a:8b:59:cb:88:6b:67:6a:67:d9:22:97:1b:64:7e: 49:85:c6:2c:c8:b1:bf:15:01:24:3a:5b:76:1c:c5:56:84:7a: 9c:c1:58:dd:88:ae:82:d7:af:1a:ee:f7:3a:47:40:9e:6d:ef: 75:a1:5e:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnHPlgcsxbZjm5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDA1NzZiOTItMmI5OS00MDgwLWJkODItMGRjODYyNWFhYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpMoLI9zlLrLo5B/1/SRx4tRXpa9/HnIef9r sRV1RwOzjORza/UJilr7aDbSrEFPLW1qjj7IrTPgieZg0GyoTbgXyPMsyzTfFLny vZ6hHuEZyZQDpGivm1VwjOhAT47EGY4+y4RLaQAzXEyhEIsnFnPmsw6PUE0BX7Jh sti3WhtVmuhmstgS+D2eOIJgJk2/Pm1rrme8rtuOE25Qu8s+02ge0oZC63iKLJAC fjQ7jxg38DHwc13Huh/7vs+cOqdVTsiE64RWljVENJ1CKXl8o+v1AaCOGOwz3FBk IsVEyAx67IZODY5nuxE/OgB+CIfTuV6p+NOqQxAePt0Gvwj9SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBvYwdGGQ+lTAE6vYNUzKGrXLYWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmY5NWM2ZWUtNjIwNi0z YzQ4LWE4ZmQtZGRlMmE1NmI2NzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFhSlnIMb5W7rO3U/R0sl6+kgbP6VJPnQGxhjKGo1B7qDKQiDEG0 ivpsyROgCU/ydzinvf4ervh8xkCHaYMXlmZDTJzL3HdxetZgAraccvkhmPKFQZsq om0j6eGFBW5q6/fIxLDYzyKcCkbP8sreUkpEXODwPI0TSiIb00ze4eWX66VsWd7E KDqZzdcdiWyVvGs16rNVDibNEFUV/bflJJcYCTXkGvbaPESHVXiuEoqgcakfIiNy oxvzk39067xFzDGYa8S1DyL32WqLWcuIa2dqZ9kilxtkfkmFxizIsb8VASQ6W3Yc xVaEepzBWN2IroLXrxru9zpHQJ5t73WhXp4= -----END CERTIFICATE-----Generated at Sat Jun 13 18:33:15 2026 by rpki-client