$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa File: 786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa (raw, json) Hash identifier: HMJPNULgdc0Vl6KoaEWalrgrI0RZMngVUAhi4WaNBUc= Subject key identifier: D8:90:E3:42:AA:47:0A:24:5B:75:3B:70:1D:3D:FC:90:73:DB:73:1C Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Certificate serial: 010D0C9F4328584D3F64E548D826B4AAF7B060E0 Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 2495 IP address blocks: 2001:49d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e5:48:d8:26:b4:aa:f7:b0:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=11a42524-212f-4764-bf42-3f64747aa194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:e8:c1:4d:f8:61:43:85:ff:7d:18:e6:3a: 95:42:16:c7:0c:87:66:dc:2f:52:f4:85:91:c3:df: 28:a9:c9:57:98:ae:ba:fc:74:23:6b:ac:a9:bf:50: 7f:4a:96:5d:6f:f9:67:e6:5e:af:1f:d7:fe:b3:57: 74:50:cd:37:58:e8:64:dd:5a:d3:46:6a:67:06:06: bb:b6:68:00:27:a5:d1:87:22:7a:1d:d8:fb:8f:d2: fc:6a:e4:2f:80:83:c7:ad:0c:2f:3f:9e:5d:16:7b: 67:68:bd:05:82:a6:f8:79:e1:d5:dc:7a:3a:80:34: 7b:de:6d:65:34:55:13:09:c1:ea:07:0c:85:f5:b1: 20:b7:01:7b:0a:3a:8b:79:aa:af:f6:d9:77:d5:f4: fa:6f:f2:e9:47:69:37:20:49:db:32:58:14:06:0e: 0c:b7:81:bd:7f:59:74:54:f4:ec:1e:6b:1a:0a:84: 58:7f:cb:60:4d:4c:f4:35:2d:de:c2:bd:58:26:a7: f1:60:1d:1c:47:a2:aa:49:1c:e1:14:1f:61:4a:9d: 09:92:71:de:04:a5:49:08:02:c9:0f:80:66:46:37: 99:e5:95:81:20:93:6a:82:51:dc:d3:6f:f7:76:d9: ca:de:ce:48:b9:ea:cd:b8:15:a7:e9:1e:89:63:78: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:90:E3:42:AA:47:0A:24:5B:75:3B:70:1D:3D:FC:90:73:DB:73:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/786e4ea1-c0af-329a-8137-9ec0c9f1f4f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl X509v3 Authority Key Identifier: keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer sbgp-ipAddrBlock: critical IPv6: 2001:49d0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:74:b7:4c:26:0b:d0:27:50:db:06:58:2b:26:bc:42:45:6b: 14:2a:6b:6a:86:d6:68:ec:c0:76:a7:b8:bd:a7:ca:9d:8e:48: 55:2b:87:77:d3:60:de:3b:cd:af:da:61:83:e8:54:cd:23:33: 4b:bb:54:78:07:ca:0c:fc:f3:4f:43:5b:d7:b5:8c:de:9b:5f: 44:97:07:50:55:ad:78:4c:14:ff:0b:c4:04:2b:19:d2:31:b3: 3f:aa:ba:fe:5f:d3:7b:2d:08:56:03:40:37:2d:32:54:a0:70: b0:5b:79:5c:95:84:72:4e:17:1e:b2:82:bd:bb:09:45:c5:19: 51:9b:88:76:e7:59:6c:97:13:91:32:7e:01:f7:e7:67:bb:34: e2:ba:f6:46:cc:cc:8a:bf:87:ee:4d:9b:79:cd:3f:c1:94:4b: 32:8e:a2:b7:df:3f:64:65:cf:34:9d:e3:7d:e6:a4:a3:56:44: 3c:63:ac:4b:92:ff:bc:d3:1b:20:c5:e3:a8:a9:45:16:28:96: 75:cf:98:2f:d1:1b:f5:39:79:83:51:f3:62:f6:11:f3:7f:ed: 1c:6d:d1:47:54:96:cd:8f:ed:b3:d0:ed:42:8b:a1:ba:f7:ec: 25:b2:6d:f4:43:fe:a6:d3:27:26:85:ca:fd:66:6c:9f:69:2f: 97:66:17:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZOVI2Ca0qvewYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4 YWIxMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MTFhNDI1MjQtMjEyZi00NzY0LWJmNDItM2Y2NDc0N2FhMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd/owU34YUOF/30Y5jqVQhbHDIdm3C9S9IWR w98oqclXmK66/HQja6ypv1B/SpZdb/ln5l6vH9f+s1d0UM03WOhk3VrTRmpnBga7 tmgAJ6XRhyJ6Hdj7j9L8auQvgIPHrQwvP55dFntnaL0Fgqb4eeHV3Ho6gDR73m1l NFUTCcHqBwyF9bEgtwF7CjqLeaqv9tl31fT6b/LpR2k3IEnbMlgUBg4Mt4G9f1l0 VPTsHmsaCoRYf8tgTUz0NS3ewr1YJqfxYB0cR6KqSRzhFB9hSp0JknHeBKVJCALJ D4BmRjeZ5ZWBIJNqglHc02/3dtnK3s5IuerNuBWn6R6JY3i4GQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNiQ40KqRwokW3U7cB09/JBz23McMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvNzg2ZTRlYTEtYzBhZi0z MjlhLTgxMzctOWVjMGM5ZjFmNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1 ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk MWI5MjhhYjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJ0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbdLdMJgvQJ1DbBlgrJrxCRWsUKmtqhtZo7MB2p7i9p8qdjkhVK4d3 02DeO82v2mGD6FTNIzNLu1R4B8oM/PNPQ1vXtYzem19ElwdQVa14TBT/C8QEKxnS MbM/qrr+X9N7LQhWA0A3LTJUoHCwW3lclYRyThcesoK9uwlFxRlRm4h251lslxOR Mn4B9+dnuzTiuvZGzMyKv4fuTZt5zT/BlEsyjqK33z9kZc80neN95qSjVkQ8Y6xL kv+80xsgxeOoqUUWKJZ1z5gv0Rv1OXmDUfNi9hHzf+0cbdFHVJbNj+2z0O1Ci6G6 9+wlsm30Q/6m0ycmhcr9ZmyfaS+XZhc3 -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:25 2026 by rpki-client