$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b65de2f-357d-3332-aeef-8a1564e649c5.roa File: 0b65de2f-357d-3332-aeef-8a1564e649c5.roa (raw, json) Hash identifier: jahHWCDKEeY/oRf0D7UGa6NOk9Ee+ATi+Alq50VgnvQ= Subject key identifier: EF:CA:26:17:A0:5D:6D:6E:2D:26:BD:76:75:35:D9:C9:B2:9A:C7:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC304E7A8F6237A11D8CE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b65de2f-357d-3332-aeef-8a1564e649c5.roa Signing time: Fri 20 Mar 2026 17:47:12 +0000 ROA not before: Fri 20 Mar 2026 17:47:12 +0000 ROA not after: Thu 18 Jun 2026 17:47:12 +0000 asID: 7029 IP address blocks: 2001:19b0:540::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c3:04:e7:a8:f6:23:7a:11:d8:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:47:12 2026 GMT Not After : Jun 18 17:47:12 2026 GMT Subject: CN=7d9d284e-a908-42fd-a9d1-380e45ce28eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:1b:81:d3:33:3f:c8:3c:19:7a:c2:7c:da: 17:f7:6b:c8:26:4b:31:b7:f6:ae:d2:79:5d:3d:ab: 6a:05:d4:02:10:3b:7d:b8:26:2c:a2:06:25:8e:91: eb:97:59:84:7c:70:c5:5a:33:19:7d:7b:0f:f3:06: 74:f3:b1:34:71:b0:48:d0:d6:fe:2f:67:11:23:23: 49:c6:69:ad:d9:2f:29:37:52:f1:aa:a4:29:30:98: db:a4:6f:ef:34:e5:a2:03:83:0e:0d:83:20:d1:a8: 21:b0:26:4f:b4:8d:11:01:c3:4f:fa:1b:b1:fa:cc: f5:2f:e6:77:1c:77:ba:89:bc:a4:9c:e5:17:58:1f: 76:20:a5:ab:ff:1d:51:c8:66:3f:fe:e5:14:7a:7a: 51:66:78:4f:a6:23:c5:27:f7:2a:46:68:6e:8e:56: c6:47:ea:9f:6f:54:ab:51:08:1e:75:d0:65:b5:a7: bb:99:3b:bd:dc:82:09:9e:bb:0d:fa:62:6e:32:47: 41:20:1e:c7:32:bc:93:55:71:ac:d2:42:86:ab:14: 31:f7:cb:9d:a0:df:49:a3:1c:49:ef:4c:a7:b5:48: c6:d8:c0:84:73:aa:2a:d6:87:0f:9b:c6:49:a7:3d: 60:a4:9c:4b:b6:53:b5:94:4d:d6:e9:94:fe:ad:19: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:26:17:A0:5D:6D:6E:2D:26:BD:76:75:35:D9:C9:B2:9A:C7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b65de2f-357d-3332-aeef-8a1564e649c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:540::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9c:c5:46:79:59:a5:c8:a8:05:37:06:64:fe:34:82:d8:28: 18:0e:e1:f1:64:92:8a:5c:2d:bc:63:15:c9:f6:17:38:2b:b1: 46:a1:b3:9f:75:d9:ad:9b:40:e3:9f:32:82:87:f9:45:f9:b7: 49:65:54:a2:3b:c6:3a:ce:ba:e6:6a:fc:66:1d:ac:93:29:2b: 65:31:5e:d8:cb:26:fd:1e:0b:a9:b2:09:6e:33:92:ed:62:20: 18:fc:3b:76:8d:b9:3f:b6:fe:1f:36:53:33:69:ba:f0:58:0e: 86:4c:26:1c:b5:54:23:d8:b0:04:ee:90:f7:28:22:53:7f:78: fe:cf:3e:ac:8f:5e:f0:03:f5:d3:4b:1d:8b:6d:df:a7:4f:ca: 3d:ce:47:3f:f1:40:78:f5:fe:5e:12:07:77:71:7a:5b:5a:f2: e0:4f:0e:88:7a:cc:6f:2b:10:fc:d7:f1:c5:e4:ca:8c:be:3d: e5:cc:e2:44:69:2c:e6:8b:35:a3:4c:d4:92:91:3a:b9:dc:24: 7e:1c:e4:d3:9e:26:cf:da:8d:da:a3:0b:77:2b:19:05:df:76: 03:97:77:15:f6:82:5d:dc:42:da:1a:b9:e5:ee:1b:8d:7f:31: 77:29:13:25:97:f8:ea:1c:d4:74:90:7c:1a:27:2c:c3:f7:e5: 79:8d:cb:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wwTnqPYjehHYzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDcxMloXDTI2MDYxODE3NDcxMlowLzEtMCsGA1UEAxMk N2Q5ZDI4NGUtYTkwOC00MmZkLWE5ZDEtMzgwZTQ1Y2UyOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokUbgdMzP8g8GXrCfNoX92vIJksxt/au0nld PatqBdQCEDt9uCYsogYljpHrl1mEfHDFWjMZfXsP8wZ087E0cbBI0Nb+L2cRIyNJ xmmt2S8pN1LxqqQpMJjbpG/vNOWiA4MODYMg0aghsCZPtI0RAcNP+hux+sz1L+Z3 HHe6ibyknOUXWB92IKWr/x1RyGY//uUUenpRZnhPpiPFJ/cqRmhujlbGR+qfb1Sr UQgeddBltae7mTu93IIJnrsN+mJuMkdBIB7HMryTVXGs0kKGqxQx98udoN9JoxxJ 70yntUjG2MCEc6oq1ocPm8ZJpz1gpJxLtlO1lE3W6ZT+rRm7YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO/KJhegXW1uLSa9dnU12cmymseyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI2NWRlMmYtMzU3ZC0z MzMyLWFlZWYtOGExNTY0ZTY0OWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAVA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADecxUZ5WaXIqAU3BmT+NILYKBgO4fFkkopcLbxjFcn2FzgrsUah s5912a2bQOOfMoKH+UX5t0llVKI7xjrOuuZq/GYdrJMpK2UxXtjLJv0eC6myCW4z ku1iIBj8O3aNuT+2/h82UzNpuvBYDoZMJhy1VCPYsATukPcoIlN/eP7PPqyPXvAD 9dNLHYtt36dPyj3ORz/xQHj1/l4SB3dxelta8uBPDoh6zG8rEPzX8cXkyoy+PeXM 4kRpLOaLNaNM1JKROrncJH4c5NOeJs/ajdqjC3crGQXfdgOXdxX2gl3cQtoaueXu G41/MXcpEyWX+Ooc1HSQfBonLMP35XmNy7M= -----END CERTIFICATE-----Generated at Thu Mar 26 13:14:42 2026 by rpki-client