$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e231adf-0125-3b13-95e2-1cd486073e5c.roa File: 0e231adf-0125-3b13-95e2-1cd486073e5c.roa (raw, json) Hash identifier: wlrjYNV6U0qDutCAlBYKoU3a+j+Ity6HcBbkGsi9gq0= Subject key identifier: C5:F2:85:ED:DD:71:6F:68:AA:1B:AE:00:A6:55:50:D9:6F:AA:2D:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC0D492CEE661082F084080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e231adf-0125-3b13-95e2-1cd486073e5c.roa Signing time: Fri 20 Mar 2026 17:42:48 +0000 ROA not before: Fri 20 Mar 2026 17:42:48 +0000 ROA not after: Thu 18 Jun 2026 17:42:48 +0000 asID: 7029 IP address blocks: 2001:19b0:34d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:d4:92:ce:e6:61:08:2f:08:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:42:48 2026 GMT Not After : Jun 18 17:42:48 2026 GMT Subject: CN=b9f9186d-730a-4522-87d8-2b66b4392354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e8:7f:87:ba:ac:99:b6:ed:e6:14:57:a1:cb: d5:3a:4f:8f:e4:8a:9a:90:bb:56:fc:db:62:e3:88: 76:e8:37:34:ad:a1:93:2e:ed:2c:67:9a:ea:8a:f7: 6e:a3:47:65:f8:09:64:48:a7:c3:2e:03:2b:19:39: a3:b4:90:c5:53:a8:a2:fa:5b:d1:49:7d:f7:17:57: 2e:e3:7e:ea:f6:05:eb:fe:88:99:9b:c2:aa:d5:ab: c6:47:8a:b5:58:54:d4:b5:1e:18:2d:73:81:fa:4f: bb:39:55:3f:45:ee:46:1c:8d:ef:d5:89:0c:d0:8b: c2:2c:9e:18:de:b3:76:fd:65:2a:5a:54:8e:1b:cd: e0:4d:96:92:8f:1c:15:c7:cc:59:01:64:e1:39:a2: 97:d4:1d:74:6b:94:65:2e:e8:8a:8b:98:a6:e0:b2: 8a:f4:84:8a:6c:7f:7d:27:bb:22:3c:f4:f9:24:99: 96:35:2d:ae:bf:ec:11:69:aa:80:93:c3:44:ac:e4: ea:22:d9:9c:af:7d:6a:65:8c:16:50:3a:e3:ad:af: 7a:90:d6:02:02:7a:b6:11:24:4d:64:7b:c2:8e:df: 72:be:09:de:e0:e5:1c:9c:11:9c:14:cb:ce:f2:93: f2:4a:54:12:af:1a:dc:5c:ab:4a:68:b0:3b:12:1c: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F2:85:ED:DD:71:6F:68:AA:1B:AE:00:A6:55:50:D9:6F:AA:2D:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e231adf-0125-3b13-95e2-1cd486073e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:34d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:80:56:f4:02:78:94:bc:c5:21:2e:1f:93:a1:c2:1a:d2:ad: 83:7e:bf:68:91:25:4e:2c:4e:f2:38:62:a4:25:5b:ee:04:aa: 05:dc:8f:05:28:ce:94:f3:e2:00:74:b4:de:25:04:a7:b7:2d: 70:1e:94:12:4b:20:cd:ec:d1:a9:a5:59:7a:8f:da:48:1e:6a: 53:8e:2d:6a:f9:ab:04:cf:e9:94:c1:f0:6e:f8:6e:0b:91:be: a2:98:57:2e:0f:70:da:84:3b:3a:4e:10:50:a5:a6:74:1f:91: 09:e5:6f:a2:8f:91:e1:ba:60:3d:0d:57:a7:ef:b9:81:76:6c: a6:be:7b:f6:e6:5a:ea:fb:3e:0d:78:a2:bc:1a:57:0b:4a:90: 23:4b:8c:0d:6d:7b:a1:9d:33:58:12:c0:7c:57:d2:f0:1e:76: 94:57:e9:d5:dd:7f:51:cc:88:aa:8e:66:ed:20:88:5d:06:e3: 87:d2:b3:c5:4a:18:24:9d:0c:a9:66:e5:64:f3:b1:8b:91:64: 5b:fc:be:86:41:56:ac:2f:02:fc:1b:87:19:d9:65:8c:42:89: 66:4c:9b:5c:c8:c5:f1:32:9b:eb:61:64:73:10:68:54:23:35: d7:55:b7:81:79:f2:2b:be:5a:67:2f:97:ab:42:2e:90:24:0e: 52:b4:46:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wNSSzuZhCC8IQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDI0OFoXDTI2MDYxODE3NDI0OFowLzEtMCsGA1UEAxMk YjlmOTE4NmQtNzMwYS00NTIyLTg3ZDgtMmI2NmI0MzkyMzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeh/h7qsmbbt5hRXocvVOk+P5IqakLtW/Nti 44h26Dc0raGTLu0sZ5rqivduo0dl+AlkSKfDLgMrGTmjtJDFU6ii+lvRSX33F1cu 437q9gXr/oiZm8Kq1avGR4q1WFTUtR4YLXOB+k+7OVU/Re5GHI3v1YkM0IvCLJ4Y 3rN2/WUqWlSOG83gTZaSjxwVx8xZAWThOaKX1B10a5RlLuiKi5im4LKK9ISKbH99 J7siPPT5JJmWNS2uv+wRaaqAk8NErOTqItmcr31qZYwWUDrjra96kNYCAnq2ESRN ZHvCjt9yvgne4OUcnBGcFMvO8pPySlQSrxrcXKtKaLA7EhwB9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMXyhe3dcW9oqhuuAKZVUNlvqi2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGUyMzFhZGYtMDEyNS0z YjEzLTk1ZTItMWNkNDg2MDczZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsANN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECAVvQCeJS8xSEuH5OhwhrSrYN+v2iRJU4sTvI4YqQlW+4EqgXc jwUozpTz4gB0tN4lBKe3LXAelBJLIM3s0amlWXqP2kgealOOLWr5qwTP6ZTB8G74 bguRvqKYVy4PcNqEOzpOEFClpnQfkQnlb6KPkeG6YD0NV6fvuYF2bKa+e/bmWur7 Pg14orwaVwtKkCNLjA1te6GdM1gSwHxX0vAedpRX6dXdf1HMiKqOZu0giF0G44fS s8VKGCSdDKlm5WTzsYuRZFv8voZBVqwvAvwbhxnZZYxCiWZMm1zIxfEym+thZHMQ aFQjNddVt4F58iu+Wmcvl6tCLpAkDlK0RnE= -----END CERTIFICATE-----Generated at Thu Mar 26 09:34:42 2026 by rpki-client