$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20a6bd82-5fe0-3ad9-b08e-557f4457ba73.roa File: 20a6bd82-5fe0-3ad9-b08e-557f4457ba73.roa (raw, json) Hash identifier: FdTprKxkmWOYaxrF4VpjqC5YrTGHAOtdU5sDWAFObSQ= Subject key identifier: 96:42:28:5E:C3:95:74:A9:3F:F9:14:7A:2D:C8:4C:00:47:45:D7:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC0A4D5B4E54F30A7A42600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20a6bd82-5fe0-3ad9-b08e-557f4457ba73.roa Signing time: Fri 20 Mar 2026 17:42:25 +0000 ROA not before: Fri 20 Mar 2026 17:42:25 +0000 ROA not after: Thu 18 Jun 2026 17:42:25 +0000 asID: 7029 IP address blocks: 2001:19b0:7a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:a4:d5:b4:e5:4f:30:a7:a4:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:42:25 2026 GMT Not After : Jun 18 17:42:25 2026 GMT Subject: CN=1064bef0-e575-4352-b6c6-cd6ad65e0be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:37:56:4e:95:b8:7a:3f:20:44:00:02:12: 06:95:56:ae:e0:48:e5:f2:ad:d5:47:59:d8:06:e9: fb:f9:46:e1:f5:46:2e:e2:bb:17:2b:72:2c:fb:66: d9:8c:1a:5c:d4:d6:7d:fa:57:8f:49:3a:ce:05:6a: fc:3a:22:0e:fd:b6:52:90:d5:0c:b1:26:98:4c:cf: c9:00:80:55:ca:0d:91:72:30:55:8e:d3:c0:c3:b4: 6f:d5:62:99:cc:e5:a7:f2:57:30:39:ef:97:89:8f: 90:a6:2e:c8:54:fd:c1:55:97:f5:b3:93:58:07:b7: 1f:77:65:57:08:69:48:b6:df:a6:78:d3:21:3b:4b: 49:2c:42:fb:4c:54:bb:82:f6:b4:8e:2b:e1:11:ea: 2c:5c:38:fc:b0:e4:bf:ca:96:36:34:a8:3d:6d:d7: 47:10:2d:40:98:82:32:b1:a0:45:0d:0b:6f:52:a5: 23:01:c2:f7:03:85:90:52:cc:9e:18:70:a1:88:02: 12:38:38:72:51:5c:5f:9f:14:0d:33:f2:74:e7:2f: 71:ab:d9:18:60:2f:a5:27:12:80:74:51:16:8b:6f: d8:13:93:22:1f:d3:91:87:fa:cc:c8:e0:dd:69:e6: 6c:f6:33:3d:5e:90:3c:6c:8e:43:9a:09:f7:c6:37: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:42:28:5E:C3:95:74:A9:3F:F9:14:7A:2D:C8:4C:00:47:45:D7:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20a6bd82-5fe0-3ad9-b08e-557f4457ba73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:7a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f9:52:88:53:f7:4d:fb:f8:c4:95:a7:40:72:0d:db:09:4c: c0:b4:3b:0c:02:f3:2b:16:33:9b:9b:d8:c0:60:fe:5d:67:cb: 11:b0:5d:8e:bf:75:1b:fc:5f:46:c4:e8:7a:5b:24:65:d4:ef: 85:0d:3b:9f:b0:29:39:2f:04:c5:9e:b2:49:e7:2a:c4:98:c2: 01:4f:03:0a:6e:50:62:b3:6d:c6:16:50:ae:de:94:b8:af:52: 18:de:5b:27:07:72:54:ba:c9:01:4e:7d:e0:0f:56:db:1c:93: a3:5b:a0:3f:d5:64:fa:53:1e:81:d2:21:ef:3c:e7:2d:5a:c8: 25:f0:2a:0c:a7:7b:23:c1:cb:49:80:cc:38:39:17:1c:f8:36: 26:0a:70:93:5e:09:04:e2:28:bc:0e:8e:f0:c7:de:ce:d4:3b: 88:c2:73:d3:8c:34:32:3d:8e:84:72:07:7d:98:de:04:ef:fa: 2a:1b:ea:63:fe:24:4c:df:9a:9c:41:a2:13:6c:3d:c5:e6:6f: a3:fb:2b:fd:c5:83:fa:a8:63:71:dd:96:8f:50:e0:67:c1:38: 92:ed:58:d2:28:c9:61:cc:22:d8:77:7c:9b:a3:1c:af:b1:50: 57:b9:8c:75:98:08:12:2b:a8:a9:28:6c:56:8a:89:eb:f2:e5: e7:b9:29:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wKTVtOVPMKekJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDIyNVoXDTI2MDYxODE3NDIyNVowLzEtMCsGA1UEAxMk MTA2NGJlZjAtZTU3NS00MzUyLWI2YzYtY2Q2YWQ2NWUwYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkg3Vk6VuHo/IEQAAhIGlVau4Ejl8q3VR1nY Bun7+Ubh9UYu4rsXK3Is+2bZjBpc1NZ9+lePSTrOBWr8OiIO/bZSkNUMsSaYTM/J AIBVyg2RcjBVjtPAw7Rv1WKZzOWn8lcwOe+XiY+Qpi7IVP3BVZf1s5NYB7cfd2VX CGlItt+meNMhO0tJLEL7TFS7gva0jivhEeosXDj8sOS/ypY2NKg9bddHEC1AmIIy saBFDQtvUqUjAcL3A4WQUsyeGHChiAISODhyUVxfnxQNM/J05y9xq9kYYC+lJxKA dFEWi2/YE5MiH9ORh/rMyODdaeZs9jM9XpA8bI5Dmgn3xjdQHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJZCKF7DlXSpP/kUei3ITABHRdd6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjBhNmJkODItNWZlMC0z YWQ5LWIwOGUtNTU3ZjQ0NTdiYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsAB6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABP5UohT9037+MSVp0ByDdsJTMC0OwwC8ysWM5ub2MBg/l1nyxGw XY6/dRv8X0bE6HpbJGXU74UNO5+wKTkvBMWesknnKsSYwgFPAwpuUGKzbcYWUK7e lLivUhjeWycHclS6yQFOfeAPVtsck6NboD/VZPpTHoHSIe885y1ayCXwKgyneyPB y0mAzDg5Fxz4NiYKcJNeCQTiKLwOjvDH3s7UO4jCc9OMNDI9joRyB32Y3gTv+iob 6mP+JEzfmpxBohNsPcXmb6P7K/3Fg/qoY3Hdlo9Q4GfBOJLtWNIoyWHMIth3fJuj HK+xUFe5jHWYCBIrqKkobFaKievy5ee5KRw= -----END CERTIFICATE-----Generated at Thu Mar 26 14:01:39 2026 by rpki-client