$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ed2b808-ee93-3f4d-a148-e1f643f57577.roa File: 3ed2b808-ee93-3f4d-a148-e1f643f57577.roa (raw, json) Hash identifier: vOjUQCYCzNUgVkKB9YxdmlRyHQkL1/GtjDrPxj63AfU= Subject key identifier: 41:55:18:FE:E1:6F:3E:AD:0F:4F:41:8E:06:31:5C:9A:F7:BA:42:0C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC0EC775C776626BBECE500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ed2b808-ee93-3f4d-a148-e1f643f57577.roa Signing time: Fri 20 Mar 2026 17:42:59 +0000 ROA not before: Fri 20 Mar 2026 17:42:59 +0000 ROA not after: Thu 18 Jun 2026 17:42:59 +0000 asID: 7029 IP address blocks: 2001:19b0:358::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:ec:77:5c:77:66:26:bb:ec:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:42:59 2026 GMT Not After : Jun 18 17:42:59 2026 GMT Subject: CN=3e96e4e0-7b88-4076-a9db-b1c71c8021eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:68:84:aa:90:aa:4a:6d:57:eb:54:55:b3: ca:28:fe:e5:17:a5:c3:9d:1e:2f:f2:c4:e2:b0:4e: b5:ee:2b:63:1a:db:bc:69:d0:d3:6a:5c:1c:70:33: 1d:66:65:28:26:85:10:92:d2:96:74:a3:2a:3d:a2: c6:58:84:52:c2:7c:0f:38:3f:f2:2a:f6:d7:ac:3d: 52:9e:da:62:8e:a4:ea:36:1f:b6:a5:47:dd:fd:4d: 34:e2:83:aa:c2:f9:05:e4:38:5d:dd:d1:35:29:87: d4:41:11:88:91:f1:b9:ef:53:f5:0d:88:cc:63:bf: 36:85:af:18:81:c2:fa:d2:36:b0:1f:c3:1d:a4:f1: fa:f1:6f:d5:a5:d1:f1:ce:2b:f1:52:50:04:07:27: d5:43:26:d5:2e:d7:c1:ed:1b:0d:22:52:66:9a:3a: 3b:7a:15:53:58:bb:1e:02:1f:6a:b5:d0:8f:8e:f1: 70:5d:9e:58:ac:3a:08:67:f5:7d:9d:7a:f4:87:10: 10:de:b2:f0:70:6e:94:85:11:3b:13:ff:7b:26:7f: e1:5e:72:d5:25:6f:92:3a:c3:b2:7c:6d:77:64:b0: e7:95:09:6c:90:37:06:e7:37:29:c1:b8:0f:5b:77: 29:0c:8d:37:79:8a:ac:0d:92:b3:77:9b:e2:f5:4a: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:55:18:FE:E1:6F:3E:AD:0F:4F:41:8E:06:31:5C:9A:F7:BA:42:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ed2b808-ee93-3f4d-a148-e1f643f57577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:358::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f6:df:23:0f:3a:be:36:15:02:26:e4:f8:12:78:fe:b2:af: 5b:f2:49:1d:45:ca:08:1e:2a:39:8d:50:cb:0b:e5:aa:f7:6e: 03:22:be:fb:cb:bd:e8:02:c8:43:25:ee:aa:ba:19:0d:fe:52: 1e:08:09:14:5c:48:54:5b:c0:c2:38:8a:90:30:75:5b:7c:ce: ac:8f:6b:2a:70:3f:c7:92:57:d1:cf:69:98:0d:50:5d:a8:bf: 9f:27:d1:d2:af:8a:2e:98:1a:11:09:2f:a2:67:66:79:4d:4f: d2:a9:ac:5e:8c:af:3a:50:f1:ef:b2:1a:c7:e0:ce:6d:42:76: 5a:96:0b:6b:e1:68:ba:a4:3d:c7:d1:74:48:37:55:d8:6c:5f: 0d:fd:29:b8:5a:a9:25:6b:cd:e9:db:22:0e:aa:f3:ea:41:a3: a2:1e:35:e8:0f:35:e3:d9:bb:b5:47:6c:38:74:b4:07:de:5e: de:51:02:8e:f2:c2:7c:4b:12:e8:97:6d:bd:bc:c6:35:ac:66: d4:64:9b:99:0b:61:4b:a9:48:1b:8f:a7:ee:af:4e:ca:2a:83: c5:7b:34:7d:85:35:ad:17:f6:9d:d3:c1:43:ac:c8:70:7f:0b: f7:f8:16:2d:c3:0a:1e:11:9d:9a:b7:00:45:fb:e5:b3:bd:b7: 91:9e:78:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wOx3XHdmJrvs5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDI1OVoXDTI2MDYxODE3NDI1OVowLzEtMCsGA1UEAxMk M2U5NmU0ZTAtN2I4OC00MDc2LWE5ZGItYjFjNzFjODAyMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWBohKqQqkptV+tUVbPKKP7lF6XDnR4v8sTi sE617itjGtu8adDTalwccDMdZmUoJoUQktKWdKMqPaLGWIRSwnwPOD/yKvbXrD1S ntpijqTqNh+2pUfd/U004oOqwvkF5Dhd3dE1KYfUQRGIkfG571P1DYjMY782ha8Y gcL60jawH8MdpPH68W/VpdHxzivxUlAEByfVQybVLtfB7RsNIlJmmjo7ehVTWLse Ah9qtdCPjvFwXZ5YrDoIZ/V9nXr0hxAQ3rLwcG6UhRE7E/97Jn/hXnLVJW+SOsOy fG13ZLDnlQlskDcG5zcpwbgPW3cpDI03eYqsDZKzd5vi9UpyXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEFVGP7hbz6tD09BjgYxXJr3ukIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2VkMmI4MDgtZWU5My0z ZjRkLWExNDgtZTFmNjQzZjU3NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEZsANY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACL23yMPOr42FQIm5PgSeP6yr1vySR1FyggeKjmNUMsL5ar3bgMi vvvLvegCyEMl7qq6GQ3+Uh4ICRRcSFRbwMI4ipAwdVt8zqyPaypwP8eSV9HPaZgN UF2ov58n0dKvii6YGhEJL6JnZnlNT9KprF6MrzpQ8e+yGsfgzm1CdlqWC2vhaLqk PcfRdEg3VdhsXw39KbhaqSVrzenbIg6q8+pBo6IeNegPNePZu7VHbDh0tAfeXt5R Ao7ywnxLEuiXbb28xjWsZtRkm5kLYUupSBuPp+6vTsoqg8V7NH2FNa0X9p3TwUOs yHB/C/f4Fi3DCh4RnZq3AEX75bO9t5GeeNw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:17:43 2026 by rpki-client