$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54d0a9af-4c50-3e19-a2ab-a73425c22a94.roa File: 54d0a9af-4c50-3e19-a2ab-a73425c22a94.roa (raw, json) Hash identifier: lAGt5aB5d0lJq4sqv7cjdxdEhxCOz/tuR/lXSMx2rI0= Subject key identifier: 2F:69:91:0F:E9:39:B0:8E:C6:8C:88:B9:C1:BD:66:4A:AC:44:E2:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC0542948CDAD882F923E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54d0a9af-4c50-3e19-a2ab-a73425c22a94.roa Signing time: Fri 20 Mar 2026 17:41:47 +0000 ROA not before: Fri 20 Mar 2026 17:41:47 +0000 ROA not after: Thu 18 Jun 2026 17:41:47 +0000 asID: 7029 IP address blocks: 2001:19b0:65::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:54:29:48:cd:ad:88:2f:92:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:41:47 2026 GMT Not After : Jun 18 17:41:47 2026 GMT Subject: CN=40fb5c23-386f-4da5-a0a6-a1624f5b82b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d4:bd:84:b2:6a:d7:a4:90:3b:89:31:f2:81: a3:91:b4:9c:48:0b:0c:c7:98:51:7a:41:5d:b4:4a: 77:ab:ee:0e:7b:1e:5c:b4:2b:49:74:4c:38:a9:25: da:12:6d:b7:55:6f:d8:50:3e:05:37:8f:04:c0:9d: 99:43:a5:92:ab:f5:f9:17:41:46:6e:1a:54:55:c1: 76:20:43:0e:cf:d9:b5:75:49:a4:0b:c9:5b:19:65: 9b:3a:7b:8a:44:f3:6b:1a:dd:03:99:f3:1d:99:7e: 99:df:31:ce:a6:ef:51:52:94:54:8b:f1:f3:ed:73: 0d:31:d6:44:1d:c6:f8:cb:76:b8:27:8f:ba:ad:da: d4:aa:a1:b1:52:35:c0:60:b3:b9:87:3d:f5:34:2f: f0:0e:cb:b0:0a:7f:c7:de:4c:98:4a:ed:c8:fa:ff: 7f:66:f6:5b:38:c3:2e:9c:38:36:95:25:a9:ae:3a: 4e:88:b3:4f:9a:88:54:f0:32:8f:ea:f8:7d:90:e3: 5e:a9:4c:41:a1:0f:84:ce:0d:b9:21:c7:5e:7a:a8: 89:15:3e:99:49:6e:f8:25:b4:b9:b4:e5:08:e9:ca: cc:8c:5d:d1:4b:85:17:49:e5:06:91:eb:57:1f:d1: 7d:5f:c1:d8:51:81:af:65:e1:fa:0a:d8:2d:d7:4d: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:69:91:0F:E9:39:B0:8E:C6:8C:88:B9:C1:BD:66:4A:AC:44:E2:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54d0a9af-4c50-3e19-a2ab-a73425c22a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:65::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:37:a6:53:cc:ac:bb:a8:ee:56:82:b2:cf:45:e0:6f:4f:1c: 61:de:ad:03:f5:5d:5b:3b:88:7c:a5:b0:d9:6c:d3:50:a6:9f: 1d:74:d0:0a:58:c4:7e:d5:db:36:ae:68:04:84:c3:b7:c8:3e: af:8e:bb:c5:30:cb:2d:f3:88:66:9f:ff:86:b7:24:76:0a:34: f8:1b:68:9e:d9:03:00:35:2a:7d:28:6e:3e:e9:ec:bb:7a:07: ca:62:5d:b9:ec:39:ab:b3:38:16:30:fc:f4:89:89:9e:20:8a: 65:e9:17:87:f3:83:57:aa:0e:9f:44:1e:f0:f5:c9:b8:d6:e4: b2:73:f8:f6:ec:0d:6b:a2:94:66:2c:40:e1:9d:aa:d6:ec:ac: e0:40:65:f4:7b:36:91:4a:16:e5:9a:6f:89:03:4f:8c:95:92: ce:33:02:36:60:e3:b7:51:34:26:a2:56:f0:41:f9:fa:98:fa: fd:48:a2:b3:b5:7d:75:e2:2b:b0:6e:0d:c1:19:8e:dc:09:2c: 56:cf:bb:1b:1f:e7:06:bb:84:29:a0:18:1e:f6:f7:f7:28:ff: cf:d3:aa:a5:64:1e:f9:1c:d1:59:fa:a2:24:96:5c:45:d9:16: 31:97:c8:73:40:3e:f9:2b:d3:48:6d:01:96:6f:76:47:7f:d7: 84:9f:e9:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wFQpSM2tiC+SPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDE0N1oXDTI2MDYxODE3NDE0N1owLzEtMCsGA1UEAxMk NDBmYjVjMjMtMzg2Zi00ZGE1LWEwYTYtYTE2MjRmNWI4MmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtS9hLJq16SQO4kx8oGjkbScSAsMx5hRekFd tEp3q+4Oex5ctCtJdEw4qSXaEm23VW/YUD4FN48EwJ2ZQ6WSq/X5F0FGbhpUVcF2 IEMOz9m1dUmkC8lbGWWbOnuKRPNrGt0DmfMdmX6Z3zHOpu9RUpRUi/Hz7XMNMdZE Hcb4y3a4J4+6rdrUqqGxUjXAYLO5hz31NC/wDsuwCn/H3kyYSu3I+v9/ZvZbOMMu nDg2lSWprjpOiLNPmohU8DKP6vh9kONeqUxBoQ+Ezg25IcdeeqiJFT6ZSW74JbS5 tOUI6crMjF3RS4UXSeUGketXH9F9X8HYUYGvZeH6Ctgt100WLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC9pkQ/pObCOxoyIucG9ZkqsROJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTRkMGE5YWYtNGM1MC0z ZTE5LWEyYWItYTczNDI1YzIyYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACM3plPMrLuo7laCss9F4G9PHGHerQP1XVs7iHylsNls01Cmnx10 0ApYxH7V2zauaASEw7fIPq+Ou8Uwyy3ziGaf/4a3JHYKNPgbaJ7ZAwA1Kn0obj7p 7Lt6B8piXbnsOauzOBYw/PSJiZ4gimXpF4fzg1eqDp9EHvD1ybjW5LJz+PbsDWui lGYsQOGdqtbsrOBAZfR7NpFKFuWab4kDT4yVks4zAjZg47dRNCaiVvBB+fqY+v1I orO1fXXiK7BuDcEZjtwJLFbPuxsf5wa7hCmgGB729/co/8/TqqVkHvkc0Vn6oiSW XEXZFjGXyHNAPvkr00htAZZvdkd/14Sf6Yc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:47:47 2026 by rpki-client