$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5adfcc89-8286-32fb-8bab-78bcf0995603.roa File: 5adfcc89-8286-32fb-8bab-78bcf0995603.roa (raw, json) Hash identifier: apRoqRQMFTjeE9IAN6oo5teLEfcvWBDw6vfYfkAfAVU= Subject key identifier: D4:B1:D5:72:9A:D9:71:F2:55:3C:55:63:E3:B3:C9:45:4E:C7:89:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC1568A476B2A99629DA980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5adfcc89-8286-32fb-8bab-78bcf0995603.roa Signing time: Fri 20 Mar 2026 17:43:49 +0000 ROA not before: Fri 20 Mar 2026 17:43:49 +0000 ROA not after: Thu 18 Jun 2026 17:43:49 +0000 asID: 7029 IP address blocks: 2001:19b0:37c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c1:56:8a:47:6b:2a:99:62:9d:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:43:49 2026 GMT Not After : Jun 18 17:43:49 2026 GMT Subject: CN=faf980da-eed1-4a22-90cb-0261a9d9be7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:78:ed:5f:1c:a7:d5:5a:58:39:61:04:a3: 05:09:a8:51:6a:f7:d6:0c:b9:51:76:e8:fe:d8:2d: 51:72:ba:d8:58:c5:29:2d:93:0b:7e:07:ad:63:0d: 02:fa:74:db:be:a9:b0:70:a1:25:33:9c:21:ac:0f: 48:3d:4b:31:a3:d4:75:9e:1c:a4:ba:31:17:65:e7: bb:6b:bd:99:00:63:88:ed:ff:b9:b0:8d:4e:f3:1c: d9:51:53:bf:85:be:d7:17:45:74:f6:e0:a7:6d:bd: 09:63:6e:af:ac:8e:8d:97:39:87:c4:ff:06:21:ae: f3:18:1e:ab:ca:8f:59:73:f5:f4:5c:93:84:3c:62: a7:ca:0a:5f:0d:06:f8:7a:b3:59:27:41:44:71:b6: 18:cd:fd:57:f0:f2:d8:f2:e8:0e:fa:08:a6:45:ad: 2d:5d:c6:43:01:57:54:63:a7:f8:7f:7c:e7:b2:ea: 2d:75:d7:c5:f8:dd:2a:88:c3:38:21:e6:51:77:80: a7:de:db:1a:f8:55:1f:dd:9e:cf:7a:17:b5:18:da: d3:5e:11:61:a9:12:b0:67:6a:2c:85:b5:ca:44:08: 00:dc:5b:87:0a:71:aa:31:c8:9d:31:ca:be:50:9c: 54:a0:f5:a3:da:d9:22:6b:d4:ef:9c:45:3f:9b:64: 9e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B1:D5:72:9A:D9:71:F2:55:3C:55:63:E3:B3:C9:45:4E:C7:89:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5adfcc89-8286-32fb-8bab-78bcf0995603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:37c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5b:73:64:9e:1d:a6:8a:1a:8c:99:40:09:77:1f:97:58:d9: be:b3:ab:47:3f:cd:f9:c6:87:17:ea:32:64:a5:0f:c7:63:d5: 6b:f2:7d:8b:c6:4d:f1:81:99:bb:1d:2e:b0:ff:4f:7c:89:be: b8:82:2f:4e:b5:e4:5c:7a:7f:3b:53:64:74:fa:2c:19:ec:ba: 46:ab:62:c8:3c:3c:e7:97:27:98:88:58:26:e4:23:13:07:60: c1:5c:1d:a3:d5:1c:ac:c8:4f:de:c4:4f:19:82:7f:65:c4:61: 9a:c5:23:08:04:70:fd:67:ae:5b:35:20:31:fe:b2:96:e9:d6: e2:6e:2c:4a:01:82:84:45:10:8a:c4:8a:bf:0a:f4:82:4b:86: 90:bc:4e:6d:83:42:66:b8:99:70:98:6d:d8:41:c6:d0:8d:1a: ec:b0:6f:be:2a:e7:ae:8b:02:25:96:12:e1:33:1f:3c:48:7d: b0:3a:f4:7c:39:69:c6:37:9d:98:dd:c0:61:3a:ad:ef:b8:c4: 95:55:8a:57:aa:93:c8:fd:f8:33:fe:06:2f:f2:8f:f3:d9:3a: db:a3:cc:27:6b:40:d6:18:bb:64:ac:cf:c3:f0:d5:21:11:9f: b8:d2:85:0a:20:4d:d2:fa:9c:f3:21:bc:8d:80:52:c0:75:10: e6:66:31:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wVaKR2sqmWKdqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDM0OVoXDTI2MDYxODE3NDM0OVowLzEtMCsGA1UEAxMk ZmFmOTgwZGEtZWVkMS00YTIyLTkwY2ItMDI2MWE5ZDliZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdJ47V8cp9VaWDlhBKMFCahRavfWDLlRduj+ 2C1RcrrYWMUpLZMLfgetYw0C+nTbvqmwcKElM5whrA9IPUsxo9R1nhykujEXZee7 a72ZAGOI7f+5sI1O8xzZUVO/hb7XF0V09uCnbb0JY26vrI6NlzmHxP8GIa7zGB6r yo9Zc/X0XJOEPGKnygpfDQb4erNZJ0FEcbYYzf1X8PLY8ugO+gimRa0tXcZDAVdU Y6f4f3znsuotddfF+N0qiMM4IeZRd4Cn3tsa+FUf3Z7Pehe1GNrTXhFhqRKwZ2os hbXKRAgA3FuHCnGqMcidMcq+UJxUoPWj2tkia9TvnEU/m2Se1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNSx1XKa2XHyVTxVY+OzyUVOx4kWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWFkZmNjODktODI4Ni0z MmZiLThiYWItNzhiY2YwOTk1NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEZsAN8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABNbc2SeHaaKGoyZQAl3H5dY2b6zq0c/zfnGhxfqMmSlD8dj1Wvy fYvGTfGBmbsdLrD/T3yJvriCL0615Fx6fztTZHT6LBnsukarYsg8POeXJ5iIWCbk IxMHYMFcHaPVHKzIT97ETxmCf2XEYZrFIwgEcP1nrls1IDH+spbp1uJuLEoBgoRF EIrEir8K9IJLhpC8Tm2DQma4mXCYbdhBxtCNGuywb74q566LAiWWEuEzHzxIfbA6 9Hw5acY3nZjdwGE6re+4xJVVileqk8j9+DP+Bi/yj/PZOtujzCdrQNYYu2Ssz8Pw 1SERn7jShQogTdL6nPMhvI2AUsB1EOZmMX8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:38:46 2026 by rpki-client