$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d349dfd-4493-3c7b-8bb4-45a819a5b1b1.roa File: 5d349dfd-4493-3c7b-8bb4-45a819a5b1b1.roa (raw, json) Hash identifier: nHFOHmF1lUdhh8A9tjkxGXT5gr3G6nT4g/YxU6lBgvk= Subject key identifier: FD:46:B4:F4:C7:8C:7F:15:02:20:32:A0:03:8D:B9:3F:88:FE:A6:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC37E06BB42D66E669A6D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d349dfd-4493-3c7b-8bb4-45a819a5b1b1.roa Signing time: Fri 20 Mar 2026 17:48:10 +0000 ROA not before: Fri 20 Mar 2026 17:48:10 +0000 ROA not after: Thu 18 Jun 2026 17:48:10 +0000 asID: 7029 IP address blocks: 2001:19b0:900::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c3:7e:06:bb:42:d6:6e:66:9a:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:48:10 2026 GMT Not After : Jun 18 17:48:10 2026 GMT Subject: CN=dcb2f96e-64c4-4fb5-8b13-2374e830dcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:3a:48:d2:1f:38:52:4c:9e:21:94:ce:8c: 17:b9:5f:f0:2d:83:20:a9:72:00:31:cf:57:eb:a0: 75:b9:ed:23:7b:a7:4e:77:05:f5:f8:b0:59:3c:9d: 6d:4f:c9:14:4d:dc:75:4f:02:72:d9:96:8d:31:74: c1:54:0b:53:a8:30:5d:9d:c7:b1:c5:af:ca:4c:81: 3d:5d:b7:1e:2d:e9:e7:9f:56:b2:06:a7:49:29:16: f7:50:b9:b2:11:cd:9b:6d:9e:33:ef:d2:04:41:75: 11:1c:36:c4:4f:da:77:9b:99:b1:59:58:42:af:ed: d0:4b:84:ee:d9:e2:87:8f:5a:39:85:94:de:fc:25: 40:16:44:7d:17:8f:6c:f5:d0:79:d3:08:6f:81:0a: a7:95:84:00:36:31:a8:ad:bc:92:e5:e6:a0:20:81: e7:8f:f8:b1:95:5b:65:4d:9e:cf:d0:57:af:1e:c5: 71:7f:da:30:80:d4:a5:c2:29:51:1b:ae:bd:2b:31: e9:2e:3b:01:19:49:82:a8:86:ce:0b:4b:39:6f:ed: 5e:86:68:ed:5e:85:c6:53:67:ae:8d:84:ed:87:c0: 7c:0c:63:9a:6e:a7:be:33:9f:fd:55:e1:20:b6:80: b7:c9:ea:d3:fa:6a:c2:f0:0f:b1:b3:9e:fd:af:fe: a2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:46:B4:F4:C7:8C:7F:15:02:20:32:A0:03:8D:B9:3F:88:FE:A6:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d349dfd-4493-3c7b-8bb4-45a819a5b1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:900::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1d:2b:26:36:94:f1:7b:6b:ef:af:fb:55:9b:e4:1a:2c:09: b9:bd:95:a0:d1:79:f3:06:01:d0:ea:5a:96:d7:d8:d4:28:3f: bd:f3:26:67:42:d8:09:54:f1:06:5a:8f:56:e7:8f:3e:49:e4: 52:27:68:0d:30:e8:17:3a:f9:88:76:87:22:8b:00:23:a5:f1: 7a:4c:00:1d:88:c6:55:8d:94:39:75:01:3c:c3:b3:15:22:7f: f2:85:fc:a6:49:59:27:1f:b5:01:bc:6e:de:f9:1e:e3:b2:60: 55:ca:97:29:eb:d3:e9:99:ca:e1:d3:78:b5:3c:51:6f:5b:34: 6e:82:36:d7:ee:2d:88:49:1a:e2:84:81:0d:8f:00:ef:6b:17: 6f:25:a8:89:49:1e:72:9f:42:74:7c:ac:24:47:f3:d9:09:cc: fe:14:f2:36:d9:4f:38:38:8d:6d:59:c3:ce:d0:5f:11:a0:80: 26:cc:a0:f2:0a:8e:f7:95:db:cd:73:39:2e:ea:6a:5e:05:bb: f1:6b:83:42:d4:8f:73:1d:16:eb:a0:01:8a:24:e5:51:c3:9c: 1c:8d:d8:df:6c:1d:9d:98:53:fa:7d:bb:65:1c:ea:75:05:1a: f5:37:3b:82:94:df:5f:08:c5:64:cb:6e:e0:58:7a:3a:56:5d: 71:75:aa:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07w34Gu0LWbmaabQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDgxMFoXDTI2MDYxODE3NDgxMFowLzEtMCsGA1UEAxMk ZGNiMmY5NmUtNjRjNC00ZmI1LThiMTMtMjM3NGU4MzBkY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLo6SNIfOFJMniGUzowXuV/wLYMgqXIAMc9X 66B1ue0je6dOdwX1+LBZPJ1tT8kUTdx1TwJy2ZaNMXTBVAtTqDBdncexxa/KTIE9 XbceLennn1ayBqdJKRb3ULmyEc2bbZ4z79IEQXURHDbET9p3m5mxWVhCr+3QS4Tu 2eKHj1o5hZTe/CVAFkR9F49s9dB50whvgQqnlYQANjGorbyS5eagIIHnj/ixlVtl TZ7P0FevHsVxf9owgNSlwilRG669KzHpLjsBGUmCqIbOC0s5b+1ehmjtXoXGU2eu jYTth8B8DGOabqe+M5/9VeEgtoC3yerT+mrC8A+xs579r/6i/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP1GtPTHjH8VAiAyoAONuT+I/qY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQzNDlkZmQtNDQ5My0z YzdiLThiYjQtNDVhODE5YTViMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYdKyY2lPF7a++v+1Wb5BosCbm9laDRefMGAdDqWpbX2NQoP73z JmdC2AlU8QZaj1bnjz5J5FInaA0w6Bc6+Yh2hyKLACOl8XpMAB2IxlWNlDl1ATzD sxUif/KF/KZJWScftQG8bt75HuOyYFXKlynr0+mZyuHTeLU8UW9bNG6CNtfuLYhJ GuKEgQ2PAO9rF28lqIlJHnKfQnR8rCRH89kJzP4U8jbZTzg4jW1Zw87QXxGggCbM oPIKjveV281zOS7qal4Fu/Frg0LUj3MdFuugAYok5VHDnByN2N9sHZ2YU/p9u2Uc 6nUFGvU3O4KU318IxWTLbuBYejpWXXF1qoM= -----END CERTIFICATE-----Generated at Thu Mar 26 09:33:58 2026 by rpki-client