$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/720fc78a-a417-3d74-9f28-934b9c7bbc32.roa File: 720fc78a-a417-3d74-9f28-934b9c7bbc32.roa (raw, json) Hash identifier: 7Modl34EXc8PB0cntZlUSrlWgqio/vDqZD53yCrX1pM= Subject key identifier: 48:7F:9F:BB:B0:98:F6:99:4A:B3:59:58:1F:C8:E0:5F:93:B2:20:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC32DDA457ABE26D7EB4F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/720fc78a-a417-3d74-9f28-934b9c7bbc32.roa Signing time: Fri 20 Mar 2026 17:47:32 +0000 ROA not before: Fri 20 Mar 2026 17:47:32 +0000 ROA not after: Thu 18 Jun 2026 17:47:32 +0000 asID: 7029 IP address blocks: 2001:19b0:680::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c3:2d:da:45:7a:be:26:d7:eb:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:47:32 2026 GMT Not After : Jun 18 17:47:32 2026 GMT Subject: CN=88911b64-09c9-4f58-8873-bc3e2d02c58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:89:c9:de:22:c3:71:5a:4f:c9:00:b5:7f:63: 6e:98:83:52:8f:50:dd:aa:eb:1d:8b:14:dd:4c:5a: 7e:b9:3d:72:ee:da:47:a2:53:bb:4c:5c:42:01:b4: 67:72:d0:37:72:46:ca:7e:6c:9c:65:13:ef:c8:a7: 14:2b:11:66:66:1f:c5:f3:05:77:5d:8c:f0:16:a0: 40:e7:53:f6:16:06:c4:2f:7b:d2:b1:e0:06:66:4c: 84:b3:19:a0:ff:fa:fb:68:69:4f:10:0a:18:c6:26: 80:f5:4e:26:2a:83:0f:74:3c:99:83:ac:fa:5b:82: 6a:2d:f0:ca:e9:01:cb:23:51:ac:fe:3e:b2:bf:26: 4b:70:b6:fb:e8:af:96:ae:aa:52:13:4e:87:c2:03: e7:fe:25:b4:87:2b:e0:96:a5:4f:bb:45:49:2d:b1: 76:5c:25:35:e9:f3:25:c8:11:93:12:c5:91:2d:c6: 05:9c:17:cd:70:aa:e5:ac:7c:34:7f:8d:ae:d5:c2: cf:98:47:ef:04:b3:5b:f5:fd:1a:e4:a8:ba:e7:77: 86:6a:60:09:08:2d:c0:90:3f:fe:fe:eb:bd:65:81: fd:80:75:07:8c:f4:aa:6d:32:9e:2b:a7:5a:7e:32: a3:0f:bd:0a:4d:f9:44:17:b5:90:44:1d:ba:3f:74: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7F:9F:BB:B0:98:F6:99:4A:B3:59:58:1F:C8:E0:5F:93:B2:20:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/720fc78a-a417-3d74-9f28-934b9c7bbc32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:680::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b0:b2:79:ce:ec:a5:02:dd:6f:d4:3a:fa:85:b5:3b:c4:9b: c5:77:ff:82:a9:af:d4:2e:21:44:81:f9:20:45:88:cc:47:6d: 8d:6c:e9:15:50:4e:c6:76:17:6f:a2:ea:1d:6e:7b:43:e1:cc: 7a:10:e2:20:46:48:f9:aa:37:ca:30:b5:6e:1e:0f:eb:37:ad: 9f:28:51:2d:20:f7:31:d2:1d:84:06:03:ff:05:33:87:63:01: 06:23:eb:91:1a:ba:45:e5:a5:3c:f1:07:a1:90:5a:2b:80:96: 88:4f:52:61:b5:d0:6d:8f:07:b5:b1:13:1e:6f:45:d8:28:04: fe:75:fb:a7:f6:0e:71:63:01:d1:0f:09:af:7b:38:34:27:33: 17:a7:c2:1d:cf:26:c3:cf:c3:ed:1d:31:85:10:7b:cb:ed:0e: f8:61:0e:13:0a:ae:a2:94:25:74:e6:62:cf:23:e3:db:66:43: e4:d4:8a:74:15:de:59:7e:c0:42:9a:79:fd:ce:89:b1:30:27: c0:f4:a5:87:d3:9a:8e:fb:cd:78:9f:bb:27:c1:eb:31:33:e5: dc:f2:27:3b:4c:11:a9:f8:a4:70:f6:04:df:56:ee:88:61:20: 2d:54:0f:99:fa:a1:68:4f:18:0c:87:41:74:e8:1b:ee:3c:68: 1e:ca:40:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wy3aRXq+JtfrT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDczMloXDTI2MDYxODE3NDczMlowLzEtMCsGA1UEAxMk ODg5MTFiNjQtMDljOS00ZjU4LTg4NzMtYmMzZTJkMDJjNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiInJ3iLDcVpPyQC1f2NumINSj1DdqusdixTd TFp+uT1y7tpHolO7TFxCAbRnctA3ckbKfmycZRPvyKcUKxFmZh/F8wV3XYzwFqBA 51P2FgbEL3vSseAGZkyEsxmg//r7aGlPEAoYxiaA9U4mKoMPdDyZg6z6W4JqLfDK 6QHLI1Gs/j6yvyZLcLb76K+WrqpSE06HwgPn/iW0hyvglqVPu0VJLbF2XCU16fMl yBGTEsWRLcYFnBfNcKrlrHw0f42u1cLPmEfvBLNb9f0a5Ki653eGamAJCC3AkD/+ /uu9ZYH9gHUHjPSqbTKeK6dafjKjD70KTflEF7WQRB26P3SLoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEh/n7uwmPaZSrNZWB/I4F+TsiDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzIwZmM3OGEtYTQxNy0z ZDc0LTlmMjgtOTM0YjljN2JiYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAawsnnO7KUC3W/UOvqFtTvEm8V3/4Kpr9QuIUSB+SBFiMxHbY1s 6RVQTsZ2F2+i6h1ue0PhzHoQ4iBGSPmqN8owtW4eD+s3rZ8oUS0g9zHSHYQGA/8F M4djAQYj65EaukXlpTzxB6GQWiuAlohPUmG10G2PB7WxEx5vRdgoBP51+6f2DnFj AdEPCa97ODQnMxenwh3PJsPPw+0dMYUQe8vtDvhhDhMKrqKUJXTmYs8j49tmQ+TU inQV3ll+wEKaef3OibEwJ8D0pYfTmo77zXifuyfB6zEz5dzyJztMEan4pHD2BN9W 7ohhIC1UD5n6oWhPGAyHQXToG+48aB7KQIo= -----END CERTIFICATE-----Generated at Thu Mar 26 08:22:45 2026 by rpki-client