$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a2dbf75-ac63-38c3-a5c3-dab25af10c73.roa File: 8a2dbf75-ac63-38c3-a5c3-dab25af10c73.roa (raw, json) Hash identifier: ipQjP8E+ElSuSXEDdW2WmXMDojbouTvxHtbjfd652qQ= Subject key identifier: 7D:7C:0D:80:AE:34:C3:EE:11:34:97:C6:7A:D6:EA:98:7B:95:3A:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC000CBD05E396A8B4C15E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a2dbf75-ac63-38c3-a5c3-dab25af10c73.roa Signing time: Fri 20 Mar 2026 17:41:08 +0000 ROA not before: Fri 20 Mar 2026 17:41:08 +0000 ROA not after: Thu 18 Jun 2026 17:41:08 +0000 asID: 7029 IP address blocks: 2001:19b0:4c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:00:cb:d0:5e:39:6a:8b:4c:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:41:08 2026 GMT Not After : Jun 18 17:41:08 2026 GMT Subject: CN=db80a2e6-5da4-4232-a5da-26265168bd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:55:99:f5:c9:48:49:83:5b:64:6c:95:f5: f0:ce:92:2a:b5:4a:5a:05:2a:02:1a:cf:73:c4:10: 4a:16:f5:e5:77:d3:b9:ea:27:df:e8:54:d7:66:d0: 56:8a:6a:0f:76:4b:3a:7f:62:b4:b8:8a:f2:1a:81: d7:21:f9:59:61:6c:3b:73:c9:85:b4:cb:a2:b7:f6: 15:76:b6:9b:23:59:a3:e0:84:c3:8a:85:a3:71:9a: d3:68:65:0e:ab:4d:2d:d5:96:a6:1e:c0:cb:93:35: 97:0a:ff:24:44:c9:9e:d8:e1:9d:9f:29:eb:91:39: d2:f5:31:43:7d:8d:49:c2:aa:11:92:0c:2c:2c:57: fa:8d:b8:d9:62:ff:26:a3:24:4e:64:4e:a9:9f:46: 1c:cb:68:d9:32:da:d0:93:e2:89:4d:55:59:51:21: 4e:cf:be:92:5a:31:68:37:17:15:1e:27:3f:f8:0c: ed:ff:6a:0d:5e:fa:10:ef:e0:3b:9c:69:77:57:a7: 70:ca:3f:a2:10:fd:63:a8:c5:9f:55:f9:4d:66:bf: e5:ac:bf:cc:91:f9:d4:4e:a6:51:23:5c:22:e2:60: 2f:6a:79:90:89:42:49:d5:df:bc:e6:dc:7b:84:90: 45:b2:63:86:04:46:4b:ed:3d:d3:81:22:dc:72:56: 37:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7C:0D:80:AE:34:C3:EE:11:34:97:C6:7A:D6:EA:98:7B:95:3A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a2dbf75-ac63-38c3-a5c3-dab25af10c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:4c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:55:30:6a:d0:89:7d:72:41:33:e7:3f:f8:28:f5:47:8a:36: 6d:b4:8a:b0:3c:04:b2:c2:14:eb:7f:cc:e2:15:4e:ef:66:a9: f0:d9:3c:f8:0b:9d:1c:42:54:cf:d9:ee:2d:2e:31:e2:f6:4c: e7:a2:15:e6:3b:62:39:39:14:33:65:60:93:18:bf:78:f4:c3: b5:4b:43:47:7e:6c:e2:38:4e:9f:26:05:06:9e:52:9a:52:8c: c0:42:64:62:fd:51:c6:79:12:39:8d:e7:4e:8d:16:38:4c:6e: 7f:10:c1:bb:13:1d:be:e1:9d:35:29:bb:65:4d:02:2a:68:5a: 1b:e3:2e:cb:e7:d5:f2:28:5d:56:91:36:e8:38:b0:0d:47:f7: 6f:4f:d6:ae:e2:56:1d:59:96:9d:7a:a3:24:d1:af:f6:9b:79: 29:84:ca:58:91:a4:2c:c1:4c:d3:61:51:1e:07:10:a7:ad:19: 75:03:51:c9:5b:e0:60:07:4c:6e:3e:1d:03:a3:86:a9:df:b3: b0:1c:19:e5:e9:54:02:eb:aa:a6:a1:26:2f:b9:67:91:b4:e9: 13:e0:f2:52:ec:fc:af:bf:50:e0:01:00:90:df:fd:7c:ed:bc: e7:f2:c6:05:ac:82:21:2d:af:a8:03:f2:fc:59:d8:6a:90:8d: 31:36:ea:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wADL0F45aotMFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDEwOFoXDTI2MDYxODE3NDEwOFowLzEtMCsGA1UEAxMk ZGI4MGEyZTYtNWRhNC00MjMyLWE1ZGEtMjYyNjUxNjhiZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYpVmfXJSEmDW2RslfXwzpIqtUpaBSoCGs9z xBBKFvXld9O56iff6FTXZtBWimoPdks6f2K0uIryGoHXIflZYWw7c8mFtMuit/YV drabI1mj4ITDioWjcZrTaGUOq00t1ZamHsDLkzWXCv8kRMme2OGdnynrkTnS9TFD fY1JwqoRkgwsLFf6jbjZYv8moyROZE6pn0Ycy2jZMtrQk+KJTVVZUSFOz76SWjFo NxcVHic/+Azt/2oNXvoQ7+A7nGl3V6dwyj+iEP1jqMWfVflNZr/lrL/MkfnUTqZR I1wi4mAvanmQiUJJ1d+85tx7hJBFsmOGBEZL7T3TgSLcclY3+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH18DYCuNMPuETSXxnrW6ph7lToIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGEyZGJmNzUtYWM2My0z OGMzLWE1YzMtZGFiMjVhZjEwYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEZsABM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADdVMGrQiX1yQTPnP/go9UeKNm20irA8BLLCFOt/zOIVTu9mqfDZ PPgLnRxCVM/Z7i0uMeL2TOeiFeY7Yjk5FDNlYJMYv3j0w7VLQ0d+bOI4Tp8mBQae UppSjMBCZGL9UcZ5EjmN506NFjhMbn8QwbsTHb7hnTUpu2VNAipoWhvjLsvn1fIo XVaRNug4sA1H929P1q7iVh1Zlp16oyTRr/abeSmEyliRpCzBTNNhUR4HEKetGXUD Uclb4GAHTG4+HQOjhqnfs7AcGeXpVALrqqahJi+5Z5G06RPg8lLs/K+/UOABAJDf /XztvOfyxgWsgiEtr6gD8vxZ2GqQjTE26sQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:42:29 2026 by rpki-client