$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9508267e-9471-3e1c-9d8f-6b6fce9686ec.roa File: 9508267e-9471-3e1c-9d8f-6b6fce9686ec.roa (raw, json) Hash identifier: KlwHvOWhBL+XDD9RDMB/J8Rd0Pb0QrQnXSY+PPYnsC4= Subject key identifier: 72:CA:78:26:CC:1C:3B:E9:49:C5:D6:6C:40:AA:DC:F1:5B:A3:C4:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC00FAFE043C004D54BC440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9508267e-9471-3e1c-9d8f-6b6fce9686ec.roa Signing time: Fri 20 Mar 2026 17:41:15 +0000 ROA not before: Fri 20 Mar 2026 17:41:15 +0000 ROA not after: Thu 18 Jun 2026 17:41:15 +0000 asID: 7029 IP address blocks: 2001:19b0:54::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:0f:af:e0:43:c0:04:d5:4b:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:41:15 2026 GMT Not After : Jun 18 17:41:15 2026 GMT Subject: CN=de828c6c-4c2d-4bd0-9617-a413db26bb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:e4:c3:ac:b6:05:19:28:73:4a:f5:00:2c: 16:5c:c2:ad:8f:9a:5e:b3:fb:c4:e5:ac:7e:ed:c6: e1:48:15:70:c9:37:28:57:c8:0b:b2:29:41:af:77: 73:06:5e:08:11:12:06:b5:5b:f3:cb:c7:a0:25:e8: 8d:75:f0:07:47:20:6c:a2:a5:d8:36:7e:ca:0a:6f: f9:af:9b:9f:da:65:bf:08:8f:d5:ba:a5:54:58:f3: cc:f5:a2:c2:b7:27:f9:06:83:16:20:f9:b0:63:b8: 2e:29:62:e1:71:31:60:53:82:e9:7a:0d:de:42:68: 7e:07:85:e0:62:96:af:97:16:c0:36:10:f8:08:95: a0:5c:8e:47:dd:51:7f:fe:c4:82:5c:50:01:c6:f2: da:ec:6d:67:76:44:f9:c5:e8:7a:fa:6a:06:91:28: 7b:56:d0:70:74:a1:81:68:67:de:66:1f:cb:64:d9: 3a:b0:db:35:d1:8e:89:12:ca:14:d4:0c:7c:13:0b: 92:2b:bc:30:4c:58:24:8a:47:40:c5:3f:60:be:b4: 68:b2:bf:c3:45:9a:e2:79:00:fd:d7:3c:1a:9e:65: 14:f6:df:ad:52:f1:59:2e:67:21:d4:40:14:63:2a: a2:aa:dd:10:63:72:d4:54:f3:d7:8a:94:9a:41:94: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CA:78:26:CC:1C:3B:E9:49:C5:D6:6C:40:AA:DC:F1:5B:A3:C4:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9508267e-9471-3e1c-9d8f-6b6fce9686ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:54::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a5:32:05:6b:90:e2:c9:51:7e:f7:d8:39:20:2f:f1:53:ab: 2d:50:68:49:01:66:66:94:57:db:24:1c:5c:6f:82:a7:33:ba: 6e:00:c0:a3:5a:d6:8b:ac:36:9c:aa:d3:d2:01:c4:c8:c4:f2: 59:85:4e:64:b0:a4:8c:9d:df:9d:66:4c:4b:93:69:a7:81:74: 20:e4:04:d0:c1:f1:d7:95:63:cb:70:09:7f:5c:e5:2f:4a:b7: 3b:ea:49:fa:b3:1b:35:05:14:c2:3b:cb:fa:9a:58:cd:63:af: 4a:08:d9:e9:14:74:ab:e3:dd:84:35:34:ba:48:19:36:f2:e3: 24:b1:04:a9:39:6a:0f:18:17:8a:76:cb:a0:55:d4:de:b6:50: 8b:a7:70:45:6d:1d:6a:c5:b4:5d:ce:75:16:3f:98:97:31:be: b4:aa:4b:7a:ff:1a:6d:f4:b5:ba:4a:a2:90:cd:0e:35:33:ad: 95:fc:42:eb:80:21:2f:0d:1a:51:1b:a3:38:fb:a7:64:cd:11: 15:06:f3:b9:97:02:f8:8f:41:cf:38:0c:a1:73:7d:40:cf:48: 3f:00:0e:c9:fd:2a:a7:42:bd:5a:ac:fb:db:59:01:02:84:4e: 65:3e:70:d9:b3:01:53:3d:59:c8:f3:db:ac:04:85:ad:03:b3: bd:9c:4e:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wA+v4EPABNVLxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDExNVoXDTI2MDYxODE3NDExNVowLzEtMCsGA1UEAxMk ZGU4MjhjNmMtNGMyZC00YmQwLTk2MTctYTQxM2RiMjZiYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjrkw6y2BRkoc0r1ACwWXMKtj5pes/vE5ax+ 7cbhSBVwyTcoV8gLsilBr3dzBl4IERIGtVvzy8egJeiNdfAHRyBsoqXYNn7KCm/5 r5uf2mW/CI/VuqVUWPPM9aLCtyf5BoMWIPmwY7guKWLhcTFgU4Lpeg3eQmh+B4Xg YpavlxbANhD4CJWgXI5H3VF//sSCXFABxvLa7G1ndkT5xeh6+moGkSh7VtBwdKGB aGfeZh/LZNk6sNs10Y6JEsoU1Ax8EwuSK7wwTFgkikdAxT9gvrRosr/DRZrieQD9 1zwanmUU9t+tUvFZLmch1EAUYyqiqt0QY3LUVPPXipSaQZSr2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLKeCbMHDvpScXWbECq3PFbo8TGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTUwODI2N2UtOTQ3MS0z ZTFjLTlkOGYtNmI2ZmNlOTY4NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEZsABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJOlMgVrkOLJUX732DkgL/FTqy1QaEkBZmaUV9skHFxvgqczum4A wKNa1ousNpyq09IBxMjE8lmFTmSwpIyd351mTEuTaaeBdCDkBNDB8deVY8twCX9c 5S9KtzvqSfqzGzUFFMI7y/qaWM1jr0oI2ekUdKvj3YQ1NLpIGTby4ySxBKk5ag8Y F4p2y6BV1N62UIuncEVtHWrFtF3OdRY/mJcxvrSqS3r/Gm30tbpKopDNDjUzrZX8 QuuAIS8NGlEbozj7p2TNERUG87mXAviPQc84DKFzfUDPSD8ADsn9KqdCvVqs+9tZ AQKETmU+cNmzAVM9Wcjz26wEha0Ds72cTpw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:08:29 2026 by rpki-client