$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa File: aa48910c-d6f0-3588-8325-d2afc5dab4be.roa (raw, json) Hash identifier: Ho7TWgDXxoEfSUELoDkZG5JkaI1+kUjru+uS8ospp6w= Subject key identifier: CF:E4:48:B5:23:08:B5:38:00:5A:40:03:01:2E:3F:94:6D:88:B9:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC35CC36EF28EB3FF32BE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa Signing time: Fri 20 Mar 2026 17:47:54 +0000 ROA not before: Fri 20 Mar 2026 17:47:54 +0000 ROA not after: Thu 18 Jun 2026 17:47:54 +0000 asID: 7029 IP address blocks: 2001:19b0:800::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c3:5c:c3:6e:f2:8e:b3:ff:32:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:47:54 2026 GMT Not After : Jun 18 17:47:54 2026 GMT Subject: CN=fbd5ed58-2b86-46d7-a5fd-9aa8a384e08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:af:f3:72:8c:f1:03:25:f3:c1:0b:48:5b:f3: 00:f4:85:19:1a:f9:3d:54:45:74:3f:e8:20:42:e4: 42:d5:51:1c:c0:8e:af:62:fe:25:ea:da:b5:52:7a: b7:4b:23:6c:6f:29:26:5e:05:9b:5c:f9:1a:d2:0f: 49:a4:3d:ca:f1:b1:c5:b8:b9:fc:83:57:e2:e0:e0: fc:0d:e9:40:0a:06:d1:1a:d1:a1:da:df:62:27:69: a5:af:3f:73:57:a9:9b:59:84:c1:fb:db:a9:40:ec: 81:6d:7d:65:4b:4d:b5:58:b2:c4:eb:56:47:6c:71: 8a:b9:f3:eb:a9:54:8e:4e:cf:a0:c4:90:52:08:c5: ad:db:cb:0c:82:59:b8:b6:de:e9:a6:5f:05:c9:ff: 64:db:ba:01:f1:2e:ab:df:62:96:40:eb:24:43:51: e6:65:82:57:6f:a2:84:55:80:f6:f2:9a:a6:f3:d7: c9:1f:a9:f7:c3:4e:76:20:fa:fe:f6:4f:2b:21:db: ee:9f:af:42:92:87:a7:9d:79:2b:01:6c:61:dd:da: ce:bc:6f:63:57:e3:22:1c:28:38:49:ea:6d:4f:42: d3:6a:ec:a1:eb:de:8c:37:9e:9d:db:6d:18:70:93: f4:64:4d:ac:ce:03:83:a0:0b:72:5c:9a:31:68:1e: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E4:48:B5:23:08:B5:38:00:5A:40:03:01:2E:3F:94:6D:88:B9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:800::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:95:1e:df:34:5c:2b:e7:a2:25:ac:82:2f:22:73:d7:47:95: d4:35:af:37:bc:4d:e3:f9:e0:47:f0:d3:28:f8:1f:34:34:36: dd:e5:93:1e:9e:25:ab:94:6f:cf:eb:e9:5e:1e:87:bf:4b:26: 47:7e:1f:1e:b1:a2:ca:32:a9:6e:6f:1e:3d:db:5c:a0:f6:50: 13:49:e4:5a:6f:8a:c5:43:ed:33:7f:76:e4:68:33:a1:30:b4: fd:9f:c0:27:84:09:60:d8:71:41:28:d7:2f:aa:81:69:10:6b: 44:7e:d0:fa:74:38:7e:c7:d8:f3:04:b6:8a:f4:05:90:47:33: e5:39:58:59:d7:9a:6d:d9:60:38:ab:f1:9f:3a:49:0e:41:05: 7f:e8:fe:d9:46:43:e0:3c:91:6a:b0:58:dd:c7:d6:83:6a:e3: 02:64:7b:0d:75:56:99:39:98:9d:e0:43:cd:fa:8c:f2:a9:f4: 30:1d:f2:e7:cc:29:9e:87:eb:fd:dd:99:77:cf:7f:5b:34:70: 51:32:67:39:ed:2d:67:43:11:25:b9:ec:27:c1:d8:b6:17:3c: 1f:27:a1:c1:19:00:d8:06:27:d9:e7:2b:0e:9d:9d:33:ee:86: 43:4d:d0:54:53:be:f1:ae:0e:2d:c7:f1:12:e6:a7:6d:20:76: d8:55:9c:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07w1zDbvKOs/8yvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDc1NFoXDTI2MDYxODE3NDc1NFowLzEtMCsGA1UEAxMk ZmJkNWVkNTgtMmI4Ni00NmQ3LWE1ZmQtOWFhOGEzODRlMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6/zcozxAyXzwQtIW/MA9IUZGvk9VEV0P+gg QuRC1VEcwI6vYv4l6tq1Unq3SyNsbykmXgWbXPka0g9JpD3K8bHFuLn8g1fi4OD8 DelACgbRGtGh2t9iJ2mlrz9zV6mbWYTB+9upQOyBbX1lS021WLLE61ZHbHGKufPr qVSOTs+gxJBSCMWt28sMglm4tt7ppl8Fyf9k27oB8S6r32KWQOskQ1HmZYJXb6KE VYD28pqm89fJH6n3w052IPr+9k8rIdvun69CkoennXkrAWxh3drOvG9jV+MiHCg4 SeptT0LTauyh696MN56d220YcJP0ZE2szgODoAtyXJoxaB4YZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM/kSLUjCLU4AFpAAwEuP5RtiLmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE0ODkxMGMtZDZmMC0z NTg4LTgzMjUtZDJhZmM1ZGFiNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOVHt80XCvnoiWsgi8ic9dHldQ1rze8TeP54Efw0yj4HzQ0Nt3l kx6eJauUb8/r6V4eh79LJkd+Hx6xosoyqW5vHj3bXKD2UBNJ5FpvisVD7TN/duRo M6EwtP2fwCeECWDYcUEo1y+qgWkQa0R+0Pp0OH7H2PMEtor0BZBHM+U5WFnXmm3Z YDir8Z86SQ5BBX/o/tlGQ+A8kWqwWN3H1oNq4wJkew11Vpk5mJ3gQ836jPKp9DAd 8ufMKZ6H6/3dmXfPf1s0cFEyZzntLWdDESW57CfB2LYXPB8nocEZANgGJ9nnKw6d nTPuhkNN0FRTvvGuDi3H8RLmp20gdthVnNs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:38:38 2026 by rpki-client