$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9ec5341-f46a-32de-ace9-258547179bb6.roa File: b9ec5341-f46a-32de-ace9-258547179bb6.roa (raw, json) Hash identifier: gCDR6qgrp0P3KXh13UGbU+d/wWa6IuSZ7jK7XgPF1WA= Subject key identifier: 53:B3:71:56:93:C5:66:29:F4:D6:07:83:4F:52:04:7C:EF:EF:71:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F612D69D77876590925E86978 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9ec5341-f46a-32de-ace9-258547179bb6.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 2001:19b0:79::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:69:d7:78:76:59:09:25:e8:69:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=b35ef586-677a-4aa2-89cd-2b99793d8abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:28:a8:e5:08:79:69:92:f5:c9:3a:ed:81:7a: 3c:87:7d:27:94:7c:9a:42:65:a0:95:c7:7c:44:b2: b0:8d:d5:f0:24:1a:58:a1:09:55:3b:6c:c5:b3:01: 50:67:ec:25:b2:3d:c6:06:67:2e:33:11:d5:b6:22: 9d:c2:fb:6d:e9:b0:79:47:f4:6d:a0:e7:a6:f6:60: 43:97:0c:12:5b:79:40:0e:40:36:96:70:09:d5:b4: 1c:f0:f5:e6:9e:43:06:7b:c6:e1:58:7a:7e:82:93: fb:06:63:ad:e4:f6:9a:23:04:1d:a0:84:4e:36:03: e7:37:91:62:d8:bc:c3:04:e8:62:e9:9a:7a:49:64: 8d:ae:09:48:8d:be:95:3b:46:1a:8e:80:ee:a7:9d: e0:d0:7c:46:11:f4:8c:91:67:50:78:b1:f9:3c:4c: e2:36:14:3b:46:08:60:42:c1:04:b7:99:c9:88:bb: e8:64:2e:63:f4:31:77:7a:10:3a:03:70:d5:3e:37: 70:45:27:5e:40:26:27:a8:ad:09:4e:c1:b6:26:9e: 14:65:89:05:19:55:73:08:c8:38:8c:c4:53:d0:35: ae:83:95:23:e2:2a:ae:96:8b:56:57:3e:ef:0c:a9: 60:e8:ce:45:8b:81:52:c6:8f:81:27:fe:75:2f:f8: 36:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B3:71:56:93:C5:66:29:F4:D6:07:83:4F:52:04:7C:EF:EF:71:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9ec5341-f46a-32de-ace9-258547179bb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:79::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:93:55:94:c2:68:53:09:b1:0c:a1:58:46:a4:db:6b:58:a5: 4a:8f:b8:4e:e4:4a:b9:28:9b:39:9e:04:a0:fd:11:77:0a:28: c6:7a:c0:68:cf:cb:cc:41:99:89:ce:2d:ed:20:ec:ff:e3:be: 2b:df:c2:5b:8d:a5:93:18:5f:c3:af:bf:52:fa:30:b9:49:54: 4f:ae:c5:9f:07:6a:be:63:15:58:e2:23:9d:c7:c5:51:84:74: a1:de:fd:dc:59:a3:6f:c0:f7:a9:3f:27:dd:80:40:c5:a7:c6: aa:df:65:fb:5f:47:ff:dd:c8:c8:9a:aa:61:43:a6:f3:85:22: 78:db:37:f3:3b:aa:0a:bd:52:4b:e4:2c:6d:0a:e6:0a:4e:96: f6:8a:a4:b8:80:79:89:fb:5f:bc:23:4b:ef:7b:7b:a5:69:47: 28:22:06:d0:9f:92:00:3d:d6:84:3e:78:6b:07:c1:7d:13:18: b5:37:f0:fa:f6:a7:20:92:fc:77:be:4b:81:a8:82:f1:55:ca: cd:ae:14:1c:ce:34:27:cc:1f:72:20:b3:0b:b3:7f:c3:da:10: 19:38:0f:c0:e8:e1:06:e6:ff:c6:a6:3c:0d:88:7b:59:7d:d1: 0d:4a:1a:9d:58:ff:55:fb:12:a9:ef:9b:61:a2:a3:d1:cd:34: 68:b3:71:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLWnXeHZZCSXoaXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk YjM1ZWY1ODYtNjc3YS00YWEyLTg5Y2QtMmI5OTc5M2Q4YWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCio5Qh5aZL1yTrtgXo8h30nlHyaQmWglcd8 RLKwjdXwJBpYoQlVO2zFswFQZ+wlsj3GBmcuMxHVtiKdwvtt6bB5R/RtoOem9mBD lwwSW3lADkA2lnAJ1bQc8PXmnkMGe8bhWHp+gpP7BmOt5PaaIwQdoIRONgPnN5Fi 2LzDBOhi6Zp6SWSNrglIjb6VO0YajoDup53g0HxGEfSMkWdQeLH5PEziNhQ7Rghg QsEEt5nJiLvoZC5j9DF3ehA6A3DVPjdwRSdeQCYnqK0JTsG2Jp4UZYkFGVVzCMg4 jMRT0DWug5Uj4iqulotWVz7vDKlg6M5Fi4FSxo+BJ/51L/g2swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFOzcVaTxWYp9NYHg09SBHzv73FtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjllYzUzNDEtZjQ2YS0z MmRlLWFjZTktMjU4NTQ3MTc5YmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsAB5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJGTVZTCaFMJsQyhWEak22tYpUqPuE7kSrkomzmeBKD9EXcKKMZ6 wGjPy8xBmYnOLe0g7P/jvivfwluNpZMYX8Ovv1L6MLlJVE+uxZ8Har5jFVjiI53H xVGEdKHe/dxZo2/A96k/J92AQMWnxqrfZftfR//dyMiaqmFDpvOFInjbN/M7qgq9 UkvkLG0K5gpOlvaKpLiAeYn7X7wjS+97e6VpRygiBtCfkgA91oQ+eGsHwX0TGLU3 8Pr2pyCS/He+S4GogvFVys2uFBzONCfMH3Igswuzf8PaEBk4D8Do4Qbm/8amPA2I e1l90Q1KGp1Y/1X7Eqnvm2Gio9HNNGizcZc= -----END CERTIFICATE-----Generated at Sun Oct 11 21:04:20 2026 by rpki-client