$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f6ba69-e8ac-38be-a093-4dce59338c8d.roa File: c2f6ba69-e8ac-38be-a093-4dce59338c8d.roa (raw, json) Hash identifier: hv4GckuGbbqXJuiZFpmC1/tP8x4eHwdVoxiHPqlVv+s= Subject key identifier: A6:28:93:12:8D:84:3B:89:30:E7:8C:48:B6:02:52:35:29:72:E7:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC364CED7A8FE6D17D21FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f6ba69-e8ac-38be-a093-4dce59338c8d.roa Signing time: Fri 20 Mar 2026 17:47:58 +0000 ROA not before: Fri 20 Mar 2026 17:47:58 +0000 ROA not after: Thu 18 Jun 2026 17:47:58 +0000 asID: 7029 IP address blocks: 2001:19b0:840::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c3:64:ce:d7:a8:fe:6d:17:d2:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:47:58 2026 GMT Not After : Jun 18 17:47:58 2026 GMT Subject: CN=9b208cf4-d192-49aa-8fb4-14854290224f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e4:80:73:dd:ed:8a:01:91:bc:e3:2a:7f:89: 4e:64:cb:d6:52:20:c2:11:8e:fa:5b:e1:e7:33:31: 99:36:8d:9e:c9:9c:00:aa:b1:c4:d4:d3:1e:97:6d: d7:d8:5e:4f:34:59:eb:a2:c3:64:32:aa:70:2f:4b: b5:33:5a:3d:a3:64:d3:d8:5b:fc:67:7c:f5:83:bf: 5e:2f:a2:da:f5:6b:ed:e2:df:09:db:02:ff:70:e3: 82:ae:33:c0:e5:a9:73:d6:e3:13:7f:53:6a:3b:a4: 19:28:21:f8:24:9d:b8:c9:7d:14:71:61:19:57:68: 27:ac:6d:b6:ce:24:a0:bd:8c:71:0e:48:16:b2:eb: 80:e6:9e:15:89:15:81:b7:1d:b1:8c:89:7e:4d:3c: 6b:b4:5e:a6:c0:5b:b5:d5:4e:e5:7f:04:46:ad:e4: 41:3e:71:db:7a:bc:e5:4a:94:07:c2:26:a8:44:84: f4:fe:df:c3:a4:d0:98:9e:9c:3d:f9:e2:ec:21:5f: 0b:13:ef:84:d8:ed:13:56:f8:55:40:68:a8:5f:e7: 8b:ca:02:e5:28:72:f5:b3:08:71:70:4c:b5:b3:c6: 73:00:97:71:01:54:ff:4e:f0:98:6d:e2:10:1e:bc: c9:99:ba:c1:33:54:08:f1:01:37:cb:a0:ae:df:e4: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:28:93:12:8D:84:3B:89:30:E7:8C:48:B6:02:52:35:29:72:E7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f6ba69-e8ac-38be-a093-4dce59338c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:840::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:62:f7:74:69:c7:d5:52:ac:8d:7a:d2:e1:fd:03:72:07:01: f5:27:81:14:34:76:20:de:ff:3e:11:85:88:85:80:ab:a9:58: 0f:6f:fb:88:55:7b:ce:0e:7c:e7:10:6a:21:ce:e6:71:98:25: 9b:80:19:c8:2c:88:37:84:5a:92:83:d0:7e:49:5f:84:5a:f1: c8:05:35:97:bf:3a:3f:81:c8:50:09:a5:ac:64:6f:2b:3d:b2: ec:6b:ee:48:f8:5d:78:a1:b6:91:b2:67:60:57:65:45:d1:e8: 86:79:4c:10:0c:69:8f:33:65:f7:a3:54:a6:11:6c:cc:01:22: 1d:97:40:73:85:76:27:8e:0f:72:79:84:a8:b0:0b:45:bb:8a: 33:b4:d1:1e:83:b8:c9:26:9f:ed:2b:4a:13:6d:ac:e5:c7:f5: ed:39:75:25:90:22:fd:ab:6e:c7:fe:da:dc:ce:23:34:6b:3b: 76:07:cd:bb:d5:27:85:63:2d:74:fc:0b:70:ed:6d:be:68:e7: 32:8a:93:df:10:b3:09:49:8f:3b:c1:ee:13:b7:c2:4f:e7:92: 89:93:38:6d:d7:f5:56:04:97:13:05:2d:5e:ad:bd:e8:0c:b0: dc:da:8c:6d:1a:b6:93:51:01:c7:eb:da:cb:f7:05:85:21:3b: dd:c0:f9:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07w2TO16j+bRfSH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDc1OFoXDTI2MDYxODE3NDc1OFowLzEtMCsGA1UEAxMk OWIyMDhjZjQtZDE5Mi00OWFhLThmYjQtMTQ4NTQyOTAyMjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuSAc93tigGRvOMqf4lOZMvWUiDCEY76W+Hn MzGZNo2eyZwAqrHE1NMel23X2F5PNFnrosNkMqpwL0u1M1o9o2TT2Fv8Z3z1g79e L6La9Wvt4t8J2wL/cOOCrjPA5alz1uMTf1NqO6QZKCH4JJ24yX0UcWEZV2gnrG22 ziSgvYxxDkgWsuuA5p4ViRWBtx2xjIl+TTxrtF6mwFu11U7lfwRGreRBPnHberzl SpQHwiaoRIT0/t/DpNCYnpw9+eLsIV8LE++E2O0TVvhVQGioX+eLygLlKHL1swhx cEy1s8ZzAJdxAVT/TvCYbeIQHrzJmbrBM1QI8QE3y6Cu3+R9CQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKYokxKNhDuJMOeMSLYCUjUpcudxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJmNmJhNjktZThhYy0z OGJlLWEwOTMtNGRjZTU5MzM4YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAhA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAti93Rpx9VSrI160uH9A3IHAfUngRQ0diDe/z4RhYiFgKupWA9v +4hVe84OfOcQaiHO5nGYJZuAGcgsiDeEWpKD0H5JX4Ra8cgFNZe/Oj+ByFAJpaxk bys9suxr7kj4XXihtpGyZ2BXZUXR6IZ5TBAMaY8zZfejVKYRbMwBIh2XQHOFdieO D3J5hKiwC0W7ijO00R6DuMkmn+0rShNtrOXH9e05dSWQIv2rbsf+2tzOIzRrO3YH zbvVJ4VjLXT8C3Dtbb5o5zKKk98QswlJjzvB7hO3wk/nkomTOG3X9VYElxMFLV6t vegMsNzajG0atpNRAcfr2sv3BYUhO93A+TA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:18:43 2026 by rpki-client