$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d7519d-0e68-32a8-b9a1-6389060b0225.roa File: c8d7519d-0e68-32a8-b9a1-6389060b0225.roa (raw, json) Hash identifier: Sui4RlUv4H/FpL45gdh9RIFuvojwN2NRCz7xFlpMWS0= Subject key identifier: 81:31:16:84:A9:E0:11:E4:9E:BE:A9:73:5D:AF:3C:76:93:53:2B:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC0F4753CC89F021D698E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d7519d-0e68-32a8-b9a1-6389060b0225.roa Signing time: Fri 20 Mar 2026 17:43:03 +0000 ROA not before: Fri 20 Mar 2026 17:43:03 +0000 ROA not after: Thu 18 Jun 2026 17:43:03 +0000 asID: 7029 IP address blocks: 2001:19b0:34f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:f4:75:3c:c8:9f:02:1d:69:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:43:03 2026 GMT Not After : Jun 18 17:43:03 2026 GMT Subject: CN=7f8e8cc1-afca-4287-9bd8-6de27ffce19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:8a:c2:53:43:8c:5d:3e:d4:d8:80:dd:47: 21:e6:19:45:61:55:ef:4b:8b:42:c9:2d:64:74:1e: ce:c3:25:2b:9d:c6:85:45:70:15:b3:d0:9f:42:a3: 1e:c8:64:2c:b0:df:2b:7f:1d:d9:2c:e3:59:8f:50: 6f:73:0b:51:1f:bc:78:2b:98:24:ab:f9:71:d2:19: 47:d7:1a:d9:32:ee:0b:dd:72:de:f4:a7:ec:f6:24: ee:fa:a1:d3:4c:3f:e1:ae:e1:e4:f5:c3:01:3d:be: ab:80:6e:62:d0:e6:b6:23:9a:42:36:bf:4b:49:0a: 8c:05:e2:09:3c:16:32:13:68:34:28:51:76:93:0c: b6:51:78:1c:f4:8b:c2:5d:0c:c9:dd:5c:5b:59:57: 00:03:b8:88:e7:ff:0f:02:64:8e:06:22:8e:9f:a9: 2e:0f:00:66:78:10:51:b0:aa:a1:f2:06:e9:ee:35: 66:1b:b7:8a:26:1e:1c:ce:13:4e:1b:1d:41:4c:6a: ea:25:18:cf:2d:5a:9f:af:ef:87:b6:4c:f1:7b:fa: 53:ef:ea:91:2b:76:78:b7:43:9b:05:06:9b:b3:63: ea:b2:00:86:e8:94:8a:98:f0:2e:5d:a3:ef:85:7f: 6a:4e:92:c8:67:75:d8:24:58:14:f3:4a:a7:e1:91: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:31:16:84:A9:E0:11:E4:9E:BE:A9:73:5D:AF:3C:76:93:53:2B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d7519d-0e68-32a8-b9a1-6389060b0225.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:34f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:22:99:15:57:10:ca:b4:a1:c3:b9:0e:8f:d3:49:e4:67:3e: d1:b1:c0:49:38:53:b3:57:cd:3c:89:11:8f:d5:ce:ad:f0:07: 85:9d:de:13:c0:a1:fc:09:7a:28:53:9f:9c:8d:5d:cb:8d:8e: bc:81:ac:93:3e:43:81:f0:18:04:b2:ca:56:f3:ee:e2:cc:35: f9:52:47:eb:8a:f1:54:b7:b0:bd:02:58:88:8e:6b:ac:b1:3b: 42:52:23:28:ba:e2:06:25:67:77:28:ab:5f:ae:8e:34:61:b0: a2:62:ff:9c:24:1a:02:73:31:58:2b:dd:9e:a6:89:30:26:23: 7f:81:69:b2:e1:f2:bb:59:24:47:7e:9a:4b:4f:c8:a3:5b:cf: 9e:62:69:31:1f:07:76:ab:a1:21:b4:92:5d:90:aa:5d:d5:82: 95:3d:3d:b0:bc:b3:d5:a7:82:d4:c5:62:2f:20:3f:05:75:e4: 4b:83:21:ef:54:d5:45:88:06:c5:4c:78:8b:24:aa:cb:74:0a: 84:89:9d:04:f8:ea:84:1a:c7:c1:64:32:30:40:11:e4:a3:ca: cb:3a:2b:41:dc:14:c0:f5:5b:b1:6a:63:b2:e8:6e:a1:45:10: e6:93:89:69:bb:15:65:23:30:09:ce:6c:65:eb:7e:05:f0:ee: 44:22:7b:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wPR1PMifAh1pjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDMwM1oXDTI2MDYxODE3NDMwM1owLzEtMCsGA1UEAxMk N2Y4ZThjYzEtYWZjYS00Mjg3LTliZDgtNmRlMjdmZmNlMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw+KwlNDjF0+1NiA3Uch5hlFYVXvS4tCyS1k dB7OwyUrncaFRXAVs9CfQqMeyGQssN8rfx3ZLONZj1BvcwtRH7x4K5gkq/lx0hlH 1xrZMu4L3XLe9Kfs9iTu+qHTTD/hruHk9cMBPb6rgG5i0Oa2I5pCNr9LSQqMBeIJ PBYyE2g0KFF2kwy2UXgc9IvCXQzJ3VxbWVcAA7iI5/8PAmSOBiKOn6kuDwBmeBBR sKqh8gbp7jVmG7eKJh4czhNOGx1BTGrqJRjPLVqfr++Htkzxe/pT7+qRK3Z4t0Ob BQabs2PqsgCG6JSKmPAuXaPvhX9qTpLIZ3XYJFgU80qn4ZEoawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIExFoSp4BHknr6pc12vPHaTUyuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzhkNzUxOWQtMGU2OC0z MmE4LWI5YTEtNjM4OTA2MGIwMjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsANP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHEimRVXEMq0ocO5Do/TSeRnPtGxwEk4U7NXzTyJEY/Vzq3wB4Wd 3hPAofwJeihTn5yNXcuNjryBrJM+Q4HwGASyylbz7uLMNflSR+uK8VS3sL0CWIiO a6yxO0JSIyi64gYlZ3coq1+ujjRhsKJi/5wkGgJzMVgr3Z6miTAmI3+BabLh8rtZ JEd+mktPyKNbz55iaTEfB3aroSG0kl2Qql3VgpU9PbC8s9WngtTFYi8gPwV15EuD Ie9U1UWIBsVMeIskqst0CoSJnQT46oQax8FkMjBAEeSjyss6K0HcFMD1W7FqY7Lo bqFFEOaTiWm7FWUjMAnObGXrfgXw7kQie5g= -----END CERTIFICATE-----Generated at Thu Mar 26 08:22:23 2026 by rpki-client