$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d65c4bbf-1978-3008-93fc-8dff5d7c5276.roa File: d65c4bbf-1978-3008-93fc-8dff5d7c5276.roa (raw, json) Hash identifier: vXnBO3aT9B3voDISGtUuaqXujtRk/cwMjQxP17LsYIg= Subject key identifier: AD:20:23:80:ED:40:7C:1E:44:CE:E1:78:78:C2:80:FE:2D:1C:A0:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC0B25B8E880CBD8C76A000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d65c4bbf-1978-3008-93fc-8dff5d7c5276.roa Signing time: Fri 20 Mar 2026 17:42:32 +0000 ROA not before: Fri 20 Mar 2026 17:42:32 +0000 ROA not after: Thu 18 Jun 2026 17:42:32 +0000 asID: 7029 IP address blocks: 2001:19b0:7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:b2:5b:8e:88:0c:bd:8c:76:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:42:32 2026 GMT Not After : Jun 18 17:42:32 2026 GMT Subject: CN=873df5f6-72ee-46de-aaa9-663bf3ebed1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:de:e1:3f:86:b1:98:57:4b:14:36:24:c3:3a: 32:13:f7:79:4b:8b:b1:4a:4e:40:8d:6b:21:8b:71: 9e:27:be:71:3a:3e:3a:f7:ba:80:6e:31:16:a2:bc: fa:f9:12:68:3c:ac:7d:d0:02:38:9d:47:cf:93:ba: 98:0d:4e:55:59:a1:f7:3f:62:a7:5e:f1:32:30:8b: 37:74:1f:72:3a:2d:de:d7:f8:34:b5:00:fa:53:9c: 5e:e1:e1:82:1a:48:58:98:06:26:9a:48:d1:ce:4f: 7c:5a:d3:a8:a1:07:65:b1:56:2f:ed:78:c7:77:78: 9d:70:b0:91:9d:89:5b:bb:55:99:75:1f:cc:e7:2a: 5c:91:69:9d:4b:83:b5:79:f3:b9:a7:9d:b2:76:e9: b6:31:be:a5:60:8d:d3:cc:a6:10:67:9a:f9:71:0a: 32:9c:f1:68:7f:27:9e:90:c1:ff:b0:e0:23:11:6d: cd:41:02:17:93:fe:7a:d6:a4:a1:44:d8:28:36:2f: e5:ae:ae:8e:bb:52:f7:f3:86:2c:b3:f1:33:f4:b2: c9:24:7f:03:8a:8e:f5:32:82:d8:87:04:80:b5:53: a7:88:13:53:f5:98:5f:c8:01:49:03:8a:54:13:51: 45:cc:65:eb:0b:ec:ed:4f:90:1f:30:a1:0c:91:ff: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:20:23:80:ED:40:7C:1E:44:CE:E1:78:78:C2:80:FE:2D:1C:A0:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d65c4bbf-1978-3008-93fc-8dff5d7c5276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:7b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b9:30:10:8c:d8:67:a4:5f:c8:e0:2c:24:06:8c:1a:82:7a: 29:ce:eb:72:e6:03:2f:f8:68:c9:b2:34:07:de:0c:0c:29:3c: 1a:8d:e4:e3:23:89:a6:30:13:7c:02:2f:a7:56:46:df:b6:00: 4e:53:cc:fc:ba:01:5e:32:d4:15:15:fc:96:bc:78:9c:34:49: 39:75:4e:1c:68:92:0c:8e:13:93:68:10:b8:af:fc:72:2d:84: 4a:44:f9:84:36:c2:64:b4:5d:1d:ee:b6:ff:69:fe:ec:67:5c: 03:92:e3:bd:e7:d4:9a:b4:0a:a2:87:82:6a:10:02:69:18:c9: 35:2e:00:ef:9b:6b:8c:9b:ed:16:ee:ce:99:40:89:23:8c:9d: 30:af:45:38:01:b1:c9:06:83:4c:12:43:50:2b:3e:95:25:8e: d6:7f:d3:86:41:32:ee:65:38:c8:ad:cd:ba:84:74:0f:ae:fa: 9c:1f:a2:4b:c2:de:38:2c:d2:c3:a6:f4:ca:90:84:9a:ed:50: 20:40:84:2f:35:3c:9d:92:24:a1:06:7e:ab:74:f0:da:cd:7c: 1a:6f:df:2e:08:0c:c6:32:a0:ef:40:72:1c:b7:24:23:34:f2: 02:67:fb:d4:95:0f:75:53:ba:c1:db:37:d0:bf:f0:a8:10:54: da:35:f6:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wLJbjogMvYx2oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDIzMloXDTI2MDYxODE3NDIzMlowLzEtMCsGA1UEAxMk ODczZGY1ZjYtNzJlZS00NmRlLWFhYTktNjYzYmYzZWJlZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm97hP4axmFdLFDYkwzoyE/d5S4uxSk5AjWsh i3GeJ75xOj4697qAbjEWorz6+RJoPKx90AI4nUfPk7qYDU5VWaH3P2KnXvEyMIs3 dB9yOi3e1/g0tQD6U5xe4eGCGkhYmAYmmkjRzk98WtOooQdlsVYv7XjHd3idcLCR nYlbu1WZdR/M5ypckWmdS4O1efO5p52ydum2Mb6lYI3TzKYQZ5r5cQoynPFofyee kMH/sOAjEW3NQQIXk/561qShRNgoNi/lrq6Ou1L384Yss/Ez9LLJJH8Dio71MoLY hwSAtVOniBNT9ZhfyAFJA4pUE1FFzGXrC+ztT5AfMKEMkf832QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK0gI4DtQHweRM7heHjCgP4tHKCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDY1YzRiYmYtMTk3OC0z MDA4LTkzZmMtOGRmZjVkN2M1Mjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsAB7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADm5MBCM2GekX8jgLCQGjBqCeinO63LmAy/4aMmyNAfeDAwpPBqN 5OMjiaYwE3wCL6dWRt+2AE5TzPy6AV4y1BUV/Ja8eJw0STl1ThxokgyOE5NoELiv /HIthEpE+YQ2wmS0XR3utv9p/uxnXAOS473n1Jq0CqKHgmoQAmkYyTUuAO+ba4yb 7RbuzplAiSOMnTCvRTgBsckGg0wSQ1ArPpUljtZ/04ZBMu5lOMitzbqEdA+u+pwf okvC3jgs0sOm9MqQhJrtUCBAhC81PJ2SJKEGfqt08NrNfBpv3y4IDMYyoO9Achy3 JCM08gJn+9SVD3VTusHbN9C/8KgQVNo19qs= -----END CERTIFICATE-----Generated at Thu Mar 26 12:13:34 2026 by rpki-client