$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df8633a8-cadd-3378-9996-0233255d3911.roa File: df8633a8-cadd-3378-9996-0233255d3911.roa (raw, json) Hash identifier: DGTHWUCT/dSEhptj06ksNknXDkw/Wz3zASYwxeS8sBk= Subject key identifier: 54:5D:12:B3:A7:58:42:86:A5:D2:97:8B:A9:0D:30:D9:29:09:B0:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC1168349DD7627AE45E100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df8633a8-cadd-3378-9996-0233255d3911.roa Signing time: Fri 20 Mar 2026 17:43:19 +0000 ROA not before: Fri 20 Mar 2026 17:43:19 +0000 ROA not after: Thu 18 Jun 2026 17:43:19 +0000 asID: 7029 IP address blocks: 2001:19b0:361::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c1:16:83:49:dd:76:27:ae:45:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:43:19 2026 GMT Not After : Jun 18 17:43:19 2026 GMT Subject: CN=6a544141-7519-4329-b6d9-de8f8ae0f241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:02:2e:9c:2f:93:74:a3:10:9d:00:d4:10:b6: 87:4c:f2:be:09:40:22:9a:8b:96:2c:be:fe:e1:9b: e4:95:0a:15:eb:5a:36:32:f1:48:77:96:df:88:4c: 79:15:2d:c8:90:b4:43:6e:8c:f4:ad:ac:92:3e:75: c1:c5:b2:bc:64:80:09:5a:1a:6f:ec:dc:b5:5b:26: 4b:38:cd:a1:14:a3:31:1d:93:92:0c:22:b5:d9:43: f6:53:80:54:ac:ad:12:af:16:74:a5:a6:3f:7e:64: 9a:f5:ec:39:30:eb:f7:67:77:62:fe:9b:55:36:9f: 65:69:e6:45:f2:d6:33:7a:5c:a1:76:32:59:a3:6d: 44:5f:6a:1b:43:f3:ea:43:42:49:c0:92:4a:56:4d: 0f:6f:90:7b:a8:60:61:a9:56:a9:d7:45:52:a0:bd: 24:bf:77:d1:8d:fe:56:09:5b:34:2a:3c:49:d2:11: ef:54:be:f9:c8:af:62:96:d9:5d:04:2e:2d:22:73: c4:c2:81:09:54:df:47:18:3f:35:9d:ae:2b:90:84: 3e:55:c3:09:ad:1f:ce:ee:56:41:fe:ca:c4:7f:ec: e2:65:98:73:2d:7d:6a:40:f2:b0:4b:dd:f8:63:fc: 13:8b:0f:d9:dd:13:47:9c:6e:57:1f:f9:dd:c2:58: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5D:12:B3:A7:58:42:86:A5:D2:97:8B:A9:0D:30:D9:29:09:B0:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df8633a8-cadd-3378-9996-0233255d3911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:361::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:fe:1e:2e:d4:15:ab:f4:0f:b9:df:a6:23:16:ea:7d:54:77: c4:cc:e2:8f:93:3a:60:89:bd:d3:75:a7:65:f8:e8:a4:df:ae: 26:85:95:e0:80:80:86:42:1b:ae:ea:9d:1b:bb:42:af:f8:53: f4:ef:65:6e:cc:bc:a5:a0:13:0c:7d:c8:25:fa:b9:f1:ea:a4: ed:84:3f:55:c6:f7:09:98:66:f8:c4:0f:0c:b7:56:ba:04:da: 91:c7:fc:e2:40:b5:f8:dc:0e:6f:d9:70:7e:20:ae:73:9e:99: 67:01:0e:73:82:6b:1e:74:e6:94:6f:25:d5:ee:95:1e:4e:9f: 7d:ad:d5:04:4b:d0:a9:7e:b9:3e:37:c2:e4:ac:e3:a9:b8:69: a2:16:f7:13:40:01:25:07:53:3a:a6:bc:f4:ef:0f:e6:6e:6a: 01:93:d2:62:f8:05:74:56:45:fe:1f:f8:75:af:cc:30:0e:0e: c3:dc:19:67:e6:ab:5f:28:77:e5:81:3c:36:8a:8d:a8:2d:40: 99:5c:09:7f:c4:6d:30:29:6d:64:e7:2c:91:9b:fc:8f:5e:d8: b6:c2:04:97:ca:22:ae:ba:f9:a0:e9:f1:d0:c5:64:24:fe:d7: ad:f5:6c:74:d2:cd:79:f1:2f:d4:59:f4:b5:b8:a5:93:f2:0b: 22:6f:a5:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wRaDSd12J65F4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDMxOVoXDTI2MDYxODE3NDMxOVowLzEtMCsGA1UEAxMk NmE1NDQxNDEtNzUxOS00MzI5LWI2ZDktZGU4ZjhhZTBmMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwIunC+TdKMQnQDUELaHTPK+CUAimouWLL7+ 4ZvklQoV61o2MvFId5bfiEx5FS3IkLRDboz0raySPnXBxbK8ZIAJWhpv7Ny1WyZL OM2hFKMxHZOSDCK12UP2U4BUrK0SrxZ0paY/fmSa9ew5MOv3Z3di/ptVNp9laeZF 8tYzelyhdjJZo21EX2obQ/PqQ0JJwJJKVk0Pb5B7qGBhqVap10VSoL0kv3fRjf5W CVs0KjxJ0hHvVL75yK9iltldBC4tInPEwoEJVN9HGD81na4rkIQ+VcMJrR/O7lZB /srEf+ziZZhzLX1qQPKwS934Y/wTiw/Z3RNHnG5XH/ndwljn0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFRdErOnWEKGpdKXi6kNMNkpCbBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGY4NjMzYTgtY2FkZC0z Mzc4LTk5OTYtMDIzMzI1NWQzOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsANh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3+Hi7UFav0D7nfpiMW6n1Ud8TM4o+TOmCJvdN1p2X46KTfriaF leCAgIZCG67qnRu7Qq/4U/TvZW7MvKWgEwx9yCX6ufHqpO2EP1XG9wmYZvjEDwy3 VroE2pHH/OJAtfjcDm/ZcH4grnOemWcBDnOCax505pRvJdXulR5On32t1QRL0Kl+ uT43wuSs46m4aaIW9xNAASUHUzqmvPTvD+ZuagGT0mL4BXRWRf4f+HWvzDAODsPc GWfmq18od+WBPDaKjagtQJlcCX/EbTApbWTnLJGb/I9e2LbCBJfKIq66+aDp8dDF ZCT+1631bHTSzXnxL9RZ9LW4pZPyCyJvpbo= -----END CERTIFICATE-----Generated at Thu Mar 26 15:25:05 2026 by rpki-client