$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5192b95-1c15-3da7-8999-66206b243b92.roa File: f5192b95-1c15-3da7-8999-66206b243b92.roa (raw, json) Hash identifier: tBnj55ViqtfPb6GeKANE6A7a1zTQBeQQXL7f9gt3upE= Subject key identifier: D4:93:23:21:83:FF:D0:53:19:30:6C:AF:01:C7:80:0A:8B:62:40:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC024E62043350D9DBCE500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5192b95-1c15-3da7-8999-66206b243b92.roa Signing time: Fri 20 Mar 2026 17:41:25 +0000 ROA not before: Fri 20 Mar 2026 17:41:25 +0000 ROA not after: Thu 18 Jun 2026 17:41:25 +0000 asID: 7029 IP address blocks: 2001:19b0:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:24:e6:20:43:35:0d:9d:bc:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:41:25 2026 GMT Not After : Jun 18 17:41:25 2026 GMT Subject: CN=c047e1a8-acf3-47a7-a773-046b27de0d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:fe:a5:4e:23:c0:c9:c0:e9:f6:bc:bf:5f: 48:fd:08:6c:83:14:ee:f1:4a:6c:8a:3f:1a:65:d6: 5a:93:a1:65:f6:38:22:97:96:b6:75:5c:7b:3d:7e: 31:ac:8e:9f:99:1c:b0:d2:ca:cb:20:ad:92:bf:68: ae:cf:2f:1c:b2:34:ae:9e:ca:75:bb:de:33:e4:36: ee:b2:3e:ce:68:3c:ef:ce:b9:b5:21:24:d6:6d:ee: f9:c2:5b:7c:8e:8e:bb:99:d9:1b:1f:17:e1:d4:f0: 0e:d4:f3:14:05:0f:e1:e4:b1:53:2b:d0:de:ab:eb: cd:13:bf:d3:f6:31:ef:f7:72:96:29:a4:1c:43:e8: af:ec:30:72:ca:22:f2:7d:a5:38:d0:e0:4e:47:ae: 7d:da:5f:34:48:46:a8:58:47:3a:da:dd:e0:d0:eb: b2:60:b8:bc:e8:17:b8:1c:d2:fb:d6:43:47:93:bd: 7a:a3:6a:60:7a:bb:2b:75:74:24:b5:c0:b4:da:41: 31:b1:f9:f6:fe:e2:3a:ed:74:be:cf:4e:47:99:36: 36:00:f9:f7:8d:bc:d3:fb:99:3a:55:56:95:9a:3d: e5:48:26:12:16:9e:f9:1e:4b:ad:f9:5b:d9:f2:0e: 2a:f6:26:e0:c8:88:46:e4:7d:09:68:15:c9:32:af: fd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:93:23:21:83:FF:D0:53:19:30:6C:AF:01:C7:80:0A:8B:62:40:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5192b95-1c15-3da7-8999-66206b243b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d9:dc:33:87:f4:bd:e6:32:bd:2e:ff:3e:8b:32:94:6b:d2: b3:2e:b9:d3:e2:3e:35:12:d3:46:ae:f6:76:09:51:c1:1f:10: 2b:a8:04:8e:8f:36:f2:f3:fb:49:56:d7:2d:7f:ca:c6:40:93: c9:01:cb:65:cf:5f:ed:cc:36:dc:d7:93:96:da:40:88:e2:e6: a0:a4:35:fd:3b:8c:a5:78:9d:d0:9b:15:91:9c:04:db:19:36: ae:7e:e3:4a:34:bb:99:ee:05:c0:59:b9:58:5a:e3:f9:59:43: 38:00:d3:17:2f:f0:db:57:e4:b5:35:ff:d2:9e:4a:b3:cb:be: af:d0:85:40:b9:bf:58:0f:80:a3:54:69:8a:3c:5c:f9:59:70: d4:7c:53:f9:d0:5d:59:d6:19:5f:6a:33:f0:66:12:f7:16:23: 34:07:94:4c:c3:84:55:ba:2a:cc:0d:50:0b:e1:26:54:b2:40: 27:8e:a5:34:11:62:1d:07:90:3d:fe:4b:33:f5:48:8d:78:9f: 56:18:8a:81:b7:0f:6f:a1:c6:80:5a:52:67:87:15:36:ce:86: 2f:85:c0:15:c5:3f:6f:ca:5b:6c:30:1f:9d:d5:de:08:07:c8: c8:33:8c:24:d8:ac:47:39:71:c5:56:b0:ad:08:77:02:ad:c5: 3c:27:00:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wCTmIEM1DZ285QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDEyNVoXDTI2MDYxODE3NDEyNVowLzEtMCsGA1UEAxMk YzA0N2UxYTgtYWNmMy00N2E3LWE3NzMtMDQ2YjI3ZGUwZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZL+pU4jwMnA6fa8v19I/QhsgxTu8Upsij8a ZdZak6Fl9jgil5a2dVx7PX4xrI6fmRyw0srLIK2Sv2iuzy8csjSunsp1u94z5Dbu sj7OaDzvzrm1ISTWbe75wlt8jo67mdkbHxfh1PAO1PMUBQ/h5LFTK9Deq+vNE7/T 9jHv93KWKaQcQ+iv7DByyiLyfaU40OBOR6592l80SEaoWEc62t3g0OuyYLi86Be4 HNL71kNHk716o2pgersrdXQktcC02kExsfn2/uI67XS+z05HmTY2APn3jbzT+5k6 VVaVmj3lSCYSFp75Hkut+VvZ8g4q9ibgyIhG5H0JaBXJMq/9twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNSTIyGD/9BTGTBsrwHHgAqLYkBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjUxOTJiOTUtMWMxNS0z ZGE3LTg5OTktNjYyMDZiMjQzYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHZ3DOH9L3mMr0u/z6LMpRr0rMuudPiPjUS00au9nYJUcEfECuo BI6PNvLz+0lW1y1/ysZAk8kBy2XPX+3MNtzXk5baQIji5qCkNf07jKV4ndCbFZGc BNsZNq5+40o0u5nuBcBZuVha4/lZQzgA0xcv8NtX5LU1/9KeSrPLvq/QhUC5v1gP gKNUaYo8XPlZcNR8U/nQXVnWGV9qM/BmEvcWIzQHlEzDhFW6KswNUAvhJlSyQCeO pTQRYh0HkD3+SzP1SI14n1YYioG3D2+hxoBaUmeHFTbOhi+FwBXFP2/KW2wwH53V 3ggHyMgzjCTYrEc5ccVWsK0IdwKtxTwnAOw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:05:39 2026 by rpki-client