$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f857b651-984b-307b-a4b2-8981ad0996ce.roa File: f857b651-984b-307b-a4b2-8981ad0996ce.roa (raw, json) Hash identifier: Gt3o8UAYFTKmZr0Ev31tA/e/8TlIGdsCjeEVvQ04x2w= Subject key identifier: CC:6E:00:1F:86:A6:A5:9C:03:1A:52:26:A3:32:FC:B2:55:13:30:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3BC01D6230D250F97248D180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f857b651-984b-307b-a4b2-8981ad0996ce.roa Signing time: Fri 20 Mar 2026 17:41:21 +0000 ROA not before: Fri 20 Mar 2026 17:41:21 +0000 ROA not after: Thu 18 Jun 2026 17:41:21 +0000 asID: 7029 IP address blocks: 2001:19b0:58::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:c0:1d:62:30:d2:50:f9:72:48:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 17:41:21 2026 GMT Not After : Jun 18 17:41:21 2026 GMT Subject: CN=21bcc2bf-c02f-4591-927d-4a34d10f1ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:90:88:36:b3:0e:68:20:0a:fa:e3:36:db: 5c:76:3c:32:ce:59:0e:5c:bc:a1:33:b2:70:f7:fc: 62:d6:2c:1b:c7:5d:ec:04:ce:8e:40:be:c1:12:b4: ff:2e:74:26:01:e3:d0:54:f4:1f:bd:cb:b2:05:28: a9:fe:b6:1e:36:65:b5:6a:5e:1f:f2:6e:8b:9a:4f: 88:50:32:52:e4:8a:bf:9a:ca:e6:39:b3:5b:97:70: 0a:80:bb:7f:2c:d7:54:e4:14:35:e3:9f:60:cb:44: 7a:d8:8d:de:27:16:32:d7:ac:ce:5f:fd:b8:be:49: 41:81:da:89:40:da:ac:38:17:74:7f:04:e0:7b:d1: a2:c5:f7:64:b2:49:3b:0b:c6:05:71:71:4c:b0:b1: 11:bc:6b:51:67:38:76:02:86:7f:a8:65:73:8b:fa: 00:2a:6f:09:e7:a5:71:f6:42:3c:73:06:25:0c:eb: 0f:da:cc:39:90:de:3a:4b:a0:a3:49:e8:de:7d:d7: f0:01:3f:1b:80:14:fd:11:b3:b5:ed:de:d0:a0:32: 35:d1:3e:ee:ca:9a:57:5d:cb:a1:5a:0f:fa:60:f3: d4:a6:25:9d:1e:68:77:44:86:20:a6:03:69:ac:f2: 97:1f:00:76:43:e5:3f:95:0f:9c:be:15:e4:d4:a5: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6E:00:1F:86:A6:A5:9C:03:1A:52:26:A3:32:FC:B2:55:13:30:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f857b651-984b-307b-a4b2-8981ad0996ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:58::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f2:6b:db:c8:e3:c7:31:42:e5:50:b0:61:1f:78:70:45:e7: b5:a4:45:b5:5c:68:35:c9:1a:3c:96:de:35:1b:45:3b:b4:46: c5:1e:e7:6f:27:4b:fd:d9:7d:4f:9f:3d:be:cb:59:b7:df:72: 76:72:81:53:2e:a6:e0:1e:01:a0:0c:2c:ae:5a:6e:4b:da:a3: 25:cd:51:cd:b2:76:5b:76:5d:da:94:e3:c5:62:32:21:f1:85: 8f:9c:c8:ae:78:47:51:1e:2a:1f:de:c7:a3:c4:07:b8:6a:a9: e6:53:1a:55:62:28:d6:dd:e3:c7:90:db:7c:ae:00:10:84:df: 13:e9:27:d5:4d:6d:d7:67:af:e2:0f:fa:5c:80:20:9a:ea:14: b6:eb:65:5e:f2:ad:f6:cc:86:fb:39:93:d1:01:82:fd:c8:31: fb:db:97:de:9c:12:50:07:d3:e0:f2:db:7c:7a:50:9b:4b:0e: f8:de:5c:b9:34:9e:c4:83:bb:b9:5b:57:2e:e9:cd:20:5f:53: 8d:15:a8:47:35:bc:72:ee:ce:d6:5a:4f:14:a3:98:eb:0b:67: fe:42:8b:e2:89:61:66:a9:4c:d6:27:c5:37:a8:1f:c4:03:3a: 85:9a:0c:e3:6e:74:c5:1a:97:ce:01:6c:a0:55:9a:cb:c8:85: b3:27:8e:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07wB1iMNJQ+XJI0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMDE3NDEyMVoXDTI2MDYxODE3NDEyMVowLzEtMCsGA1UEAxMk MjFiY2MyYmYtYzAyZi00NTkxLTkyN2QtNGEzNGQxMGYxY2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq+QiDazDmggCvrjNttcdjwyzlkOXLyhM7Jw 9/xi1iwbx13sBM6OQL7BErT/LnQmAePQVPQfvcuyBSip/rYeNmW1al4f8m6Lmk+I UDJS5Iq/msrmObNbl3AKgLt/LNdU5BQ1459gy0R62I3eJxYy16zOX/24vklBgdqJ QNqsOBd0fwTge9Gixfdkskk7C8YFcXFMsLERvGtRZzh2AoZ/qGVzi/oAKm8J56Vx 9kI8cwYlDOsP2sw5kN46S6CjSejefdfwAT8bgBT9EbO17d7QoDI10T7uyppXXcuh Wg/6YPPUpiWdHmh3RIYgpgNprPKXHwB2Q+U/lQ+cvhXk1KUxXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMxuAB+GpqWcAxpSJqMy/LJVEzDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjg1N2I2NTEtOTg0Yi0z MDdiLWE0YjItODk4MWFkMDk5NmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEZsABY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAbya9vI48cxQuVQsGEfeHBF57WkRbVcaDXJGjyW3jUbRTu0RsUe 528nS/3ZfU+fPb7LWbffcnZygVMupuAeAaAMLK5abkvaoyXNUc2ydlt2XdqU48Vi MiHxhY+cyK54R1EeKh/ex6PEB7hqqeZTGlViKNbd48eQ23yuABCE3xPpJ9VNbddn r+IP+lyAIJrqFLbrZV7yrfbMhvs5k9EBgv3IMfvbl96cElAH0+Dy23x6UJtLDvje XLk0nsSDu7lbVy7pzSBfU40VqEc1vHLuztZaTxSjmOsLZ/5Ci+KJYWapTNYnxTeo H8QDOoWaDONudMUal84BbKBVmsvIhbMnjuY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:03:45 2026 by rpki-client