$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a8c78f9-b303-37e4-a2fc-a434c76988a2.roa File: 0a8c78f9-b303-37e4-a2fc-a434c76988a2.roa (raw, json) Hash identifier: LsnZp57NrN+OO+6j51g845LnJSd/6noeHxxlvtT+lTE= Subject key identifier: 1C:50:19:9E:88:1E:1E:D4:E8:1B:19:E7:28:70:9D:90:A1:2A:CD:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED9C73ACE531D61C7DBA6FF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a8c78f9-b303-37e4-a2fc-a434c76988a2.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 7029 IP address blocks: 2001:19b0:bc0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:3a:ce:53:1d:61:c7:db:a6:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=df0d4a3f-0c07-4caa-b52c-c25eae4189de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:e6:2e:da:7e:60:c8:90:75:1c:83:5f:fe: 6e:0e:52:bc:cf:2f:51:00:66:6f:76:ac:3a:17:a2: 2e:a7:c8:cc:f8:63:7e:0d:fe:58:00:5b:da:57:97: 6c:05:3b:13:79:37:d7:57:44:f2:31:3e:49:50:6b: 7f:d1:12:42:b1:58:ce:7b:01:9c:43:8c:c6:4e:8d: 5d:18:48:40:ff:13:95:04:73:38:03:dc:b5:a8:c4: 15:69:17:75:3f:3a:b6:9a:e4:d3:bf:41:cd:dd:5d: c2:84:1d:3d:78:35:3b:88:10:e2:83:a5:f8:3b:bc: 08:74:f3:e9:11:76:1a:82:a7:48:07:9c:b9:46:ea: 27:94:48:65:7d:73:f6:1b:3c:d9:43:1c:1a:43:76: 1b:db:04:de:fe:ab:00:c2:2d:5e:5a:91:d7:97:69: 83:ab:07:28:17:63:e5:10:06:68:bc:76:f6:21:0a: 9f:01:27:04:69:01:bf:67:a2:cf:22:cc:fe:c7:59: 32:8b:72:07:7d:b5:d7:c8:5c:53:e5:5e:1d:9a:6b: 73:9e:11:f9:b1:72:f4:ec:1c:97:f2:5e:1b:7f:34: f7:00:2d:ef:14:cd:12:47:21:5f:b6:ea:20:88:a2: 34:9c:dc:7e:9f:3a:d4:e9:f3:d5:86:c0:dd:5c:d6: c8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:50:19:9E:88:1E:1E:D4:E8:1B:19:E7:28:70:9D:90:A1:2A:CD:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a8c78f9-b303-37e4-a2fc-a434c76988a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:bc0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5b:4d:88:32:b5:28:b9:17:47:0b:31:ef:7b:aa:8b:35:4f: 68:ee:36:68:46:81:5b:54:26:20:bc:e6:c9:cf:e2:42:47:6e: d1:67:a8:1c:04:06:a8:86:1a:67:0c:40:4f:15:1f:0d:c3:79: 66:83:c5:c3:19:ee:be:f9:7e:02:d0:d8:bc:ed:0d:9d:33:3d: e0:82:4a:94:eb:19:1d:78:3f:ab:c9:f1:51:2a:00:c6:49:90: ee:05:84:7d:8f:f0:10:ee:ad:a3:4c:bb:5d:63:28:45:95:85: 78:51:9d:5b:02:fb:9d:c1:7c:54:92:43:51:af:2f:cc:c4:4b: bf:bd:5a:b8:ce:8f:19:97:b1:3a:09:4b:ed:01:a2:5b:72:ae: 68:35:86:00:3a:04:66:b0:17:c9:6b:71:57:29:bd:a9:6c:6f: 8d:5f:5c:9c:27:76:69:3d:db:13:f3:cc:cf:81:91:d2:d1:2e: 75:83:76:9d:76:19:53:54:e8:30:bd:10:7e:b5:49:59:4b:65: f6:21:ad:b1:a6:a0:cf:19:60:fd:b2:e8:70:37:0e:50:92:d7: 42:6c:ff:2e:04:ae:98:c9:b9:f2:20:53:9d:5e:48:91:6a:af: 4c:f8:39:56:fb:a3:44:8f:ae:46:b4:3a:7f:4c:47:05:35:c0: 19:15:2e:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ZxzrOUx1hx9um/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZGYwZDRhM2YtMGMwNy00Y2FhLWI1MmMtYzI1ZWFlNDE4OWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxizmLtp+YMiQdRyDX/5uDlK8zy9RAGZvdqw6 F6Iup8jM+GN+Df5YAFvaV5dsBTsTeTfXV0TyMT5JUGt/0RJCsVjOewGcQ4zGTo1d GEhA/xOVBHM4A9y1qMQVaRd1Pzq2muTTv0HN3V3ChB09eDU7iBDig6X4O7wIdPPp EXYagqdIB5y5RuonlEhlfXP2GzzZQxwaQ3Yb2wTe/qsAwi1eWpHXl2mDqwcoF2Pl EAZovHb2IQqfAScEaQG/Z6LPIsz+x1kyi3IHfbXXyFxT5V4dmmtznhH5sXL07ByX 8l4bfzT3AC3vFM0SRyFftuogiKI0nNx+nzrU6fPVhsDdXNbImQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBxQGZ6IHh7U6BsZ5yhwnZChKs0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGE4Yzc4ZjktYjMwMy0z N2U0LWEyZmMtYTQzNGM3Njk4OGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAvA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJbTYgytSi5F0cLMe97qos1T2juNmhGgVtUJiC85snP4kJHbtFn qBwEBqiGGmcMQE8VHw3DeWaDxcMZ7r75fgLQ2LztDZ0zPeCCSpTrGR14P6vJ8VEq AMZJkO4FhH2P8BDuraNMu11jKEWVhXhRnVsC+53BfFSSQ1GvL8zES7+9WrjOjxmX sToJS+0Boltyrmg1hgA6BGawF8lrcVcpvalsb41fXJwndmk92xPzzM+BkdLRLnWD dp12GVNU6DC9EH61SVlLZfYhrbGmoM8ZYP2y6HA3DlCS10Js/y4ErpjJufIgU51e SJFqr0z4OVb7o0SPrka0On9MRwU1wBkVLm8= -----END CERTIFICATE-----Generated at Thu Aug 27 10:31:24 2026 by rpki-client