$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a8c78f9-b303-37e4-a2fc-a434c76988a2.roa File: 0a8c78f9-b303-37e4-a2fc-a434c76988a2.roa (raw, json) Hash identifier: whSpsrzqqU7YJC4IaAIpntY/5Qg8qAWRBF6tKWj1vxk= Subject key identifier: 13:E5:C3:32:B9:3E:9D:77:0C:FD:52:A7:78:DD:41:6E:0F:DC:7F:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D57CFDB3F698EF7893CD2BD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a8c78f9-b303-37e4-a2fc-a434c76988a2.roa Signing time: Mon 30 Mar 2026 18:55:42 +0000 ROA not before: Mon 30 Mar 2026 18:55:42 +0000 ROA not after: Sun 28 Jun 2026 18:55:42 +0000 asID: 7029 IP address blocks: 2001:19b0:bc0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:cf:db:3f:69:8e:f7:89:3c:d2:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 18:55:42 2026 GMT Not After : Jun 28 18:55:42 2026 GMT Subject: CN=095a820b-0750-4923-841e-389ff60c1e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b5:04:ca:be:a7:57:41:8c:0c:9c:5d:9b:7b: ff:21:0c:47:86:24:fa:1c:4f:a5:30:22:78:82:04: c7:ae:cc:82:d8:d4:86:fc:89:db:5d:34:43:3c:72: 31:6c:cf:43:f2:ee:40:16:dc:07:d0:67:85:aa:ca: 50:d7:b7:70:c7:eb:79:14:a0:1e:7e:51:cf:0c:73: 4a:1f:80:2d:a1:e8:13:6c:ce:9d:8b:b4:fd:57:ca: dd:60:2a:57:2e:b7:2f:ed:a7:8b:78:44:9a:25:8d: 92:61:fe:82:52:fb:72:fd:8d:5b:0a:c6:55:83:14: 5a:df:1d:95:6d:ee:b0:7b:47:cb:5f:2d:fb:f1:f0: 60:ec:4a:66:7c:d6:0e:6c:a0:20:90:74:90:87:75: f2:1f:34:c5:63:d6:0f:75:71:02:78:4b:a2:8e:4c: 29:8c:19:77:26:f5:22:7e:5a:25:ea:80:eb:bc:57: c1:e7:ab:ca:07:64:37:fb:e4:76:57:c8:40:74:6b: af:01:5f:95:c8:61:0f:46:65:73:ba:b9:be:fb:ed: 06:1f:b0:38:c6:ca:30:6b:bf:a7:c9:6e:68:67:7c: 74:1e:7f:3a:bf:b6:88:93:ef:c9:8a:ef:fb:c0:37: 48:a2:9a:56:d4:22:30:81:8b:07:e1:f9:89:2e:39: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E5:C3:32:B9:3E:9D:77:0C:FD:52:A7:78:DD:41:6E:0F:DC:7F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a8c78f9-b303-37e4-a2fc-a434c76988a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:bc0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:58:d7:4c:d6:65:01:4d:00:e7:4a:a7:db:b1:a4:7d:46:34: 62:7c:c5:87:9e:4e:a4:83:e1:8a:a2:7e:b2:e4:cb:4e:24:78: 37:e3:6c:63:4f:76:a1:d1:e5:df:fa:4a:55:d6:2f:31:08:ec: b5:85:8f:db:e3:f4:1b:d3:b9:25:16:cf:e6:fd:ef:12:db:ec: 5d:32:4f:02:cd:ca:8e:b5:19:e0:6c:0a:14:1a:d3:ea:09:60: df:69:e8:17:8b:23:85:74:ac:67:34:29:34:97:fc:4a:22:c4: 98:e1:05:f9:b3:5d:b3:3a:6b:e4:e4:54:a3:f9:7b:78:9b:18: 8c:3e:94:fe:a4:bb:fc:64:dd:14:19:13:57:1f:8b:49:c6:6d: 12:f2:7a:83:14:5b:45:57:ef:64:de:e0:7d:2b:4f:63:36:be: 10:be:47:32:22:1a:39:8b:dc:92:60:92:80:f5:e9:40:59:38: 67:2c:aa:7d:e1:e2:54:e6:a0:72:d1:e0:65:0e:0a:71:4f:09: 23:9c:b1:2c:0c:70:5e:a1:bb:43:f8:6f:09:5f:36:c2:47:a4: 09:e7:2e:72:47:7e:72:c9:d5:ea:2f:d8:57:af:91:ca:d8:e0: 7c:d0:14:10:37:e1:e3:19:44:e5:ec:4d:5a:b8:b2:f7:a8:70: e6:eb:90:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Xz9s/aY73iTzSvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDE4NTU0MloXDTI2MDYyODE4NTU0MlowLzEtMCsGA1UEAxMk MDk1YTgyMGItMDc1MC00OTIzLTg0MWUtMzg5ZmY2MGMxZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LUEyr6nV0GMDJxdm3v/IQxHhiT6HE+lMCJ4 ggTHrsyC2NSG/InbXTRDPHIxbM9D8u5AFtwH0GeFqspQ17dwx+t5FKAeflHPDHNK H4AtoegTbM6di7T9V8rdYCpXLrcv7aeLeESaJY2SYf6CUvty/Y1bCsZVgxRa3x2V be6we0fLXy378fBg7EpmfNYObKAgkHSQh3XyHzTFY9YPdXECeEuijkwpjBl3JvUi flol6oDrvFfB56vKB2Q3++R2V8hAdGuvAV+VyGEPRmVzurm+++0GH7A4xsowa7+n yW5oZ3x0Hn86v7aIk+/Jiu/7wDdIoppW1CIwgYsH4fmJLjnbcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPlwzK5Pp13DP1Sp3jdQW4P3H96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGE4Yzc4ZjktYjMwMy0z N2U0LWEyZmMtYTQzNGM3Njk4OGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAvA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJY10zWZQFNAOdKp9uxpH1GNGJ8xYeeTqSD4YqifrLky04keDfj bGNPdqHR5d/6SlXWLzEI7LWFj9vj9BvTuSUWz+b97xLb7F0yTwLNyo61GeBsChQa 0+oJYN9p6BeLI4V0rGc0KTSX/EoixJjhBfmzXbM6a+TkVKP5e3ibGIw+lP6ku/xk 3RQZE1cfi0nGbRLyeoMUW0VX72Te4H0rT2M2vhC+RzIiGjmL3JJgkoD16UBZOGcs qn3h4lTmoHLR4GUOCnFPCSOcsSwMcF6hu0P4bwlfNsJHpAnnLnJHfnLJ1eov2Fev kcrY4HzQFBA34eMZROXsTVq4sveocObrkNo= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:40 2026 by rpki-client