$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/109eee69-dfe2-3f89-b049-3c5ef42b6822.roa File: 109eee69-dfe2-3f89-b049-3c5ef42b6822.roa (raw, json) Hash identifier: Xicq9xvagvpjAmhxHXnc8y2lqTAUttG+1FcRclwmQXc= Subject key identifier: B2:96:BE:EB:76:93:AD:8D:A8:FB:AE:98:A6:2A:3E:BA:87:02:94:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F612D5D8AF4DD637E678C5360 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/109eee69-dfe2-3f89-b049-3c5ef42b6822.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 2001:19b0:6c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:5d:8a:f4:dd:63:7e:67:8c:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=18af096c-c6a5-42f6-ab4f-2db2dbc6ab3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:5b:95:84:72:4e:f9:1b:36:ea:88:b2:3c: 5b:d4:67:0e:59:04:3f:4e:bc:fa:c3:f6:13:a3:57: e4:09:c7:4c:4f:bc:37:8b:18:64:a5:06:13:85:54: 51:45:59:e1:b1:48:a8:42:47:d3:45:d7:63:48:e8: a3:e4:c5:76:f6:3c:d9:da:34:c6:14:63:40:5c:f7: 7e:13:64:5f:2f:c4:1e:e9:26:27:60:b4:b3:6b:25: 20:20:97:be:2d:f5:37:ed:5e:31:11:f9:da:de:58: a7:35:d0:5b:b6:63:24:e8:0f:55:a6:95:6b:aa:c5: 36:e0:7f:ac:8d:2e:b1:09:e7:47:6e:61:8d:f7:17: 73:4e:9a:3b:18:2f:f8:f8:d5:f3:b4:db:88:6b:0c: d2:43:3d:1c:71:1a:8f:ef:a1:c3:6b:35:05:75:f9: ea:58:91:6d:2f:c2:b5:5e:4d:e7:27:26:1a:c9:0e: bb:67:23:6e:5e:95:8f:64:1e:9c:40:fd:a4:1a:f4: b4:43:ce:19:f0:db:95:e7:e9:43:0f:72:6f:4e:59: 14:d7:a9:9f:e0:ed:18:6f:de:2a:7d:61:5e:3c:1e: d2:a2:44:2c:af:69:82:f2:e0:7c:15:bc:fe:db:74: 98:a3:ac:26:82:b1:13:49:11:c9:4b:48:af:ff:9a: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:96:BE:EB:76:93:AD:8D:A8:FB:AE:98:A6:2A:3E:BA:87:02:94:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/109eee69-dfe2-3f89-b049-3c5ef42b6822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:6c0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c5:71:c0:80:03:72:d9:af:5f:f2:90:3f:51:51:bc:3e:ce: de:1d:74:b6:b9:c6:79:ae:bb:4c:5e:e6:fb:1a:a8:93:f9:fe: 5b:77:25:b6:5a:43:ba:79:28:73:55:9a:4c:2a:06:97:fb:0c: 9c:20:a8:2f:e6:33:e5:6c:ec:10:a8:30:88:56:73:dd:f1:5b: 21:27:15:34:72:d3:94:bb:93:87:65:d1:02:3c:18:0e:42:63: b4:53:7f:ec:08:47:e7:d1:4e:75:6c:dc:72:ec:85:23:6e:d7: 80:62:f7:48:8d:12:37:29:8a:65:57:15:2d:d0:f0:21:e2:c9: 1d:f3:4b:56:94:0f:0d:4e:d8:16:eb:ea:79:c4:20:0a:65:a5: 07:b0:bf:6d:1e:df:cf:42:3b:67:80:3f:56:a8:82:c9:5b:61: 43:40:5b:75:c9:22:ad:5f:82:36:9f:bc:11:bc:96:04:c8:80: 03:43:3e:3f:96:7a:03:b0:e8:19:95:9b:88:36:6a:fc:2b:37: fc:59:2d:d8:f8:fc:e3:52:19:0f:a6:48:e1:30:55:f2:7b:1c: 91:36:8a:94:d1:75:ea:37:73:15:46:52:94:07:db:d9:56:02: 96:9c:43:32:05:d1:09:cb:44:8a:7f:46:bf:9c:f8:36:e9:20: a8:00:98:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLV2K9N1jfmeMU2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MThhZjA5NmMtYzZhNS00MmY2LWFiNGYtMmRiMmRiYzZhYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEZblYRyTvkbNuqIsjxb1GcOWQQ/Trz6w/YT o1fkCcdMT7w3ixhkpQYThVRRRVnhsUioQkfTRddjSOij5MV29jzZ2jTGFGNAXPd+ E2RfL8Qe6SYnYLSzayUgIJe+LfU37V4xEfna3linNdBbtmMk6A9VppVrqsU24H+s jS6xCedHbmGN9xdzTpo7GC/4+NXztNuIawzSQz0ccRqP76HDazUFdfnqWJFtL8K1 Xk3nJyYayQ67ZyNuXpWPZB6cQP2kGvS0Q84Z8NuV5+lDD3JvTlkU16mf4O0Yb94q fWFePB7SokQsr2mC8uB8Fbz+23SYo6wmgrETSRHJS0iv/5o6PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLKWvut2k62NqPuumKYqPrqHApR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA5ZWVlNjktZGZlMi0z Zjg5LWIwNDktM2M1ZWY0MmI2ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAbA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHFccCAA3LZr1/ykD9RUbw+zt4ddLa5xnmuu0xe5vsaqJP5/lt3 JbZaQ7p5KHNVmkwqBpf7DJwgqC/mM+Vs7BCoMIhWc93xWyEnFTRy05S7k4dl0QI8 GA5CY7RTf+wIR+fRTnVs3HLshSNu14Bi90iNEjcpimVXFS3Q8CHiyR3zS1aUDw1O 2Bbr6nnEIAplpQewv20e389CO2eAP1aogslbYUNAW3XJIq1fgjafvBG8lgTIgAND Pj+WegOw6BmVm4g2avwrN/xZLdj4/ONSGQ+mSOEwVfJ7HJE2ipTRdeo3cxVGUpQH 29lWApacQzIF0QnLRIp/Rr+c+DbpIKgAmGE= -----END CERTIFICATE-----Generated at Tue Oct 13 17:39:53 2026 by rpki-client