$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14f81da7-21cb-3e26-9ec4-a151898a1a4c.roa File: 14f81da7-21cb-3e26-9ec4-a151898a1a4c.roa (raw, json) Hash identifier: mLR4f+CLIoVbqFhATgXGR5Xm/lub4bh5qga/hPVzzJs= Subject key identifier: 12:35:E3:21:E6:C9:F9:39:63:2E:20:AD:35:02:94:DF:15:50:DA:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5CB4F0A76605C5D889813980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14f81da7-21cb-3e26-9ec4-a151898a1a4c.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 7029 IP address blocks: 2001:19b0:80::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f0:a7:66:05:c5:d8:89:81:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=e22eb355-cde0-46c8-bc35-30067ff8903d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:f2:6f:fa:be:d4:fe:7c:d9:b3:c5:db:fc: 2b:5b:9a:de:a1:27:4f:49:04:f0:53:62:02:b9:74: c6:fd:46:d6:c3:3b:4c:c7:2e:70:ae:1a:73:2a:60: d9:f9:7a:77:45:23:10:58:b4:f4:99:8f:1d:66:63: 84:e0:9e:77:06:8a:71:a0:37:9a:34:67:00:75:a7: 9a:3a:bf:a3:2d:9f:97:4f:50:c2:29:60:fc:52:98: 77:ae:ce:77:4a:3e:30:a0:1c:c2:b9:6d:c1:51:21: a3:76:3e:87:00:bc:d6:73:b3:ef:25:8a:97:fd:8e: 20:8a:70:77:4e:f7:8e:3c:3a:4b:5b:35:ef:c4:d1: b9:40:f4:f9:68:89:53:f3:cd:4a:72:a9:1d:73:f1: cf:6c:74:ec:59:46:c3:4f:e4:78:07:c6:a3:7f:dc: e4:fc:be:77:f7:1b:e6:fc:4c:2c:38:bd:f3:58:51: 43:72:2e:be:d0:79:d8:93:ed:ec:27:d6:dd:57:1b: 7a:51:aa:b1:42:2e:a7:ae:87:31:48:f5:47:49:75: 97:d9:84:56:0b:51:49:c1:b7:6f:fe:98:35:fe:f1: 51:42:51:91:c6:c9:12:ec:38:12:dc:3a:ae:75:32: 73:5c:b2:bb:d3:09:7d:0a:4f:34:82:29:fb:6e:fb: 24:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:35:E3:21:E6:C9:F9:39:63:2E:20:AD:35:02:94:DF:15:50:DA:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14f81da7-21cb-3e26-9ec4-a151898a1a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:80::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:71:dc:20:f9:98:27:ba:ad:e1:e7:67:99:5c:46:7d:4a:ea: df:af:70:06:5e:0c:ee:0b:0f:91:0d:e8:e6:a0:25:79:3c:60: 90:67:49:4d:6b:ac:d2:ec:ad:8c:e0:35:06:8f:3e:bb:38:c1: 86:1d:46:9a:46:9b:57:b1:8e:4b:68:46:ad:ba:4e:08:5f:b2: 39:a1:69:d8:17:69:cf:ac:1d:a1:b1:83:68:79:30:ed:c8:e8: e1:92:22:c1:6a:07:3e:4a:6c:fe:11:d4:ab:bf:65:49:19:b4: 4d:bf:75:0e:d4:37:6b:c5:5c:f9:6e:13:89:68:3f:80:d1:2c: 37:9d:3e:ae:e5:bc:10:5f:ce:23:71:a1:06:04:b6:02:bd:26: 75:41:1f:4d:b9:12:48:c5:39:de:ab:99:08:4a:ec:81:bd:e6: 93:1e:0a:06:68:d7:82:ad:0f:6f:98:7b:09:3a:4e:eb:be:97: f9:4a:5a:6e:67:3f:d7:4f:e6:4d:4c:5a:32:a7:0d:2b:f0:74: ff:a7:53:61:e4:82:fc:ba:15:e0:58:00:59:16:5f:b0:2f:de: 38:b5:8f:b4:54:43:cf:a1:da:53:c5:13:7f:fc:20:e7:b2:82: 2f:61:1c:a5:16:50:9f:e9:b0:65:41:e0:50:78:6c:45:65:8d: 17:26:c0:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ctPCnZgXF2ImBOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk ZTIyZWIzNTUtY2RlMC00NmM4LWJjMzUtMzAwNjdmZjg5MDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJPyb/q+1P582bPF2/wrW5reoSdPSQTwU2IC uXTG/UbWwztMxy5wrhpzKmDZ+Xp3RSMQWLT0mY8dZmOE4J53BopxoDeaNGcAdaea Or+jLZ+XT1DCKWD8Uph3rs53Sj4woBzCuW3BUSGjdj6HALzWc7PvJYqX/Y4ginB3 TveOPDpLWzXvxNG5QPT5aIlT881Kcqkdc/HPbHTsWUbDT+R4B8ajf9zk/L539xvm /EwsOL3zWFFDci6+0HnYk+3sJ9bdVxt6UaqxQi6nrocxSPVHSXWX2YRWC1FJwbdv /pg1/vFRQlGRxskS7DgS3DqudTJzXLK70wl9Ck80gin7bvskfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBI14yHmyfk5Yy4grTUClN8VUNpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTRmODFkYTctMjFjYi0z ZTI2LTllYzQtYTE1MTg5OGExYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEhx3CD5mCe6reHnZ5lcRn1K6t+vcAZeDO4LD5EN6OagJXk8YJBn SU1rrNLsrYzgNQaPPrs4wYYdRppGm1exjktoRq26TghfsjmhadgXac+sHaGxg2h5 MO3I6OGSIsFqBz5KbP4R1Ku/ZUkZtE2/dQ7UN2vFXPluE4loP4DRLDedPq7lvBBf ziNxoQYEtgK9JnVBH025EkjFOd6rmQhK7IG95pMeCgZo14KtD2+Yewk6Tuu+l/lK Wm5nP9dP5k1MWjKnDSvwdP+nU2Hkgvy6FeBYAFkWX7Av3ji1j7RUQ8+h2lPFE3/8 IOeygi9hHKUWUJ/psGVB4FB4bEVljRcmwGc= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:57 2026 by rpki-client