$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c790427-8245-3b89-8f6a-26331ef67d65.roa File: 1c790427-8245-3b89-8f6a-26331ef67d65.roa (raw, json) Hash identifier: lF7Zugk43u+Ug60mkjwd+Ptutd7JoqJ8pntm1JkjWqM= Subject key identifier: 80:4B:BB:4E:86:F9:F3:3A:05:63:7C:01:7C:9E:A6:6E:BD:2D:8C:E5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D624A5AF9EFC521161070A200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c790427-8245-3b89-8f6a-26331ef67d65.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 2001:19b0:4b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:5a:f9:ef:c5:21:16:10:70:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=84fa7fec-ed37-4bdf-a67c-565c62fe1886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:d8:d1:a4:67:e1:0b:1c:cc:a2:b8:6a:61: d6:7c:66:74:f6:9a:53:6d:0a:60:8f:e1:09:6c:01: 82:1a:df:7c:88:53:da:cd:6c:b2:a6:2f:99:83:8f: 10:4a:46:19:f4:bf:3b:eb:a5:9a:0d:c6:91:48:8f: 38:8b:20:9b:df:05:0e:86:c2:4f:80:53:7a:c1:c3: 1d:ee:94:e7:b8:f5:cf:34:95:57:e1:21:2a:c2:3f: 29:03:61:c7:11:7c:63:d5:38:b0:64:30:ce:a2:70: 0e:ac:6b:d9:60:6e:f6:a2:62:02:86:70:f7:35:7d: f4:fd:dd:5f:2d:3b:b2:10:ca:00:a1:a2:14:ad:04: bb:82:fd:f7:2b:82:0c:fd:ec:96:65:e0:a3:6e:8d: 53:7b:3c:dd:58:94:1c:f1:6e:50:3f:15:8b:0d:9b: e4:f2:72:3e:0c:de:d5:fb:2a:7f:f5:95:b8:0e:4c: 68:1c:12:d7:e1:69:5b:f0:9c:e4:9c:e1:01:f5:22: 10:8c:c2:03:6d:f0:52:50:3c:1b:76:45:9b:72:8a: 2b:96:ec:07:5d:4e:76:25:f3:be:da:5f:5c:49:a7: 3e:f3:17:36:bf:81:81:95:43:37:c6:b3:ff:20:74: eb:79:78:0f:52:52:38:3f:02:88:31:dc:c9:90:7a: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4B:BB:4E:86:F9:F3:3A:05:63:7C:01:7C:9E:A6:6E:BD:2D:8C:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c790427-8245-3b89-8f6a-26331ef67d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:4b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:98:49:88:b7:74:49:cf:f5:21:11:56:4f:68:a3:ae:ba:4c: 51:44:00:16:6b:7f:e2:ea:63:cb:0c:4d:30:95:79:da:c4:b3: 5e:22:bc:c5:cd:19:7b:8d:47:5f:f4:53:58:6d:0b:38:fa:70: b4:23:03:65:27:36:ff:91:99:af:a8:2e:07:d4:2d:a3:fd:43: f5:c3:75:19:4d:c1:92:ad:f7:92:b5:28:54:bc:7e:f4:33:68: e4:67:e5:c5:ea:9a:d8:8d:c3:af:79:9f:cd:d3:45:23:ff:c6: 15:d6:dc:e0:36:a4:30:29:d7:6a:ed:59:fd:a6:4b:ed:31:e5: 29:3f:d1:2e:09:5b:2b:b5:3c:8f:0b:45:65:6e:ac:3f:fb:08: 25:93:05:5c:0f:d6:ab:3a:cb:32:fb:a0:13:2c:d2:38:4a:f9: af:23:0d:4c:e7:91:26:14:9a:84:c4:f2:1b:42:af:b7:41:35: bb:2e:e7:aa:f4:05:fd:19:19:8c:b9:d7:45:0a:df:cc:0e:75: b9:04:5f:d0:05:2d:2c:be:9c:38:32:bb:bb:86:22:53:86:3f: dc:5f:67:2d:7c:2d:9e:be:20:58:9a:69:5d:3a:5c:36:7f:df: 14:26:f9:b9:ec:5d:ae:20:b9:ba:69:f4:c4:d9:f6:f3:ad:aa: 28:4c:8c:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1iSlr578UhFhBwogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk ODRmYTdmZWMtZWQzNy00YmRmLWE2N2MtNTY1YzYyZmUxODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZLY0aRn4QsczKK4amHWfGZ09ppTbQpgj+EJ bAGCGt98iFPazWyypi+Zg48QSkYZ9L8766WaDcaRSI84iyCb3wUOhsJPgFN6wcMd 7pTnuPXPNJVX4SEqwj8pA2HHEXxj1TiwZDDOonAOrGvZYG72omIChnD3NX30/d1f LTuyEMoAoaIUrQS7gv33K4IM/eyWZeCjbo1TezzdWJQc8W5QPxWLDZvk8nI+DN7V +yp/9ZW4DkxoHBLX4Wlb8JzknOEB9SIQjMIDbfBSUDwbdkWbcoorluwHXU52JfO+ 2l9cSac+8xc2v4GBlUM3xrP/IHTreXgPUlI4PwKIMdzJkHoYCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIBLu06G+fM6BWN8AXyepm69LYzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWM3OTA0MjctODI0NS0z Yjg5LThmNmEtMjYzMzFlZjY3ZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACSYSYi3dEnP9SERVk9oo666TFFEABZrf+LqY8sMTTCVedrEs14i vMXNGXuNR1/0U1htCzj6cLQjA2UnNv+Rma+oLgfULaP9Q/XDdRlNwZKt95K1KFS8 fvQzaORn5cXqmtiNw695n83TRSP/xhXW3OA2pDAp12rtWf2mS+0x5Sk/0S4JWyu1 PI8LRWVurD/7CCWTBVwP1qs6yzL7oBMs0jhK+a8jDUznkSYUmoTE8htCr7dBNbsu 56r0Bf0ZGYy510UK38wOdbkEX9AFLSy+nDgyu7uGIlOGP9xfZy18LZ6+IFiaaV06 XDZ/3xQm+bnsXa4gubpp9MTZ9vOtqihMjKo= -----END CERTIFICATE-----Generated at Mon Apr 13 11:42:11 2026 by rpki-client