$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d91f219-1d28-3d65-8234-5ac1cb6b559b.roa File: 1d91f219-1d28-3d65-8234-5ac1cb6b559b.roa (raw, json) Hash identifier: JJ7paJNmnjUWs30WULt0G8LaTq1rdPl6KSw62M8+2r0= Subject key identifier: 86:AB:01:A1:06:E5:CC:3B:01:87:12:A8:9D:3D:63:1D:D2:C0:2E:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5F7FAC9719F96B43266556E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d91f219-1d28-3d65-8234-5ac1cb6b559b.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 2001:19b0:49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:ac:97:19:f9:6b:43:26:65:56:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=ba581d82-84e6-4978-8bb7-0e9aabf35052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:6c:e3:70:1b:11:2e:f7:6e:51:b7:81:5c: 04:b5:16:4b:1a:47:ff:da:14:25:3d:ce:d3:6a:45: 7d:ab:15:e5:e1:c4:25:70:91:45:c5:c4:c7:4b:e4: ed:59:dc:80:49:5b:d2:ab:e8:75:23:cd:27:db:a8: 75:8e:8d:10:b6:fe:01:ce:b0:5f:45:b5:97:73:0c: 9d:78:62:d8:cc:ff:05:66:7c:3c:9c:6a:2c:eb:36: 6e:c5:d6:80:cf:b9:f7:47:71:81:10:5f:4d:2a:ba: 17:ab:b3:4a:52:ce:83:fb:3b:b9:c8:91:fb:12:86: 27:28:d5:e1:21:f8:d9:58:f8:6e:b5:65:e5:a8:28: 29:66:8c:7d:2c:30:c4:0a:b5:20:5a:de:11:d7:3f: f6:14:15:85:83:ec:1a:3e:ea:85:c6:78:46:2b:18: 9a:cc:e1:17:b6:88:e2:f2:4f:7f:6f:2b:83:d7:13: b5:a4:4b:ba:16:7e:e8:f5:65:95:38:35:d5:c0:a6: 8d:3f:64:03:a8:a7:e0:47:5a:f5:7d:e1:eb:3c:67: d8:a5:ea:bf:84:0f:83:1e:5c:f5:42:2d:4e:58:46: e7:48:74:70:8f:8e:4d:bf:0b:bb:a5:f9:2b:44:62: d5:b2:4f:27:7a:70:8f:6d:81:c7:68:9a:06:96:5a: c7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AB:01:A1:06:E5:CC:3B:01:87:12:A8:9D:3D:63:1D:D2:C0:2E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d91f219-1d28-3d65-8234-5ac1cb6b559b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:49::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:de:c5:30:85:d3:37:f3:d9:72:63:c8:e4:2b:77:5d:82:fc: 85:65:4b:e8:47:27:4b:29:7c:72:8e:2c:c8:cb:d7:92:e0:c0: fa:75:bc:2d:b8:95:22:e9:5c:bb:28:ec:2e:fc:f2:2c:43:b2: ca:9f:f6:a2:ce:71:5f:ed:ca:cb:11:75:70:10:0b:dc:9d:33: 4b:42:70:84:83:24:ed:b0:5f:b4:52:4b:56:37:bf:9b:82:64: e7:4b:7d:c7:72:1c:de:dc:a6:b3:76:1b:96:8d:64:fe:51:35: b3:cf:cd:ae:a9:6e:89:65:f9:76:ad:a5:8b:c3:4b:c3:8e:f2: bd:8b:5b:4b:2d:ac:ca:d6:e2:97:e8:be:14:9c:2c:15:04:6f: 4d:c4:68:14:33:57:a4:9d:6f:4a:74:4d:2c:00:e1:2f:07:32: 57:e3:fa:13:98:21:d6:fc:ac:9f:ed:fd:d8:54:82:68:68:60: 9f:ff:fc:b0:d9:dc:e5:4a:c6:32:aa:37:33:06:d6:7c:d8:09: bb:9a:eb:a0:fe:97:53:8d:36:1c:3e:05:8b:fe:14:c3:30:7f: b7:4f:8a:9f:d5:07:54:99:5c:b5:34:db:3e:1a:d8:33:b8:ff: 9a:af:98:49:ce:8c:1a:78:bb:73:79:4b:5d:42:62:5b:d3:26: 01:29:2e:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ff6yXGflrQyZlVuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk YmE1ODFkODItODRlNi00OTc4LThiYjctMGU5YWFiZjM1MDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkZs43AbES73blG3gVwEtRZLGkf/2hQlPc7T akV9qxXl4cQlcJFFxcTHS+TtWdyASVvSq+h1I80n26h1jo0Qtv4BzrBfRbWXcwyd eGLYzP8FZnw8nGos6zZuxdaAz7n3R3GBEF9NKroXq7NKUs6D+zu5yJH7EoYnKNXh IfjZWPhutWXlqCgpZox9LDDECrUgWt4R1z/2FBWFg+waPuqFxnhGKxiazOEXtoji 8k9/byuD1xO1pEu6Fn7o9WWVODXVwKaNP2QDqKfgR1r1feHrPGfYpeq/hA+DHlz1 Qi1OWEbnSHRwj45Nvwu7pfkrRGLVsk8nenCPbYHHaJoGllrHOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIarAaEG5cw7AYcSqJ09Yx3SwC6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWQ5MWYyMTktMWQyOC0z ZDY1LTgyMzQtNWFjMWNiNmI1NTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTexTCF0zfz2XJjyOQrd12C/IVlS+hHJ0spfHKOLMjL15LgwPp1 vC24lSLpXLso7C788ixDssqf9qLOcV/tyssRdXAQC9ydM0tCcISDJO2wX7RSS1Y3 v5uCZOdLfcdyHN7cprN2G5aNZP5RNbPPza6pboll+XatpYvDS8OO8r2LW0strMrW 4pfovhScLBUEb03EaBQzV6Sdb0p0TSwA4S8HMlfj+hOYIdb8rJ/t/dhUgmhoYJ// /LDZ3OVKxjKqNzMG1nzYCbua66D+l1ONNhw+BYv+FMMwf7dPip/VB1SZXLU02z4a 2DO4/5qvmEnOjBp4u3N5S11CYlvTJgEpLmk= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:26 2026 by rpki-client