$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20a6bd82-5fe0-3ad9-b08e-557f4457ba73.roa File: 20a6bd82-5fe0-3ad9-b08e-557f4457ba73.roa (raw, json) Hash identifier: xDCMvDYn5g9AnjzQm/Cn/mve89zfpITjDy5RW9HChJk= Subject key identifier: 5C:68:9C:DF:65:E6:8E:BE:B0:10:AB:47:35:76:84:BB:C9:CE:4F:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EBDDC5AB1F79CEE41A78BE9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20a6bd82-5fe0-3ad9-b08e-557f4457ba73.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 2001:19b0:7a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:5a:b1:f7:9c:ee:41:a7:8b:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=42582e4a-bf8c-493b-9f3e-823408d3cfab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:77:4d:8a:cf:6b:d7:98:51:82:0d:89:04: 7c:79:6d:9e:05:30:73:7b:d5:4d:ae:78:5d:97:6c: 42:ab:b9:47:e1:22:ef:70:5d:12:7e:e1:d2:88:38: 7b:a0:0e:e8:02:34:76:be:43:62:0e:14:99:47:c2: 23:44:a8:b1:51:a5:9b:5b:0a:49:17:cd:d4:b6:f4: 44:d5:0e:d7:29:b7:e3:fc:d7:81:b3:8e:48:af:ff: 62:aa:c7:31:e3:2d:48:54:d4:c3:5c:d3:3f:72:8b: 3d:e3:6c:bd:d1:62:29:29:af:91:05:55:e8:00:9b: 72:98:ee:90:0e:d1:5f:8c:5a:e1:72:35:bb:7e:da: f4:ea:d7:0f:db:a5:81:cf:24:98:fe:03:64:e7:e1: cc:33:f8:62:74:2d:56:2b:78:ce:b7:a1:71:01:f8: 0d:62:ae:85:9e:b8:20:df:b0:78:bf:9b:5e:e9:36: 56:17:d0:a4:50:cc:ed:64:cb:87:c7:61:7c:87:df: a3:04:46:a7:51:b2:fa:7f:e9:2c:02:b2:9e:fb:79: 94:9a:fa:61:27:40:bc:6e:97:6e:d9:2f:fb:c1:3c: cc:2d:39:05:66:d4:2f:e6:4d:b8:65:98:73:88:7d: 6d:9e:97:89:31:28:b4:f8:25:0f:5d:de:cd:d7:47: 4a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:68:9C:DF:65:E6:8E:BE:B0:10:AB:47:35:76:84:BB:C9:CE:4F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20a6bd82-5fe0-3ad9-b08e-557f4457ba73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:7a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4c:5d:8a:e8:2a:66:50:12:95:70:1a:df:a4:d3:f2:d7:9f: 4e:d5:78:2d:7a:8a:51:b5:87:f8:a0:73:52:b2:9d:45:6b:96: 07:9c:20:c2:dc:8d:b0:ff:c8:0b:92:e3:81:2a:f1:be:16:41: 31:f5:06:a0:a1:c6:14:bb:9b:48:ff:8f:c5:91:28:c2:61:8b: a5:1d:4c:e5:65:b4:05:26:61:7b:83:cb:c3:81:3c:ad:aa:10: 0c:68:e3:4a:56:de:1a:ea:82:6d:b4:bc:73:6b:ee:63:1f:69: 90:f1:6a:9f:76:c5:40:a9:91:9e:a2:5f:6a:2d:5d:1f:63:09: dc:7f:61:38:81:61:ca:2d:b7:b6:90:80:63:eb:67:0b:f7:bc: 07:50:36:58:6d:25:11:89:5d:4d:99:c8:c9:a0:f1:63:c1:ba: a0:37:a7:0b:2d:1b:1e:26:d1:47:97:62:30:fa:1a:f0:9f:b8: 0b:c7:d2:20:c0:48:51:05:fb:5d:9b:e5:ac:08:3e:0d:6f:eb: 99:ad:12:a5:f2:6c:8f:dd:6d:4a:a2:9f:f7:f9:1d:eb:c5:8f: a9:a4:ed:39:71:09:16:03:42:1e:47:b5:84:8d:31:71:d6:a5: 3a:43:35:9f:b6:60:56:c6:1d:c5:ef:81:24:af:71:e1:ed:61: 6f:15:f2:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE693Fqx95zuQaeL6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk NDI1ODJlNGEtYmY4Yy00OTNiLTlmM2UtODIzNDA4ZDNjZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBV3TYrPa9eYUYINiQR8eW2eBTBze9VNrnhd l2xCq7lH4SLvcF0SfuHSiDh7oA7oAjR2vkNiDhSZR8IjRKixUaWbWwpJF83UtvRE 1Q7XKbfj/NeBs45Ir/9iqscx4y1IVNTDXNM/cos942y90WIpKa+RBVXoAJtymO6Q DtFfjFrhcjW7ftr06tcP26WBzySY/gNk5+HMM/hidC1WK3jOt6FxAfgNYq6Fnrgg 37B4v5te6TZWF9CkUMztZMuHx2F8h9+jBEanUbL6f+ksArKe+3mUmvphJ0C8bpdu 2S/7wTzMLTkFZtQv5k24ZZhziH1tnpeJMSi0+CUPXd7N10dKLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFxonN9l5o6+sBCrRzV2hLvJzk+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjBhNmJkODItNWZlMC0z YWQ5LWIwOGUtNTU3ZjQ0NTdiYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsAB6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABMXYroKmZQEpVwGt+k0/LXn07VeC16ilG1h/igc1KynUVrlgec IMLcjbD/yAuS44Eq8b4WQTH1BqChxhS7m0j/j8WRKMJhi6UdTOVltAUmYXuDy8OB PK2qEAxo40pW3hrqgm20vHNr7mMfaZDxap92xUCpkZ6iX2otXR9jCdx/YTiBYcot t7aQgGPrZwv3vAdQNlhtJRGJXU2ZyMmg8WPBuqA3pwstGx4m0UeXYjD6GvCfuAvH 0iDASFEF+12b5awIPg1v65mtEqXybI/dbUqin/f5HevFj6mk7TlxCRYDQh5HtYSN MXHWpTpDNZ+2YFbGHcXvgSSvceHtYW8V8vY= -----END CERTIFICATE-----Generated at Thu Aug 27 12:30:34 2026 by rpki-client