$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cb57849-c92e-3541-8455-ec50fe5e131b.roa File: 2cb57849-c92e-3541-8455-ec50fe5e131b.roa (raw, json) Hash identifier: krzw0+2TVy1WE/CaVNw0TV3n+/GZY1JCP0INei065C8= Subject key identifier: DC:65:AB:D4:CE:E7:97:C9:81:42:70:D3:6E:2D:B3:33:D9:A7:2F:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EDF5C8D588BA0E1D03AD5CC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cb57849-c92e-3541-8455-ec50fe5e131b.roa Signing time: Tue 18 Aug 2026 01:00:12 +0000 ROA not before: Tue 18 Aug 2026 01:00:12 +0000 ROA not after: Mon 16 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 2001:19b0:40:4000::/50 maxlen: 50 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:5c:8d:58:8b:a0:e1:d0:3a:d5:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 18 01:00:12 2026 GMT Not After : Nov 16 02:00:12 2026 GMT Subject: CN=6e7a290c-7427-4ae4-83c3-35f0f9b9cd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6d:01:6a:be:33:72:52:0b:c9:b1:51:ca:52: 9e:3f:d9:de:c6:3c:94:ba:ed:05:6b:6d:1e:c2:cf: 77:7f:dd:91:00:a4:39:80:fa:bf:aa:f7:66:fb:80: 91:2b:52:27:44:25:e6:f9:2d:b9:07:96:32:36:5b: 4b:10:18:79:de:48:02:37:59:c4:b6:db:64:9f:fb: d0:21:e0:ae:f0:83:9d:aa:c3:8b:c6:4b:8f:c6:2c: 0f:ec:3f:dd:9f:b3:d6:7d:28:e1:42:84:9c:35:b6: 98:7a:c7:92:71:46:2f:d1:86:4f:3b:17:94:9f:5a: b9:c7:c8:4e:d9:ed:e4:bc:6b:95:c2:d7:67:19:e7: dd:f6:39:ed:12:9d:2e:a9:db:4e:37:76:16:ac:44: 94:72:35:a0:30:69:92:d2:49:28:90:05:a2:36:22: 69:41:ae:f4:8f:d1:83:a7:b3:d5:1e:ec:5b:f1:ce: 0c:09:06:11:b3:8a:39:e8:a0:9d:c1:75:b0:db:08: 41:d3:a6:c2:be:c4:d5:c5:92:83:08:4b:86:2f:f5: 96:ea:d3:b7:66:20:0a:5d:6f:b8:ff:93:09:b8:0e: 28:d3:6f:2f:4d:f0:9d:73:c0:92:85:95:8e:4f:1f: 06:6b:c0:09:27:f3:e0:0d:3e:74:80:49:ea:76:b1: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:65:AB:D4:CE:E7:97:C9:81:42:70:D3:6E:2D:B3:33:D9:A7:2F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cb57849-c92e-3541-8455-ec50fe5e131b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:40:4000::/50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:19:59:b3:cc:6d:00:a4:a6:f9:cc:34:a3:7c:a7:a7:e2:7a: 86:e6:d2:8e:df:bb:3b:d7:df:d1:db:14:c5:f1:54:68:28:7b: a9:dd:64:87:1d:2d:85:17:dd:93:85:e5:c0:be:64:aa:fd:8f: 47:ca:15:94:42:fc:ac:0b:ea:fc:40:49:7e:1a:b0:11:3f:a6: 78:2a:ff:f3:68:5d:b0:1a:f8:e9:23:00:75:39:f5:8c:ef:d5: 00:67:01:1c:9e:69:db:35:96:fa:61:dc:92:2a:5b:36:95:82: 48:98:40:07:b7:6a:8b:e4:6a:3f:44:f3:35:88:80:af:78:a6: 7f:07:4e:79:b2:b4:65:1c:e7:58:db:cf:29:c4:5e:0e:da:a3: 90:ae:1b:83:f9:87:ba:08:38:99:f6:60:ba:85:2c:c7:b2:eb: 10:9e:68:05:6e:10:11:60:30:7f:51:2f:b3:3a:94:fc:16:30: aa:52:39:e2:e1:7f:8d:95:bd:b7:21:4b:88:86:ea:17:48:c4: a2:bc:c4:32:e5:27:ef:1e:c4:61:9f:ea:9b:f4:7b:fc:e7:df: 72:50:e7:60:af:c7:c9:fe:da:2b:af:5c:c8:ba:9a:68:4a:77: 15:c5:b3:d6:56:4d:94:2b:ba:8d:21:5d:0b:15:84:30:f6:e6: 15:a1:8a:48 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE7fXI1Yi6Dh0DrVzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk NmU3YTI5MGMtNzQyNy00YWU0LTgzYzMtMzVmMGY5YjljZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg20Bar4zclILybFRylKeP9nexjyUuu0Fa20e ws93f92RAKQ5gPq/qvdm+4CRK1InRCXm+S25B5YyNltLEBh53kgCN1nEtttkn/vQ IeCu8IOdqsOLxkuPxiwP7D/dn7PWfSjhQoScNbaYeseScUYv0YZPOxeUn1q5x8hO 2e3kvGuVwtdnGefd9jntEp0uqdtON3YWrESUcjWgMGmS0kkokAWiNiJpQa70j9GD p7PVHuxb8c4MCQYRs4o56KCdwXWw2whB06bCvsTVxZKDCEuGL/WW6tO3ZiAKXW+4 /5MJuA4o028vTfCdc8CShZWOTx8Ga8AJJ/PgDT50gEnqdrHWdwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFNxlq9TO55fJgUJw024tszPZpy/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmNiNTc4NDktYzkyZS0z NTQxLTg0NTUtZWM1MGZlNWUxMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgGIAEZsABA QDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQB1GVmzzG0ApKb5zDSjfKen4nqG5tKO37s719/R2xTF8VRoKHup 3WSHHS2FF92TheXAvmSq/Y9HyhWUQvysC+r8QEl+GrARP6Z4Kv/zaF2wGvjpIwB1 OfWM79UAZwEcnmnbNZb6YdySKls2lYJImEAHt2qL5Go/RPM1iICveKZ/B055srRl HOdY288pxF4O2qOQrhuD+Ye6CDiZ9mC6hSzHsusQnmgFbhARYDB/US+zOpT8FjCq Ujni4X+Nlb23IUuIhuoXSMSivMQy5SfvHsRhn+qb9Hv8599yUOdgr8fJ/torr1zI uppoSncVxbPWVk2UK7qNIV0LFYQw9uYVoYpI -----END CERTIFICATE-----Generated at Thu Aug 27 15:20:17 2026 by rpki-client