$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b62a317-3308-3118-976a-063be387e08f.roa File: 3b62a317-3308-3118-976a-063be387e08f.roa (raw, json) Hash identifier: C0czcgpmBUVx0LHMVRWprWLAVc4yK8gmq4xWy5gGhTM= Subject key identifier: 18:66:84:90:6B:E8:88:87:11:8D:5F:B6:EE:E8:CE:95:73:84:F3:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7BB2F080D1E29C7CBE19EE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b62a317-3308-3118-976a-063be387e08f.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 7029 IP address blocks: 2001:19b0:a80::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f0:80:d1:e2:9c:7c:be:19:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=f5f452eb-46c2-4bd1-af69-4817ce366495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:3f:cb:6c:05:24:33:ed:14:33:6b:47:c5: 33:75:bc:d8:1f:a0:19:71:d4:43:9d:74:b2:9d:06: 7f:ec:c3:fd:35:77:d4:2a:b4:e4:89:75:2b:2c:5b: a9:a0:9c:05:1c:26:93:55:1e:06:75:d3:eb:21:4d: 29:b0:17:d1:66:cc:33:b4:e9:8e:76:88:11:a6:17: 2a:a4:71:b3:fd:00:c0:09:e8:c7:98:41:12:9f:71: d2:82:96:0e:fd:b5:cb:87:c5:b9:0a:cb:e9:1c:a3: b2:ea:0f:a0:7a:19:f1:a6:ea:2e:f2:91:fb:2a:2e: b9:0e:42:d2:08:93:9f:2a:52:90:c2:9a:9a:c7:fd: fe:4f:2e:bd:c2:ea:8e:8d:7f:2c:f5:9a:ce:63:f8: 78:fa:86:7a:f0:4c:34:25:b7:4f:ca:ff:a0:18:ec: f9:02:d1:63:ad:ea:73:b5:04:9c:3d:33:6f:00:42: b0:2b:9e:da:9e:c4:3b:f0:39:9b:08:3a:16:c3:52: 16:f7:e7:c0:80:38:1a:c3:e7:71:9a:4b:1d:98:88: 64:e5:ce:46:4f:23:68:3c:da:34:af:38:ce:1c:5e: 53:10:51:ea:49:02:73:dc:00:47:4a:7a:5e:bd:c7: 59:39:7c:0b:cf:49:78:94:c9:0c:94:c2:38:96:23: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:84:90:6B:E8:88:87:11:8D:5F:B6:EE:E8:CE:95:73:84:F3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b62a317-3308-3118-976a-063be387e08f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:a80::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:05:f6:a8:f6:33:3b:36:31:b8:cf:6d:84:c8:42:13:4a:47: bd:ec:0e:c3:37:58:0c:56:07:6a:cd:8e:39:5a:32:4c:b7:9d: b2:42:f8:6d:28:e2:94:73:77:3d:43:7c:54:6e:56:1e:47:74: 8a:bb:27:12:7d:9f:cc:ea:33:de:25:a9:b9:a7:0c:07:fc:f2: 39:10:2a:86:5c:74:76:22:8a:cc:7d:bd:74:26:af:47:63:f2: 31:0c:05:77:8d:fd:43:19:31:3a:26:95:30:dc:57:63:ff:d1: de:e1:ca:f8:9b:9a:b8:46:aa:1e:54:53:2e:2a:79:0d:9b:dc: 51:35:8c:7b:cc:f3:10:5f:1a:b2:45:b6:66:ff:b7:3a:01:02: 56:55:c0:e8:d5:6b:6b:a0:85:cf:3f:1f:b7:e7:43:e1:ad:b1: a0:95:06:b2:f0:2f:00:41:09:e7:1f:30:63:34:be:5a:02:e2: 64:9f:e8:bb:da:79:a6:11:43:38:2b:91:1d:ce:11:7d:e0:9e: 77:e2:2e:95:cd:bd:94:99:ef:0f:0a:92:77:33:62:ab:b4:35: 9a:47:e4:a5:c2:a7:9a:b4:76:3a:fc:11:9e:14:1b:50:63:0d: ef:eb:3f:8f:11:ab:57:f5:2c:df:53:55:38:c1:85:3a:0a:b2: f9:bb:61:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE97svCA0eKcfL4Z7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk ZjVmNDUyZWItNDZjMi00YmQxLWFmNjktNDgxN2NlMzY2NDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc8/y2wFJDPtFDNrR8UzdbzYH6AZcdRDnXSy nQZ/7MP9NXfUKrTkiXUrLFupoJwFHCaTVR4GddPrIU0psBfRZswztOmOdogRphcq pHGz/QDACejHmEESn3HSgpYO/bXLh8W5CsvpHKOy6g+gehnxpuou8pH7Ki65DkLS CJOfKlKQwpqax/3+Ty69wuqOjX8s9ZrOY/h4+oZ68Ew0JbdPyv+gGOz5AtFjrepz tQScPTNvAEKwK57ansQ78DmbCDoWw1IW9+fAgDgaw+dxmksdmIhk5c5GTyNoPNo0 rzjOHF5TEFHqSQJz3ABHSnpevcdZOXwLz0l4lMkMlMI4liOAaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBhmhJBr6IiHEY1ftu7ozpVzhPMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2I2MmEzMTctMzMwOC0z MTE4LTk3NmEtMDYzYmUzODdlMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEkF9qj2Mzs2MbjPbYTIQhNKR73sDsM3WAxWB2rNjjlaMky3nbJC +G0o4pRzdz1DfFRuVh5HdIq7JxJ9n8zqM94lqbmnDAf88jkQKoZcdHYiisx9vXQm r0dj8jEMBXeN/UMZMTomlTDcV2P/0d7hyvibmrhGqh5UUy4qeQ2b3FE1jHvM8xBf GrJFtmb/tzoBAlZVwOjVa2ughc8/H7fnQ+GtsaCVBrLwLwBBCecfMGM0vloC4mSf 6LvaeaYRQzgrkR3OEX3gnnfiLpXNvZSZ7w8KknczYqu0NZpH5KXCp5q0djr8EZ4U G1BjDe/rP48Rq1f1LN9TVTjBhToKsvm7YRg= -----END CERTIFICATE-----Generated at Tue Oct 13 19:29:43 2026 by rpki-client