$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c1b8b99-e45e-3739-a022-cac5ac5d155f.roa File: 3c1b8b99-e45e-3739-a022-cac5ac5d155f.roa (raw, json) Hash identifier: n35oguiGlCGeytmn4iSQV3bnWJ/Lgest8cx6kGXaN5M= Subject key identifier: 19:03:35:38:E7:65:64:BA:B1:F8:3E:DE:25:C2:75:59:47:A2:AE:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F612D5C87D680BEB7C30EDB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c1b8b99-e45e-3739-a022-cac5ac5d155f.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 2001:19b0:7c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:5c:87:d6:80:be:b7:c3:0e:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=7efa6e5d-cc23-471a-9ed1-e2010122b8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b9:57:9a:13:e6:6a:fb:33:dc:34:08:25:04: 69:50:66:fb:85:3c:27:d3:ec:b2:b8:0f:d2:74:ee: 9e:d3:6d:01:f0:a2:36:50:a6:b7:76:b7:39:3a:63: e7:1a:14:8b:cd:f2:89:bc:43:02:56:90:ce:6e:1c: f7:7e:80:f4:c2:93:6d:bb:8d:08:cf:00:78:de:e5: d0:8d:f9:4b:b4:0f:b0:9b:7c:b8:8a:62:83:b6:55: 75:76:ec:f1:2b:b3:5f:b1:41:30:5b:28:dc:38:ae: eb:d3:e4:46:90:c3:37:e0:7c:6e:a0:9e:7c:cb:28: 07:08:02:9a:36:de:fd:11:96:ee:b7:ff:6a:d8:4d: 0e:30:c4:0d:4e:0f:13:bf:1b:bd:07:13:86:75:fc: fe:e9:bb:f3:5e:b3:27:03:d6:c5:ed:b6:2c:66:26: 84:e9:b4:82:4b:e4:2e:02:39:1e:39:b6:9e:0a:c4: 3f:8a:a3:f5:64:db:25:6c:04:bd:5d:19:20:bb:6d: 20:ac:8a:72:e6:b1:9a:7c:1c:77:35:eb:a4:e6:fb: bb:4e:c0:66:54:a2:e7:6a:76:08:0b:3c:5b:33:10: a2:14:f6:ef:05:9b:a0:a5:fb:6c:6e:ac:6a:6b:03: df:b6:8b:8b:44:3c:f2:1c:95:94:01:fe:ab:11:cc: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:03:35:38:E7:65:64:BA:B1:F8:3E:DE:25:C2:75:59:47:A2:AE:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c1b8b99-e45e-3739-a022-cac5ac5d155f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:7c0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e1:d2:a7:44:51:2a:b8:84:e9:22:60:8b:60:aa:62:88:de: 1b:3e:e4:ca:f8:4b:78:1c:73:06:4f:8e:a1:97:dc:11:d9:06: f7:f7:05:87:30:f0:6c:7e:72:c5:3a:51:85:af:54:45:5b:aa: 62:39:b2:51:1e:87:bd:81:22:71:42:b4:95:67:42:92:c3:1d: 37:3c:89:7c:42:ea:85:59:70:9e:d4:12:5f:79:cb:d8:24:e1: f6:00:fb:d6:1c:76:16:3c:89:79:6b:19:cc:d0:ae:5b:a6:04: 32:1e:ef:4a:bb:29:49:be:72:0c:ed:05:fe:5f:1a:c1:43:d4: 6b:cc:94:e3:62:bb:0d:d2:09:95:c2:45:b0:37:1b:1f:04:3a: 38:6d:b3:37:d7:40:70:6f:e5:0c:f2:54:c5:2c:c6:8c:67:84: e3:b0:c7:ef:a4:58:b3:50:bd:72:fe:67:9d:81:fe:bf:1b:12: 64:a4:dc:33:1d:06:09:c9:c2:e0:80:f0:d9:62:1f:f7:d8:3e: d9:0d:46:e4:e8:87:df:64:24:52:9a:2a:78:cc:2a:ff:c7:df: ac:6c:1c:51:8c:22:a1:6f:3a:7c:3f:67:f1:10:65:e7:b4:23: 35:a4:6b:e2:ce:91:01:d0:36:b2:35:f7:64:5d:d4:54:2f:54: 19:b1:e7:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLVyH1oC+t8MO24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk N2VmYTZlNWQtY2MyMy00NzFhLTllZDEtZTIwMTAxMjJiOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhblXmhPmavsz3DQIJQRpUGb7hTwn0+yyuA/S dO6e020B8KI2UKa3drc5OmPnGhSLzfKJvEMCVpDObhz3foD0wpNtu40IzwB43uXQ jflLtA+wm3y4imKDtlV1duzxK7NfsUEwWyjcOK7r0+RGkMM34HxuoJ58yygHCAKa Nt79EZbut/9q2E0OMMQNTg8Tvxu9BxOGdfz+6bvzXrMnA9bF7bYsZiaE6bSCS+Qu AjkeObaeCsQ/iqP1ZNslbAS9XRkgu20grIpy5rGafBx3Neuk5vu7TsBmVKLnanYI CzxbMxCiFPbvBZugpftsbqxqawPftouLRDzyHJWUAf6rEcxj+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBkDNTjnZWS6sfg+3iXCdVlHoq5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2MxYjhiOTktZTQ1ZS0z NzM5LWEwMjItY2FjNWFjNWQxNTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAfA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/h0qdEUSq4hOkiYItgqmKI3hs+5Mr4S3gccwZPjqGX3BHZBvf3 BYcw8Gx+csU6UYWvVEVbqmI5slEeh72BInFCtJVnQpLDHTc8iXxC6oVZcJ7UEl95 y9gk4fYA+9YcdhY8iXlrGczQrlumBDIe70q7KUm+cgztBf5fGsFD1GvMlONiuw3S CZXCRbA3Gx8EOjhtszfXQHBv5QzyVMUsxoxnhOOwx++kWLNQvXL+Z52B/r8bEmSk 3DMdBgnJwuCA8NliH/fYPtkNRuToh99kJFKaKnjMKv/H36xsHFGMIqFvOnw/Z/EQ Zee0IzWka+LOkQHQNrI192Rd1FQvVBmx5/c= -----END CERTIFICATE-----Generated at Tue Oct 13 12:52:09 2026 by rpki-client