$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d2b8b65-50cd-341f-87cb-590b8b383890.roa File: 4d2b8b65-50cd-341f-87cb-590b8b383890.roa (raw, json) Hash identifier: j2PgQnM990W7XELntYGabRI/TIG7WW8UL2vJ0xwzZ9c= Subject key identifier: F2:73:85:11:90:09:63:F4:9A:51:9F:CD:A8:07:8A:4A:CB:46:E7:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5F7FA09FB1B002EEC16A55C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d2b8b65-50cd-341f-87cb-590b8b383890.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 2001:19b0:100::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:a0:9f:b1:b0:02:ee:c1:6a:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=346315fb-bb35-4306-9db8-c980ad9908d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:ef:51:e8:4d:c4:bd:8a:0f:ca:27:ff:77: 86:68:f3:bf:a6:79:17:14:63:a5:a7:43:9a:e1:88: 2f:2d:22:d9:d3:b5:43:a4:91:1e:40:1f:f9:72:af: 20:0b:be:5d:f7:47:93:fa:0f:00:6b:cb:78:1a:3d: 03:f0:98:e7:a3:21:00:a2:ca:95:b8:83:18:2b:46: b7:cb:49:c9:9b:83:4a:91:39:83:90:0c:aa:17:fa: e5:fc:32:d6:c5:83:e2:ac:1c:2f:18:46:54:f9:2f: 6e:81:b8:48:a6:43:19:15:49:3e:26:f7:45:4d:85: ea:64:4d:b5:77:62:6b:e7:bb:d1:26:56:50:bf:8f: 31:26:12:9b:56:ce:8e:c7:22:dd:f6:6a:6d:9c:73: 0b:9f:53:a8:42:d5:28:98:ea:9a:46:8c:87:3a:bf: 27:f3:ec:f4:ad:28:02:52:ef:51:f3:ea:ad:81:e6: f7:ae:35:7b:92:5c:1e:8a:a2:c2:37:ef:f6:36:22: 41:7e:64:18:ec:22:33:df:d4:dd:02:92:d0:ff:37: 2d:b7:df:8b:11:66:13:34:31:a3:b6:9d:c7:2b:9b: 33:46:35:c2:a1:2a:5b:5b:1b:80:80:47:23:e8:b2: 25:fb:d4:3a:ee:7a:1b:81:46:48:cc:9b:7a:a4:f1: 90:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:85:11:90:09:63:F4:9A:51:9F:CD:A8:07:8A:4A:CB:46:E7:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d2b8b65-50cd-341f-87cb-590b8b383890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:100::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:41:c4:a7:f2:bc:79:08:f7:45:dd:60:b2:df:f8:6e:cf:82: 6c:34:11:57:a0:12:49:4f:1d:03:ed:74:aa:6b:c5:8f:7e:c4: 1f:48:9e:75:f2:a3:e9:61:a3:91:ba:5a:80:01:5d:81:00:fd: 77:f4:da:47:ad:bf:67:2c:5d:5a:fd:8e:17:c6:e1:96:78:3f: fe:fc:d1:09:d3:d8:8c:d5:40:05:03:a7:4c:0c:a1:d8:b7:36: 54:29:12:a4:78:9c:77:b9:e5:90:7c:60:e4:bb:b7:6d:89:41: b2:ef:fe:da:3a:52:9c:63:4d:3d:1e:f5:93:1b:63:b4:04:9a: c8:b6:fc:58:d2:ca:d7:f8:b1:bc:19:3e:7d:11:35:95:27:7c: 9e:2d:78:87:cf:9f:25:65:e0:17:4e:f3:b0:f4:f9:f7:86:b2: 7a:b0:79:15:17:8c:27:d4:12:22:99:30:4f:41:a9:23:73:c9: 37:3a:63:36:57:53:62:f4:28:6a:96:fe:48:5b:28:eb:8a:9b: 8d:bc:13:b3:e2:f1:81:0d:38:88:93:b3:55:2f:43:c6:81:f7: 0c:2b:3d:79:9d:0c:58:3a:5d:3b:90:df:15:32:d1:05:4d:2d: 4d:67:e9:0c:44:e7:99:49:fa:2c:17:3b:31:9f:88:c7:0e:6f: 60:cb:4e:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ff6CfsbAC7sFqVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk MzQ2MzE1ZmItYmIzNS00MzA2LTlkYjgtYzk4MGFkOTkwOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+fvUehNxL2KD8on/3eGaPO/pnkXFGOlp0Oa 4YgvLSLZ07VDpJEeQB/5cq8gC75d90eT+g8Aa8t4Gj0D8JjnoyEAosqVuIMYK0a3 y0nJm4NKkTmDkAyqF/rl/DLWxYPirBwvGEZU+S9ugbhIpkMZFUk+JvdFTYXqZE21 d2Jr57vRJlZQv48xJhKbVs6OxyLd9mptnHMLn1OoQtUomOqaRoyHOr8n8+z0rSgC Uu9R8+qtgeb3rjV7klweiqLCN+/2NiJBfmQY7CIz39TdApLQ/zctt9+LEWYTNDGj tp3HK5szRjXCoSpbWxuAgEcj6LIl+9Q67nobgUZIzJt6pPGQ9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPJzhRGQCWP0mlGfzagHikrLRud/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGQyYjhiNjUtNTBjZC0z NDFmLTg3Y2ItNTkwYjhiMzgzODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA5BxKfyvHkI90XdYLLf+G7Pgmw0EVegEklPHQPtdKprxY9+xB9I nnXyo+lho5G6WoABXYEA/Xf02ketv2csXVr9jhfG4ZZ4P/780QnT2IzVQAUDp0wM odi3NlQpEqR4nHe55ZB8YOS7t22JQbLv/to6UpxjTT0e9ZMbY7QEmsi2/FjSytf4 sbwZPn0RNZUnfJ4teIfPnyVl4BdO87D0+feGsnqweRUXjCfUEiKZME9BqSNzyTc6 YzZXU2L0KGqW/khbKOuKm428E7Pi8YENOIiTs1UvQ8aB9wwrPXmdDFg6XTuQ3xUy 0QVNLU1n6QxE55lJ+iwXOzGfiMcOb2DLTqE= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:12 2026 by rpki-client