$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/507b9169-4e46-3b30-87a6-6d032f932d0b.roa File: 507b9169-4e46-3b30-87a6-6d032f932d0b.roa (raw, json) Hash identifier: opVY/3nEBpMQjSmhKAZGIwsc4UdXqhUQnaCU72/9x1M= Subject key identifier: 29:6E:3F:1D:5C:19:D1:3C:34:EA:3B:45:50:15:0A:83:83:AC:91:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D57CFA2E1C237B411FAF53700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/507b9169-4e46-3b30-87a6-6d032f932d0b.roa Signing time: Mon 30 Mar 2026 18:55:16 +0000 ROA not before: Mon 30 Mar 2026 18:55:16 +0000 ROA not after: Sun 28 Jun 2026 18:55:16 +0000 asID: 7029 IP address blocks: 2001:19b0:9c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:cf:a2:e1:c2:37:b4:11:fa:f5:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 18:55:16 2026 GMT Not After : Jun 28 18:55:16 2026 GMT Subject: CN=87b41003-3aa1-4488-83f5-f235a2fdaf6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a9:08:05:48:21:12:01:5a:fd:88:36:8b:66: 2a:0d:f4:a8:89:e8:60:40:1a:cd:1b:8d:c7:96:1a: 5d:25:14:c0:08:b2:37:24:7e:95:d8:d6:9d:cc:0f: 33:f9:11:c8:f5:f2:8c:e2:a5:56:a4:a6:2f:e2:22: 22:36:e2:f2:6a:ef:76:07:9e:f4:fe:51:10:83:bf: 45:fe:53:5b:76:83:cf:78:1f:e7:38:dc:30:80:05: 93:38:26:ac:24:1a:cc:cf:0c:b4:5c:bc:0d:e1:81: b7:c0:30:43:bb:60:0a:10:c8:f1:6e:ff:6a:ac:05: 56:cb:2d:04:fc:52:a0:99:14:0a:73:5b:5a:7a:eb: 44:3b:99:8b:34:8b:71:f1:b2:ff:b1:45:4d:b8:48: 45:4e:61:1d:4a:20:39:df:ac:0e:5f:24:f7:26:69: 0c:a7:9b:5e:5f:16:6a:4a:b1:ba:d1:cd:2c:f7:26: 2e:75:fd:f2:3d:36:9d:9f:e8:67:a5:7d:44:c3:9c: dc:8d:3f:8a:31:7a:a8:f7:22:aa:e0:a4:b0:c5:9b: b2:b8:f3:03:59:dd:50:19:39:04:6d:45:60:4c:52: a7:a8:66:3f:32:1a:e1:89:99:85:c9:68:aa:70:70: 9d:52:eb:07:a5:03:be:7c:c1:f7:34:9e:55:39:23: 24:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6E:3F:1D:5C:19:D1:3C:34:EA:3B:45:50:15:0A:83:83:AC:91:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/507b9169-4e46-3b30-87a6-6d032f932d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:9c4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:84:e3:c2:b6:66:8f:bf:a8:3e:1d:11:4c:cf:0d:77:b4:3d: a6:35:23:30:2f:ed:b1:c7:5d:e1:eb:8c:ea:11:eb:c5:b8:fa: 5e:eb:18:ea:6d:a2:6d:96:5b:e8:1a:f5:3a:b0:34:f1:3d:51: da:da:51:9e:2f:18:3e:dd:d2:ca:1b:de:2d:e7:8b:bb:ce:74: 16:9f:ba:85:34:b7:7e:a7:c3:4c:ae:b6:c7:62:01:81:c3:e9: 1c:ae:00:55:db:54:5e:de:4c:f2:b5:23:42:6f:89:c3:75:cf: 5f:68:bc:f3:e2:2e:a4:95:73:0c:60:3e:a0:9b:a6:c2:f0:d4: f9:8e:3c:25:e8:2c:e9:d2:c3:6c:d8:78:13:9c:3f:80:ab:dc: 76:8e:74:b3:20:32:ab:b8:04:19:2a:4c:33:d5:6c:72:40:ad: a8:d3:85:cf:79:e8:eb:65:67:77:20:03:a7:13:31:74:0d:6b: f7:57:fb:df:94:e1:02:9d:f5:4c:cf:c2:77:a2:08:71:62:fb: 7d:6b:20:9e:ee:ba:b0:de:61:ad:99:c8:b1:4c:18:a4:8b:e1: 43:4d:ea:b7:a2:30:2e:16:5f:a7:bc:c5:fc:bc:d8:d3:0b:39: b1:05:e5:95:18:16:89:0a:89:4d:e7:be:4b:55:9c:48:1a:56: b3:ab:b4:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Xz6Lhwje0Efr1NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDE4NTUxNloXDTI2MDYyODE4NTUxNlowLzEtMCsGA1UEAxMk ODdiNDEwMDMtM2FhMS00NDg4LTgzZjUtZjIzNWEyZmRhZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6kIBUghEgFa/Yg2i2YqDfSoiehgQBrNG43H lhpdJRTACLI3JH6V2NadzA8z+RHI9fKM4qVWpKYv4iIiNuLyau92B570/lEQg79F /lNbdoPPeB/nONwwgAWTOCasJBrMzwy0XLwN4YG3wDBDu2AKEMjxbv9qrAVWyy0E /FKgmRQKc1taeutEO5mLNItx8bL/sUVNuEhFTmEdSiA536wOXyT3JmkMp5teXxZq SrG60c0s9yYudf3yPTadn+hnpX1Ew5zcjT+KMXqo9yKq4KSwxZuyuPMDWd1QGTkE bUVgTFKnqGY/MhrhiZmFyWiqcHCdUusHpQO+fMH3NJ5VOSMkMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCluPx1cGdE8NOo7RVAVCoODrJE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTA3YjkxNjktNGU0Ni0z YjMwLTg3YTYtNmQwMzJmOTMyZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsAnE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADaE48K2Zo+/qD4dEUzPDXe0PaY1IzAv7bHHXeHrjOoR68W4+l7r GOptom2WW+ga9TqwNPE9UdraUZ4vGD7d0sob3i3ni7vOdBafuoU0t36nw0yutsdi AYHD6RyuAFXbVF7eTPK1I0JvicN1z19ovPPiLqSVcwxgPqCbpsLw1PmOPCXoLOnS w2zYeBOcP4Cr3HaOdLMgMqu4BBkqTDPVbHJArajThc956OtlZ3cgA6cTMXQNa/dX +9+U4QKd9UzPwneiCHFi+31rIJ7uurDeYa2ZyLFMGKSL4UNN6reiMC4WX6e8xfy8 2NMLObEF5ZUYFokKiU3nvktVnEgaVrOrtJk= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:46 2026 by rpki-client