$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/560e0bda-01bb-3446-bc1b-f4f5c493e32a.roa File: 560e0bda-01bb-3446-bc1b-f4f5c493e32a.roa (raw, json) Hash identifier: anS8pQ+NemBAeU/E2xjtHaoVtemraFTHABDu8IGJtGI= Subject key identifier: FF:A8:E1:B0:65:5F:9F:C7:8C:48:E2:BE:D7:8A:66:60:A4:19:9C:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D57CF18633D782DD221BFCE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/560e0bda-01bb-3446-bc1b-f4f5c493e32a.roa Signing time: Mon 30 Mar 2026 18:54:10 +0000 ROA not before: Mon 30 Mar 2026 18:54:10 +0000 ROA not after: Sun 28 Jun 2026 18:54:10 +0000 asID: 7029 IP address blocks: 2001:19b0:980::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:cf:18:63:3d:78:2d:d2:21:bf:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 18:54:10 2026 GMT Not After : Jun 28 18:54:10 2026 GMT Subject: CN=bc3ac60a-ee76-42e8-8bd0-57ce1d310eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:26:42:9e:10:6f:35:d8:cb:7a:41:f1:f2:b3: 08:f2:6a:62:42:d8:aa:64:5e:c8:d9:95:73:5a:41: 94:3f:61:b2:65:4f:d4:b3:de:30:de:cc:38:07:72: 44:ba:7c:a0:83:25:b9:31:07:0a:a6:bb:12:67:54: b6:c6:ca:75:90:d7:92:3e:f8:e4:38:72:2e:9c:fa: 1e:d2:c0:e3:e2:b4:82:b7:94:bf:03:46:05:70:af: 98:eb:8f:c3:2b:22:3f:57:d7:c8:60:0d:b6:86:a2: 4f:9f:a1:40:8d:ce:3b:f0:e8:94:ba:a1:b9:cd:6d: 68:43:fc:f8:c4:ba:54:f9:e7:17:04:52:ec:5a:16: 7d:bc:c9:64:22:4b:d5:15:06:44:2d:db:0b:8b:48: b7:74:7a:1a:71:f9:b1:59:67:4c:86:2d:c2:07:c1: 5f:43:00:f3:48:db:65:dc:56:5f:4f:2c:ad:f1:08: af:3c:f1:b3:fc:eb:fb:e6:bd:7b:b5:d2:11:cb:70: 89:3b:d6:a5:ed:3e:5d:8e:b6:32:85:35:c2:de:6c: b9:7a:c0:15:9e:f9:11:ee:9e:aa:f3:c6:9f:f2:e6: c7:a9:e1:b0:e0:c2:0e:47:5a:d1:0d:99:a5:38:07: cd:74:84:6b:7a:69:f5:c5:7d:7d:8e:52:f0:fa:06: e4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A8:E1:B0:65:5F:9F:C7:8C:48:E2:BE:D7:8A:66:60:A4:19:9C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/560e0bda-01bb-3446-bc1b-f4f5c493e32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:980::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:eb:db:bc:0b:7a:3d:b3:66:fe:18:75:5f:0a:74:c6:8f:c1: 4f:9a:f4:1b:3c:35:89:1f:a2:3f:08:cd:07:71:b4:93:68:88: c1:24:1f:84:8c:cf:e3:25:9a:74:28:14:80:93:b3:a6:4f:6b: ce:19:81:97:b4:cc:e4:1d:fb:f3:0d:5f:0a:ab:ef:59:ad:b1: 55:0f:62:4a:e5:97:2e:4c:c1:1d:4b:10:80:4f:e2:74:ad:81: f9:e3:ae:c9:75:c8:a6:58:bc:78:aa:24:7f:19:e2:7c:a2:a9: 52:f3:fa:52:9e:2c:4c:e6:98:97:77:be:ec:31:f0:95:4d:c8: c3:eb:7a:35:24:c1:9c:71:b6:c4:93:4c:a0:73:df:7d:bb:6e: 84:5e:fd:ba:ed:54:51:1e:d8:07:34:4e:5c:fd:61:28:b4:2b: 16:10:cd:6b:b9:98:5d:56:2b:58:51:1c:db:70:8f:08:4c:69: 2f:df:33:bd:8e:96:9b:1d:a5:70:5f:36:6d:3e:9d:b8:ef:1f: bd:38:46:e2:69:fc:9c:ac:7b:fc:d2:ee:c8:31:34:18:0a:74: ce:00:6c:cf:f7:89:17:74:7a:70:eb:a0:c0:aa:7f:13:07:54: e9:97:c9:58:b4:ce:a4:c4:fe:6c:1d:d6:5c:21:a3:61:cb:48: e3:af:91:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1XzxhjPXgt0iG/zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDE4NTQxMFoXDTI2MDYyODE4NTQxMFowLzEtMCsGA1UEAxMk YmMzYWM2MGEtZWU3Ni00MmU4LThiZDAtNTdjZTFkMzEwZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSZCnhBvNdjLekHx8rMI8mpiQtiqZF7I2ZVz WkGUP2GyZU/Us94w3sw4B3JEunyggyW5MQcKprsSZ1S2xsp1kNeSPvjkOHIunPoe 0sDj4rSCt5S/A0YFcK+Y64/DKyI/V9fIYA22hqJPn6FAjc478OiUuqG5zW1oQ/z4 xLpU+ecXBFLsWhZ9vMlkIkvVFQZELdsLi0i3dHoacfmxWWdMhi3CB8FfQwDzSNtl 3FZfTyyt8QivPPGz/Ov75r17tdIRy3CJO9al7T5djrYyhTXC3my5esAVnvkR7p6q 88af8ubHqeGw4MIOR1rRDZmlOAfNdIRremn1xX19jlLw+gbkiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP+o4bBlX5/HjEjivteKZmCkGZweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTYwZTBiZGEtMDFiYi0z NDQ2LWJjMWItZjRmNWM0OTNlMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAmA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAPr27wLej2zZv4YdV8KdMaPwU+a9Bs8NYkfoj8IzQdxtJNoiMEk H4SMz+MlmnQoFICTs6ZPa84ZgZe0zOQd+/MNXwqr71mtsVUPYkrlly5MwR1LEIBP 4nStgfnjrsl1yKZYvHiqJH8Z4nyiqVLz+lKeLEzmmJd3vuwx8JVNyMPrejUkwZxx tsSTTKBz3327boRe/brtVFEe2Ac0Tlz9YSi0KxYQzWu5mF1WK1hRHNtwjwhMaS/f M72OlpsdpXBfNm0+nbjvH704RuJp/Jyse/zS7sgxNBgKdM4AbM/3iRd0enDroMCq fxMHVOmXyVi0zqTE/mwd1lwho2HLSOOvkQo= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:38 2026 by rpki-client