$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa File: 8968e430-8f77-32f3-9204-563c171a1df0.roa (raw, json) Hash identifier: 7XnZ2P4cdgwSrCOKxx036WMgHZdjkXVa06jrg8IwuCQ= Subject key identifier: 1B:E8:C8:9F:0A:5C:82:9D:F5:4B:23:E3:F4:A8:B5:3A:BB:24:61:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E3CF9C1301F198D0065D95400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa Signing time: Sat 20 Jun 2026 21:00:12 +0000 ROA not before: Sat 20 Jun 2026 21:00:12 +0000 ROA not after: Fri 18 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2001:19b0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3c:f9:c1:30:1f:19:8d:00:65:d9:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 20 21:00:12 2026 GMT Not After : Sep 18 21:00:12 2026 GMT Subject: CN=b88d0b67-9d1c-4793-bb96-b767d598ef4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:50:84:85:e0:bd:2f:b6:62:bf:80:55:26:26: 60:06:fd:6b:17:c2:a6:52:02:e3:04:84:60:55:8c: 00:89:48:2e:33:97:94:c8:2f:46:7b:1f:43:c8:9a: c0:62:5f:9a:77:25:c7:d8:40:7f:a1:b5:b9:09:9a: 18:16:19:33:1c:f2:0e:13:45:2a:cd:87:a9:e2:39: d3:33:9a:0f:93:d0:02:ef:2b:13:34:8b:9c:2c:b2: f1:26:ce:d1:7f:d5:26:13:e9:d0:df:13:9f:fa:c4: a8:50:e1:7b:bf:96:c8:6f:5a:e9:6c:14:39:e1:73: 2c:8e:77:d2:e4:2e:d7:99:67:bf:cd:3f:fd:4c:d3: 07:bd:d6:61:59:d5:ea:41:9c:5b:72:21:4e:02:8d: 96:23:a7:ed:ab:1b:58:f6:69:08:6d:89:1f:dc:06: 29:08:07:94:3e:cf:6f:91:c4:93:95:a8:e0:10:c0: f7:21:c9:14:60:6c:74:b6:77:6a:f3:4c:75:ad:56: bb:da:02:3f:53:52:85:09:f1:0b:75:4e:e2:d8:6d: d1:2b:8c:05:db:70:80:30:1e:95:96:02:32:c6:2b: 48:d9:a0:10:54:13:c2:ab:70:c1:99:cc:41:e9:5e: fa:b5:6e:6e:7b:63:3b:fe:5e:7c:a2:d2:e2:b1:2f: fb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E8:C8:9F:0A:5C:82:9D:F5:4B:23:E3:F4:A8:B5:3A:BB:24:61:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fc:d4:3e:ce:28:cb:03:e7:98:8e:dd:08:a6:9f:7a:d9:d0: 8b:44:cd:5c:90:ec:4b:fc:cb:94:09:e9:6f:99:4b:24:d9:35: f5:68:62:76:b1:db:47:88:4f:3f:85:33:55:4b:fe:de:0e:79: 21:e1:63:43:6d:3f:8e:78:57:36:94:8b:f7:3d:17:a7:45:2d: 22:ff:1d:0f:3d:b6:c0:3f:27:58:26:ba:9e:fe:c3:9c:61:cb: 96:40:27:12:1c:cf:5b:d9:86:df:30:82:f3:2f:d3:38:98:8c: 11:77:79:54:9d:93:f7:4d:8c:8f:8a:ea:9f:b5:b9:88:dc:ee: 2b:c8:1c:69:36:be:3d:ba:4d:b9:4a:c8:c6:e1:48:e2:fe:b7: 3f:99:30:d3:b1:06:4a:56:50:00:5b:1b:5e:7e:ea:13:1f:bd: 1d:15:29:3e:f1:2f:13:c3:69:46:ed:f2:99:dc:17:bb:c8:f9: 49:90:1a:42:6d:be:75:3f:b6:c5:23:be:d6:66:eb:c0:29:5e: ac:39:a0:ee:e1:c1:5c:67:4a:37:38:b7:fd:14:65:84:8f:ef: a1:36:02:4e:5b:18:b9:8e:2d:de:29:21:58:73:b2:c6:0b:fd: 2b:c2:77:92:5c:93:96:c1:28:cd:0b:32:e5:1f:01:4c:b2:fd: 42:8b:61:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE48+cEwHxmNAGXZVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYyMDIxMDAxMloXDTI2MDkxODIxMDAxMlowLzEtMCsGA1UEAxMk Yjg4ZDBiNjctOWQxYy00NzkzLWJiOTYtYjc2N2Q1OThlZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlCEheC9L7Ziv4BVJiZgBv1rF8KmUgLjBIRg VYwAiUguM5eUyC9Gex9DyJrAYl+adyXH2EB/obW5CZoYFhkzHPIOE0UqzYep4jnT M5oPk9AC7ysTNIucLLLxJs7Rf9UmE+nQ3xOf+sSoUOF7v5bIb1rpbBQ54XMsjnfS 5C7XmWe/zT/9TNMHvdZhWdXqQZxbciFOAo2WI6ftqxtY9mkIbYkf3AYpCAeUPs9v kcSTlajgEMD3IckUYGx0tndq80x1rVa72gI/U1KFCfELdU7i2G3RK4wF23CAMB6V lgIyxitI2aAQVBPCq3DBmcxB6V76tW5ue2M7/l58otLisS/7mQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBvoyJ8KXIKd9Usj4/SotTq7JGE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODk2OGU0MzAtOGY3Ny0z MmYzLTkyMDQtNTYzYzE3MWExZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAj81D7OKMsD55iO3Qimn3rZ0ItEzVyQ7Ev8y5QJ6W+ZSyTZNfVo Ynax20eITz+FM1VL/t4OeSHhY0NtP454VzaUi/c9F6dFLSL/HQ89tsA/J1gmup7+ w5xhy5ZAJxIcz1vZht8wgvMv0ziYjBF3eVSdk/dNjI+K6p+1uYjc7ivIHGk2vj26 TblKyMbhSOL+tz+ZMNOxBkpWUABbG15+6hMfvR0VKT7xLxPDaUbt8pncF7vI+UmQ GkJtvnU/tsUjvtZm68ApXqw5oO7hwVxnSjc4t/0UZYSP76E2Ak5bGLmOLd4pIVhz ssYL/SvCd5Jck5bBKM0LMuUfAUyy/UKLYUo= -----END CERTIFICATE-----Generated at Mon Jul 13 07:23:09 2026 by rpki-client