$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa File: 8968e430-8f77-32f3-9204-563c171a1df0.roa (raw, json) Hash identifier: EtD4qzdUjupsnnBjQX5omh8w657oGHvgGVx/Hz2779I= Subject key identifier: DC:A4:D8:2D:04:71:D5:73:FD:BB:7C:2E:9A:80:7C:3F:E0:28:FB:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5CB4F4091B71E3B98B20F8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 7029 IP address blocks: 2001:19b0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f4:09:1b:71:e3:b9:8b:20:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=c446c997-5bd6-44da-92a9-c54558f7382e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:cf:93:87:e7:d0:54:f9:9d:64:f6:0c:63: 67:e6:0e:0e:ed:8f:42:06:c1:79:f7:d2:19:3c:f8: 41:2e:35:2d:72:4c:39:68:68:31:cb:ec:bb:e2:9b: 2d:81:a2:cd:15:25:b7:e1:4f:03:b1:1b:3e:3c:54: fb:81:f3:48:6a:66:0e:dc:54:4e:b2:57:77:76:9d: 2d:d4:d7:80:1e:d9:5a:49:db:84:f9:55:1c:58:cd: 35:ff:45:e1:d1:df:62:6e:ec:38:72:d9:45:7d:a2: c1:cd:3a:9a:5b:df:73:21:04:3c:1d:3c:01:21:bd: b2:73:a9:4c:d3:dd:0a:8b:ad:cc:91:50:85:f1:13: ac:72:7f:d8:bb:23:1d:ed:a7:9b:6c:b0:4a:2f:03: f7:6c:fa:8d:d7:c9:a7:3f:6c:61:48:a5:c0:3f:b7: a5:b4:43:64:63:e7:35:ca:16:74:88:f3:1b:76:59: 98:76:ee:f7:c4:78:d4:6c:18:e3:9d:61:d3:b5:20: de:c1:4c:94:d1:32:0e:cc:1f:5e:e8:b9:b5:c8:75: 0d:86:69:f3:61:bc:7c:61:58:f2:8d:2c:c1:ff:0c: a8:a2:16:3d:04:71:e8:38:51:83:20:56:14:11:0d: 30:59:af:01:42:0a:f0:b5:6e:f3:08:fc:05:ea:e4: 9a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A4:D8:2D:04:71:D5:73:FD:BB:7C:2E:9A:80:7C:3F:E0:28:FB:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8968e430-8f77-32f3-9204-563c171a1df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ff:ab:fe:37:5c:1a:f6:7b:d9:84:5b:ce:54:e3:5d:0b:ab: 45:c6:22:5e:22:ba:e4:d0:71:71:26:b0:fd:97:89:bd:c4:80: 91:cd:4f:d5:20:45:af:cb:31:66:44:e4:5d:1f:1f:d0:02:de: a5:f3:8a:94:44:fa:05:1d:6f:5b:96:75:a3:2a:84:79:ad:af: bc:5e:46:bd:97:13:64:bf:5e:4d:50:f2:3c:7a:d1:e4:54:c0: 83:d6:1a:9e:39:c4:03:ae:6d:4c:f8:16:59:d1:4d:c9:7d:08: 7b:ce:bb:cb:21:05:29:56:a1:70:2a:4c:02:bb:1d:da:06:1a: 9f:fb:4b:c8:75:88:85:c2:1a:5d:39:61:ec:3a:26:f7:70:9f: fe:b9:58:0f:2a:66:fc:fa:8e:88:b4:af:58:ea:51:39:41:45: 40:b5:87:86:9b:9d:40:b2:b4:c5:68:0c:c1:ab:bc:62:a0:7f: cd:27:20:5b:bb:a1:ee:66:77:98:91:8e:61:38:6f:7b:e5:1a: 2f:10:ac:9c:45:53:bc:9f:a7:9e:53:68:45:7c:26:67:3e:ba: 65:95:52:b1:b9:36:96:d8:d4:ce:81:a2:02:e9:fc:84:ab:35: 72:aa:cd:61:fd:ad:84:99:2f:2e:e3:5c:d7:66:23:34:b0:73: 86:e5:08:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ctPQJG3HjuYsg+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk YzQ0NmM5OTctNWJkNi00NGRhLTkyYTktYzU0NTU4ZjczODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnLPk4fn0FT5nWT2DGNn5g4O7Y9CBsF599IZ PPhBLjUtckw5aGgxy+y74pstgaLNFSW34U8DsRs+PFT7gfNIamYO3FROsld3dp0t 1NeAHtlaSduE+VUcWM01/0Xh0d9ibuw4ctlFfaLBzTqaW99zIQQ8HTwBIb2yc6lM 090Ki63MkVCF8ROscn/YuyMd7aebbLBKLwP3bPqN18mnP2xhSKXAP7eltENkY+c1 yhZ0iPMbdlmYdu73xHjUbBjjnWHTtSDewUyU0TIOzB9e6Lm1yHUNhmnzYbx8YVjy jSzB/wyoohY9BHHoOFGDIFYUEQ0wWa8BQgrwtW7zCPwF6uSaUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNyk2C0EcdVz/bt8LpqAfD/gKPuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODk2OGU0MzAtOGY3Ny0z MmYzLTkyMDQtNTYzYzE3MWExZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACX/q/43XBr2e9mEW85U410Lq0XGIl4iuuTQcXEmsP2Xib3EgJHN T9UgRa/LMWZE5F0fH9AC3qXzipRE+gUdb1uWdaMqhHmtr7xeRr2XE2S/Xk1Q8jx6 0eRUwIPWGp45xAOubUz4FlnRTcl9CHvOu8shBSlWoXAqTAK7HdoGGp/7S8h1iIXC Gl05Yew6Jvdwn/65WA8qZvz6joi0r1jqUTlBRUC1h4abnUCytMVoDMGrvGKgf80n IFu7oe5md5iRjmE4b3vlGi8QrJxFU7yfp55TaEV8Jmc+umWVUrG5NpbY1M6BogLp /ISrNXKqzWH9rYSZLy7jXNdmIzSwc4blCMg= -----END CERTIFICATE-----Generated at Mon Apr 13 13:07:25 2026 by rpki-client