$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff88574-1eac-381b-850d-3ea2559e0072.roa File: 8ff88574-1eac-381b-850d-3ea2559e0072.roa (raw, json) Hash identifier: blTojinWD4e4uaGiXVxScnJtjpDpJGER1fNmiBuMWlk= Subject key identifier: E4:C9:F5:12:1C:D3:33:17:82:21:29:33:4B:5C:57:CA:52:43:FB:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D57D02E061AA2E37C9D537390 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff88574-1eac-381b-850d-3ea2559e0072.roa Signing time: Mon 30 Mar 2026 18:56:21 +0000 ROA not before: Mon 30 Mar 2026 18:56:21 +0000 ROA not after: Sun 28 Jun 2026 18:56:21 +0000 asID: 7029 IP address blocks: 2001:19b0:d00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:d0:2e:06:1a:a2:e3:7c:9d:53:73:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 18:56:21 2026 GMT Not After : Jun 28 18:56:21 2026 GMT Subject: CN=7f2594ad-753b-496d-96bd-cc8a06c0fc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:50:d1:fd:a0:2d:0e:35:4f:63:89:08:7c:80: 13:39:c4:9a:6b:9c:6f:e2:67:2c:e3:e6:41:5c:e3: ed:82:4f:15:88:a2:5c:f1:ae:76:be:e2:c2:f5:56: a8:bc:aa:21:82:9c:0f:b2:d2:c3:62:49:9f:8d:68: c1:2f:4d:3e:cb:13:fa:6c:c3:86:41:74:8d:03:a3: 3f:26:8c:a1:52:58:ca:af:8f:b7:73:b7:8e:fd:a9: f7:53:b6:66:fe:cf:f1:c0:79:8e:ba:db:23:43:12: d2:07:1d:50:13:80:2b:61:f5:94:95:b6:04:42:2c: c2:d8:09:dd:04:12:c9:03:aa:2f:8a:99:2d:15:e6: 10:6f:e6:0c:95:5e:40:c0:e8:49:2a:c6:ce:33:6f: df:b0:70:12:71:24:bf:26:9b:7f:a5:ba:4b:05:a2: fa:31:6b:27:db:05:e7:ab:e0:cb:97:09:72:50:59: e6:60:b5:9c:5b:2b:44:e2:ec:76:06:2b:6f:b2:5c: 58:48:58:44:bb:76:4b:2a:ef:b7:7f:98:67:3f:7f: 3a:6d:1d:bf:34:8e:2c:df:89:1b:ba:8a:02:d6:a3: c1:0f:2e:61:77:ab:af:5f:74:45:df:eb:45:71:74: 46:e0:96:9e:fc:64:98:33:a5:ed:ee:2a:bf:8a:e4: 27:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C9:F5:12:1C:D3:33:17:82:21:29:33:4B:5C:57:CA:52:43:FB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff88574-1eac-381b-850d-3ea2559e0072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:d00::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:71:56:59:27:a9:b4:6f:1e:b4:31:8d:c1:51:d5:67:8e:9f: bf:0f:7f:5c:ec:d9:0e:e0:df:1a:65:14:54:21:cb:ce:90:d5: ab:b5:c3:4c:16:91:1f:cd:ad:7c:ad:25:36:90:c2:ed:17:cf: 79:b7:b9:ab:d0:44:9d:82:cc:f7:5a:e0:7d:9d:b2:cf:08:50: ce:da:75:70:1e:5e:12:d9:7d:a6:c1:41:24:68:99:75:9e:c2: 3a:38:81:d8:d3:ba:4e:92:fe:95:fe:e3:51:2e:5d:c7:12:8d: 32:7c:57:a3:59:ff:13:ce:1e:4b:3a:6b:6d:9a:68:75:c8:cb: e0:14:37:b0:2d:63:90:4f:28:15:f7:9a:11:72:4d:62:a3:33: 81:aa:e2:d7:82:d8:62:60:42:29:ac:c3:0e:ee:d3:28:8f:2c: 51:4d:d9:6d:15:da:f6:c2:6c:30:a0:96:4b:4f:91:72:71:a0: e3:1c:5f:91:17:b8:60:34:5e:3c:24:74:3f:05:7a:25:ba:48: fa:56:64:fa:38:97:ae:26:fd:62:8f:40:d9:1e:4e:7b:4b:da: cf:31:eb:d8:1b:3e:56:63:3b:5e:ca:74:9f:4f:02:2f:a2:f1: 78:fd:f5:f9:37:6e:70:95:ed:53:11:d8:19:c0:af:44:d3:dd: 86:91:15:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1X0C4GGqLjfJ1Tc5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDE4NTYyMVoXDTI2MDYyODE4NTYyMVowLzEtMCsGA1UEAxMk N2YyNTk0YWQtNzUzYi00OTZkLTk2YmQtY2M4YTA2YzBmYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1DR/aAtDjVPY4kIfIATOcSaa5xv4mcs4+ZB XOPtgk8ViKJc8a52vuLC9VaovKohgpwPstLDYkmfjWjBL00+yxP6bMOGQXSNA6M/ JoyhUljKr4+3c7eO/an3U7Zm/s/xwHmOutsjQxLSBx1QE4ArYfWUlbYEQizC2And BBLJA6ovipktFeYQb+YMlV5AwOhJKsbOM2/fsHAScSS/Jpt/pbpLBaL6MWsn2wXn q+DLlwlyUFnmYLWcWytE4ux2BitvslxYSFhEu3ZLKu+3f5hnP386bR2/NI4s34kb uooC1qPBDy5hd6uvX3RF3+tFcXRG4Jae/GSYM6Xt7iq/iuQnVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOTJ9RIc0zMXgiEpM0tcV8pSQ/tdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGZmODg1NzQtMWVhYy0z ODFiLTg1MGQtM2VhMjU1OWUwMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsA0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFNxVlknqbRvHrQxjcFR1WeOn78Pf1zs2Q7g3xplFFQhy86Q1au1 w0wWkR/NrXytJTaQwu0Xz3m3uavQRJ2CzPda4H2dss8IUM7adXAeXhLZfabBQSRo mXWewjo4gdjTuk6S/pX+41EuXccSjTJ8V6NZ/xPOHks6a22aaHXIy+AUN7AtY5BP KBX3mhFyTWKjM4Gq4teC2GJgQimsww7u0yiPLFFN2W0V2vbCbDCglktPkXJxoOMc X5EXuGA0XjwkdD8FeiW6SPpWZPo4l64m/WKPQNkeTntL2s8x69gbPlZjO17KdJ9P Ai+i8Xj99fk3bnCV7VMR2BnAr0TT3YaRFYc= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:43 2026 by rpki-client