$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9508267e-9471-3e1c-9d8f-6b6fce9686ec.roa File: 9508267e-9471-3e1c-9d8f-6b6fce9686ec.roa (raw, json) Hash identifier: 3ffw4KlJFAMZUeHMJk7lsWYyxf2xYn4jHWpibqynzdo= Subject key identifier: 96:11:17:82:5C:43:B1:C6:54:03:F5:88:96:C9:62:3E:08:92:A4:64 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F612D5D577E6281DFD8855580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9508267e-9471-3e1c-9d8f-6b6fce9686ec.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 2001:19b0:54::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:5d:57:7e:62:81:df:d8:85:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=4a493088-0287-49ce-b24a-173327c562d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:4e:84:44:f4:d9:9e:27:15:b7:de:98:a0: 33:a5:44:81:6d:64:bc:60:63:5c:6b:36:4a:2b:89: a9:46:69:b7:f3:a5:c1:9a:83:41:67:42:d3:e1:4d: 37:a6:75:8b:76:a8:71:2f:b8:7f:b0:28:0a:cf:74: 97:b0:c8:38:25:aa:7e:b5:85:01:d1:96:3d:ba:84: de:81:71:a5:66:ad:2f:a5:b5:2a:c3:2f:3a:fe:9d: f3:47:47:24:fb:63:e2:02:0c:dd:94:23:03:5a:42: 4c:b4:ec:18:13:64:7c:77:32:8c:60:b1:20:cd:29: 04:d4:88:dd:f4:b6:52:99:73:43:d2:67:ad:59:d1: 35:ee:55:00:f3:a3:8f:b1:6b:79:a9:a5:02:84:c5: 1a:ca:4a:cc:a6:aa:51:8b:c0:bc:36:03:b0:0e:18: b0:df:b2:7b:7e:7f:06:fb:ae:76:6e:2b:bf:ed:2e: 49:7f:e1:ec:c9:9e:04:20:9f:72:bf:59:56:86:63: ca:21:c4:6b:de:da:04:17:9d:61:99:4f:e3:f0:51: ce:bd:36:f2:05:5b:75:d0:9d:81:2e:e3:48:08:90: e5:3b:c4:30:a3:e6:93:aa:ce:ec:1a:da:99:0c:a4: 2f:f9:9c:d2:96:71:95:ab:42:55:79:74:71:d0:4a: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:11:17:82:5C:43:B1:C6:54:03:F5:88:96:C9:62:3E:08:92:A4:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9508267e-9471-3e1c-9d8f-6b6fce9686ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:54::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:67:35:28:98:85:a8:1a:cd:2c:e0:d6:16:0a:f4:3c:60:65: c4:69:ab:78:59:87:de:48:f9:f5:de:84:81:e5:a2:04:e6:bd: fd:e9:8a:8c:32:8e:c4:d8:30:5e:9a:94:fa:d8:ed:a8:f7:21: 2b:42:cd:18:5a:8d:00:fb:48:58:45:32:ba:fd:c9:b7:75:90: c0:8b:5a:6d:04:6e:1e:82:a5:ef:11:13:85:dd:09:97:00:ca: 32:cd:25:4d:20:a2:ea:fe:11:7a:b2:72:7c:df:58:c1:5a:5c: df:c9:90:cb:4b:11:eb:87:d0:d4:38:b8:e9:08:0c:05:98:a0: 2d:67:a1:07:f5:ce:b9:56:b7:ab:93:4f:47:26:c1:e2:d7:d7: f7:20:cf:b9:7f:3e:f5:89:df:31:94:cf:61:ca:e1:1b:77:a9: 02:7c:d2:64:6c:5b:a0:08:fa:67:e4:d4:b3:37:07:71:da:27: 26:04:6d:b1:b4:a5:a8:c4:d0:d9:e2:24:3b:05:2a:73:8d:6c: dc:b8:57:d8:49:5c:7b:7f:f1:be:2b:35:a3:44:90:b0:0b:9d: 4b:4b:6e:1c:68:48:58:8b:6c:be:e1:44:24:90:a8:ab:09:0d: 62:5a:92:73:11:68:28:13:11:8a:78:14:61:df:ad:54:27:b1: 82:9a:a1:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLV1XfmKB39iFVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NGE0OTMwODgtMDI4Ny00OWNlLWIyNGEtMTczMzI3YzU2MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu1OhET02Z4nFbfemKAzpUSBbWS8YGNcazZK K4mpRmm386XBmoNBZ0LT4U03pnWLdqhxL7h/sCgKz3SXsMg4Jap+tYUB0ZY9uoTe gXGlZq0vpbUqwy86/p3zR0ck+2PiAgzdlCMDWkJMtOwYE2R8dzKMYLEgzSkE1Ijd 9LZSmXND0metWdE17lUA86OPsWt5qaUChMUaykrMpqpRi8C8NgOwDhiw37J7fn8G +652biu/7S5Jf+HsyZ4EIJ9yv1lWhmPKIcRr3toEF51hmU/j8FHOvTbyBVt10J2B LuNICJDlO8Qwo+aTqs7sGtqZDKQv+ZzSlnGVq0JVeXRx0EqIKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJYRF4JcQ7HGVAP1iJbJYj4IkqRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTUwODI2N2UtOTQ3MS0z ZTFjLTlkOGYtNmI2ZmNlOTY4NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEZsABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADlnNSiYhagazSzg1hYK9DxgZcRpq3hZh95I+fXehIHlogTmvf3p iowyjsTYMF6alPrY7aj3IStCzRhajQD7SFhFMrr9ybd1kMCLWm0Ebh6Cpe8RE4Xd CZcAyjLNJU0gour+EXqycnzfWMFaXN/JkMtLEeuH0NQ4uOkIDAWYoC1noQf1zrlW t6uTT0cmweLX1/cgz7l/PvWJ3zGUz2HK4Rt3qQJ80mRsW6AI+mfk1LM3B3HaJyYE bbG0pajE0NniJDsFKnONbNy4V9hJXHt/8b4rNaNEkLALnUtLbhxoSFiLbL7hRCSQ qKsJDWJaknMRaCgTEYp4FGHfrVQnsYKaoR0= -----END CERTIFICATE-----Generated at Tue Oct 13 06:20:41 2026 by rpki-client