$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9848bede-e9d9-333a-8504-5a4419eeac53.roa File: 9848bede-e9d9-333a-8504-5a4419eeac53.roa (raw, json) Hash identifier: p//KyJ/JwSjREHhXzaeyGWTnFc9L+mal8IHuDa6sjeU= Subject key identifier: 6D:82:9F:8D:32:C9:66:A7:85:2C:7B:07:11:D5:2E:FA:E0:9E:31:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5F7FB1C14A1D84B3FD64CC40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9848bede-e9d9-333a-8504-5a4419eeac53.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 2001:19b0:4a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:b1:c1:4a:1d:84:b3:fd:64:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=a2048b11-02d9-4676-9e95-d75073d2f478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b0:e4:21:9e:e9:e9:7a:a3:ba:c0:40:90:60: d5:ad:63:59:0c:e0:2c:63:db:2b:d6:c0:12:00:d1: 63:ad:6d:b3:a1:09:77:6b:93:4b:19:a7:62:a3:b8: bf:ab:c1:38:6a:50:6c:bd:9c:a2:06:a5:34:d5:fb: 86:71:12:d0:0e:46:59:19:45:92:1c:67:6a:d8:d4: eb:cc:9e:ea:88:39:e8:29:68:11:1a:f0:c3:0a:a2: ad:c2:fd:3e:77:cd:af:67:4c:49:44:04:34:b9:f3: 61:6b:9a:98:45:cf:06:62:72:c8:fd:03:03:6d:f5: 7a:a1:ad:19:bb:bb:8d:6b:07:a6:ae:54:2d:83:4e: 06:80:41:69:5a:e5:51:a9:a7:5b:8d:84:94:dd:ba: 65:0c:30:09:7c:be:9e:ce:9a:22:0f:12:de:27:f3: 19:43:0f:23:97:cc:a7:b9:92:4d:21:b6:70:77:77: 2d:27:0f:3d:7f:56:bf:d6:6e:59:e5:fc:e8:44:ea: 2e:79:7e:38:ce:c1:5f:e7:03:13:6b:22:ca:6d:33: f3:b6:0e:93:10:16:3b:c4:4d:d6:ab:0e:f0:06:40: ae:67:b4:7b:7b:f8:1d:06:6c:e9:40:b5:52:f7:58: 4d:ec:7c:16:cb:59:ec:9d:78:38:86:96:6a:74:af: bb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:82:9F:8D:32:C9:66:A7:85:2C:7B:07:11:D5:2E:FA:E0:9E:31:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9848bede-e9d9-333a-8504-5a4419eeac53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:4a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b2:d1:98:03:c9:be:5c:f4:01:4b:57:42:90:72:0f:49:a4: 55:f8:45:ca:31:db:a7:04:b8:37:08:85:df:66:ae:9e:e6:e2: ed:44:be:6e:40:e2:52:5f:03:d1:13:47:76:1e:f4:db:bc:95: 80:91:8c:fa:66:d9:03:fe:68:6d:24:87:c3:7d:5a:7e:c3:24: 7a:2b:72:f4:4c:72:c5:38:46:4e:2a:e4:aa:d7:c7:92:8e:09: a2:35:41:24:3e:18:99:be:a5:e3:b1:31:f5:c6:10:d9:7c:41: 3c:d4:09:a8:94:92:52:09:50:5c:70:13:50:21:54:2c:5f:ec: 02:8e:c7:64:3e:15:62:e2:b0:df:70:aa:de:c5:0d:d9:b2:da: 19:63:f8:64:5f:da:33:fe:dc:78:c2:c9:3c:dc:a9:a1:37:5e: 94:35:8d:0f:bf:10:bd:07:13:77:ba:92:60:88:18:89:32:e8: 20:4e:15:16:9e:cf:92:ff:64:74:61:e1:34:33:c4:e3:d8:19: 4b:34:f7:38:2e:7e:8a:63:8f:13:a5:77:f7:47:90:d4:e6:55: 70:56:96:d8:85:c3:c7:c2:c7:68:ad:b8:07:c8:42:f5:87:d2: ea:75:b4:87:3e:97:3e:e1:92:59:1c:29:40:16:24:b6:cd:10: 80:01:7e:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ff7HBSh2Es/1kzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk YTIwNDhiMTEtMDJkOS00Njc2LTllOTUtZDc1MDczZDJmNDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLDkIZ7p6XqjusBAkGDVrWNZDOAsY9sr1sAS ANFjrW2zoQl3a5NLGadio7i/q8E4alBsvZyiBqU01fuGcRLQDkZZGUWSHGdq2NTr zJ7qiDnoKWgRGvDDCqKtwv0+d82vZ0xJRAQ0ufNha5qYRc8GYnLI/QMDbfV6oa0Z u7uNawemrlQtg04GgEFpWuVRqadbjYSU3bplDDAJfL6ezpoiDxLeJ/MZQw8jl8yn uZJNIbZwd3ctJw89f1a/1m5Z5fzoROoueX44zsFf5wMTayLKbTPztg6TEBY7xE3W qw7wBkCuZ7R7e/gdBmzpQLVS91hN7HwWy1nsnXg4hpZqdK+7hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG2Cn40yyWanhSx7BxHVLvrgnjGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTg0OGJlZGUtZTlkOS0z MzNhLTg1MDQtNWE0NDE5ZWVhYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI2y0ZgDyb5c9AFLV0KQcg9JpFX4Rcox26cEuDcIhd9mrp7m4u1E vm5A4lJfA9ETR3Ye9Nu8lYCRjPpm2QP+aG0kh8N9Wn7DJHorcvRMcsU4Rk4q5KrX x5KOCaI1QSQ+GJm+peOxMfXGENl8QTzUCaiUklIJUFxwE1AhVCxf7AKOx2Q+FWLi sN9wqt7FDdmy2hlj+GRf2jP+3HjCyTzcqaE3XpQ1jQ+/EL0HE3e6kmCIGIky6CBO FRaez5L/ZHRh4TQzxOPYGUs09zgufopjjxOld/dHkNTmVXBWltiFw8fCx2ituAfI QvWH0up1tIc+lz7hklkcKUAWJLbNEIABfrc= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:13 2026 by rpki-client