$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/994f507b-7ced-3161-af91-b2d33c832c69.roa File: 994f507b-7ced-3161-af91-b2d33c832c69.roa (raw, json) Hash identifier: oqagHdrEdWhpFAj37mOuU0/5lXfY58dLM8I+uvZtfsE= Subject key identifier: 92:B3:C2:49:C2:8C:3B:5F:78:08:67:5A:DF:D0:12:06:B6:D4:D0:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F612D6ABB33417FFE723F5500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/994f507b-7ced-3161-af91-b2d33c832c69.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 2001:19b0:340::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6a:bb:33:41:7f:fe:72:3f:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=8dbffaf6-4c7c-4578-b229-6b039833bf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:cd:f7:0b:65:db:8a:ff:de:0b:d1:69:c4: da:e9:98:b6:b0:e1:63:47:fa:73:e0:94:84:a7:f9: 25:cb:4a:8b:17:be:a6:5a:19:46:58:9d:cd:b6:60: 1e:19:82:8b:b3:4b:58:52:09:05:0d:f5:11:aa:31: 7f:b1:d8:43:7d:86:c5:b0:a8:ba:a0:d4:ac:85:2f: 18:a7:6c:a3:8b:c6:81:5f:d9:15:ad:ad:ef:84:e0: 6c:c5:1f:a5:d0:19:dd:53:60:ed:66:84:ee:30:b8: 60:f0:2f:dd:92:03:0e:e5:2b:9c:41:fb:06:2b:dc: fb:86:82:bf:b6:f4:6c:68:fa:f5:3e:a1:2a:fd:24: 6d:64:c3:32:9a:29:3f:8c:e0:f3:90:0b:3b:c9:18: bb:12:39:40:19:54:00:f7:1d:7d:cd:cf:8b:e8:d7: 37:c4:bf:88:03:6c:ff:4c:c8:86:9f:40:1c:5d:62: 03:84:27:53:29:92:e1:ad:f5:e8:42:04:17:8f:3a: 89:6b:54:26:81:31:f8:8d:a7:e0:1e:37:de:af:6d: 81:e4:ec:c0:ba:51:0f:ae:d2:61:4b:98:09:08:d7: 1a:68:39:d6:9e:4d:7e:e4:c8:8c:a4:d6:66:88:d2: e9:cc:34:29:90:b9:e9:52:31:bb:fd:3f:6e:72:32: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B3:C2:49:C2:8C:3B:5F:78:08:67:5A:DF:D0:12:06:B6:D4:D0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/994f507b-7ced-3161-af91-b2d33c832c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:340::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:48:29:82:42:59:0b:88:e8:96:79:28:d7:80:01:4b:14:aa: 71:72:1f:b8:12:5b:cb:73:50:4a:3a:f9:ce:89:e5:56:d2:e7: 91:f2:ca:49:76:78:70:7e:7d:27:21:11:49:5b:93:ad:40:e7: cc:bf:6a:a1:25:e9:f9:47:b1:3f:1a:2b:2e:8f:05:30:46:ca: 38:b9:4a:01:6e:d6:04:f3:06:5a:c3:d6:44:a0:2c:ae:1d:1a: bf:26:2f:aa:47:f7:e3:5a:c9:89:7d:98:b1:05:9d:09:60:a4: 68:a2:4a:3e:3a:60:fa:6e:e0:6a:4a:a5:66:e9:a8:4b:df:34: 4a:00:b6:8d:14:b3:db:c8:b7:06:45:7e:ba:fa:ab:78:06:82: 9c:8a:08:c0:58:11:d0:a5:ac:6b:0d:5f:a6:09:6c:98:03:17: 4f:61:f3:15:92:ac:8f:d6:b4:8b:77:d9:ff:96:a7:3a:2b:f4: 60:32:e2:48:37:fe:c3:54:58:17:60:62:0c:7b:18:03:82:ab: d5:92:6e:de:6f:cb:22:b8:34:e8:6b:ce:cb:93:a0:fc:2a:dc: da:24:c2:92:62:58:3c:44:98:cd:4c:85:c4:83:59:88:39:65: 9e:e8:8b:8e:f2:bf:6e:31:76:63:00:dd:bd:8b:a6:ae:6b:2e: 81:89:43:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLWq7M0F//nI/VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk OGRiZmZhZjYtNGM3Yy00NTc4LWIyMjktNmIwMzk4MzNiZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl/N9wtl24r/3gvRacTa6Zi2sOFjR/pz4JSE p/kly0qLF76mWhlGWJ3NtmAeGYKLs0tYUgkFDfURqjF/sdhDfYbFsKi6oNSshS8Y p2yji8aBX9kVra3vhOBsxR+l0BndU2DtZoTuMLhg8C/dkgMO5SucQfsGK9z7hoK/ tvRsaPr1PqEq/SRtZMMymik/jODzkAs7yRi7EjlAGVQA9x19zc+L6Nc3xL+IA2z/ TMiGn0AcXWIDhCdTKZLhrfXoQgQXjzqJa1QmgTH4jafgHjfer22B5OzAulEPrtJh S5gJCNcaaDnWnk1+5MiMpNZmiNLpzDQpkLnpUjG7/T9ucjIcdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJKzwknCjDtfeAhnWt/QEga21NBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTk0ZjUwN2ItN2NlZC0z MTYxLWFmOTEtYjJkMzNjODMyYzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEZsANA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADdIKYJCWQuI6JZ5KNeAAUsUqnFyH7gSW8tzUEo6+c6J5VbS55Hy ykl2eHB+fSchEUlbk61A58y/aqEl6flHsT8aKy6PBTBGyji5SgFu1gTzBlrD1kSg LK4dGr8mL6pH9+NayYl9mLEFnQlgpGiiSj46YPpu4GpKpWbpqEvfNEoAto0Us9vI twZFfrr6q3gGgpyKCMBYEdClrGsNX6YJbJgDF09h8xWSrI/WtIt32f+Wpzor9GAy 4kg3/sNUWBdgYgx7GAOCq9WSbt5vyyK4NOhrzsuToPwq3NokwpJiWDxEmM1MhcSD WYg5ZZ7oi47yv24xdmMA3b2Lpq5rLoGJQ1U= -----END CERTIFICATE-----Generated at Tue Oct 13 04:24:06 2026 by rpki-client