$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa File: aa48910c-d6f0-3588-8325-d2afc5dab4be.roa (raw, json) Hash identifier: SGZZTQOWiolHrz08lsJGfJeVKUuV6e2GNYEdRk4jSGA= Subject key identifier: 7B:E5:B8:A9:BA:FC:F0:B4:95:6A:08:21:31:30:B0:A3:1D:F7:06:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EBDDC57B516375980426D3C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 2001:19b0:800::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:57:b5:16:37:59:80:42:6d:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=eb0bbe8a-7240-42f9-8b12-0fcef53472ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c4:35:74:ad:db:dc:a0:cf:38:c4:38:bc:9b: 04:b3:8f:72:43:e7:18:e3:99:37:fd:d3:63:dd:d6: e5:87:03:99:df:e3:01:02:d1:27:87:9f:87:c3:dc: aa:cc:d4:ee:26:38:09:07:8f:3c:27:88:2e:c5:97: ea:da:7a:09:97:33:70:3e:0a:bd:2c:c5:4f:b7:ef: db:c3:af:ba:83:d4:2d:55:36:8a:76:f8:49:43:03: b8:b8:f2:b7:92:75:3f:ae:bb:23:48:ac:a1:ef:b9: 82:69:fc:55:08:05:4c:33:b8:d6:3d:71:33:62:0e: 5a:ca:ba:40:5b:9b:18:4b:f5:25:4e:ff:24:d9:5c: e6:43:ea:07:28:69:96:01:2c:29:2e:04:ef:6e:a0: 74:f3:3c:df:a4:61:f9:40:e0:8d:49:92:e6:82:ea: bd:eb:a9:49:fc:1c:a0:1c:bd:95:ae:aa:4f:6d:dc: a4:af:d6:9b:6e:05:61:44:16:d8:ff:2e:f1:fb:63: eb:96:52:d8:58:3e:9e:c1:64:3a:1f:02:a9:4e:1f: 9a:63:ad:fd:bc:14:ac:3e:12:c5:f2:0e:35:65:e1: fe:12:bd:bb:84:66:50:b2:3f:a6:b4:91:8f:38:88: c7:32:73:fa:d9:0b:16:c1:6a:00:f3:d6:14:62:f1: 5d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E5:B8:A9:BA:FC:F0:B4:95:6A:08:21:31:30:B0:A3:1D:F7:06:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:800::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:05:e7:21:89:7a:bc:13:fc:44:79:9b:70:8a:09:1f:a7:af: 5d:69:4b:8f:02:bc:5d:dc:cd:f9:91:13:fd:bc:b1:b8:da:9c: 52:37:0d:2d:a2:9e:be:36:bb:59:fc:2f:1c:6a:7f:5f:5f:0a: 0a:b4:15:a2:b2:7a:ea:87:08:37:eb:49:75:26:53:81:8b:ea: 91:6b:7a:30:98:15:1b:60:d1:27:82:e0:5e:4f:c0:a3:6f:fe: 0b:23:5f:fe:18:ad:84:a6:43:33:38:75:89:f1:3f:c3:f8:5d: fb:9e:d9:3c:22:06:8e:3d:c1:80:94:54:58:11:00:bc:ac:0e: 30:a9:bd:01:aa:b4:5e:f5:d9:b4:8d:37:7d:6f:9c:b4:1f:18: a4:c3:86:af:85:fc:9b:43:a5:71:a5:43:79:37:66:97:9c:9c: bd:f9:8f:d8:67:a5:1d:d2:48:24:f6:b1:34:8c:2c:1c:55:12: 52:d5:ab:5c:51:e5:9b:bb:6a:af:1c:b0:2b:76:de:7b:26:6c: aa:cb:c3:e7:53:3c:1a:8e:58:c6:81:e9:52:6b:04:07:ad:ef: b8:70:8e:84:82:b9:6b:3e:f7:6e:ef:83:2a:80:ab:cd:dc:37: 51:68:e4:94:65:6c:45:17:e8:87:33:03:bc:ec:29:09:20:56: ad:ac:6d:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE693Fe1FjdZgEJtPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWIwYmJlOGEtNzI0MC00MmY5LThiMTItMGZjZWY1MzQ3MmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcQ1dK3b3KDPOMQ4vJsEs49yQ+cY45k3/dNj 3dblhwOZ3+MBAtEnh5+Hw9yqzNTuJjgJB488J4guxZfq2noJlzNwPgq9LMVPt+/b w6+6g9QtVTaKdvhJQwO4uPK3knU/rrsjSKyh77mCafxVCAVMM7jWPXEzYg5ayrpA W5sYS/UlTv8k2VzmQ+oHKGmWASwpLgTvbqB08zzfpGH5QOCNSZLmguq966lJ/Byg HL2VrqpPbdykr9abbgVhRBbY/y7x+2PrllLYWD6ewWQ6HwKpTh+aY639vBSsPhLF 8g41ZeH+Er27hGZQsj+mtJGPOIjHMnP62QsWwWoA89YUYvFdlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHvluKm6/PC0lWoIITEwsKMd9waOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE0ODkxMGMtZDZmMC0z NTg4LTgzMjUtZDJhZmM1ZGFiNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIF5yGJerwT/ER5m3CKCR+nr11pS48CvF3czfmRE/28sbjanFI3 DS2inr42u1n8Lxxqf19fCgq0FaKyeuqHCDfrSXUmU4GL6pFrejCYFRtg0SeC4F5P wKNv/gsjX/4YrYSmQzM4dYnxP8P4Xfue2TwiBo49wYCUVFgRALysDjCpvQGqtF71 2bSNN31vnLQfGKTDhq+F/JtDpXGlQ3k3ZpecnL35j9hnpR3SSCT2sTSMLBxVElLV q1xR5Zu7aq8csCt23nsmbKrLw+dTPBqOWMaB6VJrBAet77hwjoSCuWs+927vgyqA q83cN1Fo5JRlbEUX6IczA7zsKQkgVq2sbU0= -----END CERTIFICATE-----Generated at Thu Aug 27 11:34:51 2026 by rpki-client