$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa File: aa48910c-d6f0-3588-8325-d2afc5dab4be.roa (raw, json) Hash identifier: fLCSfdg0YM4SYV/CVk/Eried5fdsWYI6QkUQ0k9wg2Q= Subject key identifier: 72:85:22:01:1C:B6:05:41:B0:45:59:7B:A6:6D:45:9F:5D:AE:11:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F612D5B7D1BBC19FFD73E9CA8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 2001:19b0:800::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:5b:7d:1b:bc:19:ff:d7:3e:9c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=70e1e322-ac2b-4c0c-8988-851d9129a244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:6c:71:16:3d:6b:60:bc:c7:3c:2d:71:12: f9:04:f6:9f:1f:2a:7d:e6:07:1e:2b:f5:41:79:af: d6:33:df:72:e5:07:5f:16:a3:7e:92:6b:6d:8a:02: 4a:f1:90:7e:a7:dc:60:de:6d:48:66:02:da:1e:35: 86:24:dd:2c:cc:56:8f:42:5a:a4:6c:93:5c:17:ca: e6:6b:42:84:45:25:d4:fc:b9:90:ff:94:ff:d9:56: 87:03:84:bb:fb:18:33:8e:55:65:5b:e3:d1:fa:e0: 82:f6:1f:02:a7:68:35:d3:38:89:16:5a:bb:15:90: 5b:4d:4b:16:f8:ad:a1:58:c9:25:28:6a:c3:66:1b: a2:08:a8:6b:64:b6:55:9a:f6:d6:23:67:7d:d5:20: 0e:3b:40:70:c1:fa:16:0d:3b:72:a7:13:ce:65:66: 76:18:c2:a6:33:15:cd:a6:8a:6c:28:e0:79:9e:17: fa:bb:9e:fe:94:4a:48:32:4a:b7:42:39:f4:8a:d6: fd:38:02:59:30:32:27:0a:73:30:81:64:a1:c1:fb: f6:ba:78:37:23:e7:3a:9a:f5:a2:9b:ce:1c:5d:f7: e8:18:04:b4:3b:fd:33:7f:dc:4b:8b:e3:32:d5:03: 66:d4:51:36:15:2e:5b:69:7c:8b:53:34:2d:e0:5f: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:85:22:01:1C:B6:05:41:B0:45:59:7B:A6:6D:45:9F:5D:AE:11:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:800::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:26:9e:cd:3f:b7:d2:e7:da:56:32:8a:da:51:c2:32:df:55: 84:b4:e7:1f:9d:a9:cb:de:a1:4e:b2:5c:5f:a9:7c:12:52:6b: 7f:49:c9:92:37:42:d6:6d:4a:4d:1e:21:00:dd:c9:72:9b:99: fe:4d:91:95:de:9c:25:73:b8:01:a9:6b:1f:47:4a:04:63:9c: bc:21:44:d3:d8:f6:3d:d3:08:d8:9c:93:ae:09:f6:60:b7:00: c2:26:4a:01:1d:b6:f6:f0:53:31:47:4b:86:8c:dc:99:c7:01: e8:d5:fd:aa:2a:d9:07:91:c6:c3:cd:69:5c:ec:1a:06:e7:01: 05:c9:07:9a:84:5c:94:16:3b:41:23:7b:2e:b6:de:80:9d:75: 90:2a:60:38:23:0a:8a:55:7d:6c:77:a4:ad:52:70:22:a0:b0: db:de:b0:94:69:04:71:8e:72:1c:27:40:89:cb:b6:cc:c1:e1: 8e:23:aa:c1:9d:4f:7c:0a:33:b7:de:c5:ca:55:62:af:52:52: 71:f1:f0:01:c0:56:58:0e:09:aa:e9:c3:3c:68:ba:52:1e:a2: 3e:24:92:3c:3c:c2:23:cd:f9:fb:d2:80:c9:69:63:ee:e2:7a: aa:4e:5e:d9:33:b3:bd:8e:f3:25:b4:d8:cb:32:95:59:70:21: 17:b4:61:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLVt9G7wZ/9c+nKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NzBlMWUzMjItYWMyYi00YzBjLTg5ODgtODUxZDkxMjlhMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIxscRY9a2C8xzwtcRL5BPafHyp95gceK/VB ea/WM99y5QdfFqN+kmttigJK8ZB+p9xg3m1IZgLaHjWGJN0szFaPQlqkbJNcF8rm a0KERSXU/LmQ/5T/2VaHA4S7+xgzjlVlW+PR+uCC9h8Cp2g10ziJFlq7FZBbTUsW +K2hWMklKGrDZhuiCKhrZLZVmvbWI2d91SAOO0BwwfoWDTtypxPOZWZ2GMKmMxXN popsKOB5nhf6u57+lEpIMkq3Qjn0itb9OAJZMDInCnMwgWShwfv2ung3I+c6mvWi m84cXffoGAS0O/0zf9xLi+My1QNm1FE2FS5baXyLUzQt4F8nuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKFIgEctgVBsEVZe6ZtRZ9drhE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE0ODkxMGMtZDZmMC0z NTg4LTgzMjUtZDJhZmM1ZGFiNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHkmns0/t9Ln2lYyitpRwjLfVYS05x+dqcveoU6yXF+pfBJSa39J yZI3QtZtSk0eIQDdyXKbmf5NkZXenCVzuAGpax9HSgRjnLwhRNPY9j3TCNick64J 9mC3AMImSgEdtvbwUzFHS4aM3JnHAejV/aoq2QeRxsPNaVzsGgbnAQXJB5qEXJQW O0Ejey623oCddZAqYDgjCopVfWx3pK1ScCKgsNvesJRpBHGOchwnQInLtszB4Y4j qsGdT3wKM7fexcpVYq9SUnHx8AHAVlgOCarpwzxoulIeoj4kkjw8wiPN+fvSgMlp Y+7ieqpOXtkzs72O8yW02MsylVlwIRe0YYU= -----END CERTIFICATE-----Generated at Tue Oct 13 06:22:07 2026 by rpki-client