$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c83a53b8-ad67-3505-97be-f77ad65f19c5.roa File: c83a53b8-ad67-3505-97be-f77ad65f19c5.roa (raw, json) Hash identifier: LkzCzjFGuZWiGTuZ+UmHzTDCQEDWK5feo7vPEgBJxdQ= Subject key identifier: 9A:B3:BF:B1:E2:A1:17:7D:38:7E:DC:64:A9:BE:C5:CE:90:39:D0:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5F7FAFD62734929762AAB900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c83a53b8-ad67-3505-97be-f77ad65f19c5.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 2001:19b0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:af:d6:27:34:92:97:62:aa:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=b6490026-4cc1-4f56-adae-1e5a3eb5cf41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:5d:09:f7:68:69:1e:93:22:c5:90:c9:45: f8:24:22:9f:51:0e:60:b2:a1:0e:fb:11:d0:38:7c: 9d:b7:73:f2:61:e8:97:cc:bc:3f:d9:a9:52:66:7d: 3f:3f:50:10:cf:fe:f8:45:56:dd:cd:e5:8b:ca:a2: 78:17:cd:49:6a:5d:d1:5d:6e:9e:08:9f:83:c0:4c: 71:33:31:85:d9:64:09:5d:79:c7:1a:6f:15:f9:c3: 09:52:92:3a:6b:0e:de:6e:fc:c6:da:d9:74:b3:9e: cd:ed:73:c8:a6:82:a5:e6:76:71:c0:9d:f4:de:e9: 5e:a7:9c:67:93:dc:8b:38:0a:e9:8b:58:55:0d:2e: 15:22:03:22:92:e1:ed:4c:54:74:c2:10:a5:80:46: 84:a0:fe:78:08:65:c1:13:6c:ba:3a:cd:99:13:cf: d6:34:bd:5d:5c:f6:13:f5:60:e7:55:db:a7:3c:ad: d1:ef:c1:e2:58:74:53:4e:09:7f:aa:36:ce:ee:02: 3c:bc:d8:19:da:20:47:8a:6d:d4:af:fe:f4:0b:d6: 6f:85:d9:e1:3d:14:39:fa:cf:f6:d6:b2:31:96:20: fd:b0:7e:ce:b0:e2:98:53:a4:d9:61:7d:34:69:3f: 8b:a8:7a:79:ef:f5:1e:79:37:c4:5d:5c:c1:3f:dd: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B3:BF:B1:E2:A1:17:7D:38:7E:DC:64:A9:BE:C5:CE:90:39:D0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c83a53b8-ad67-3505-97be-f77ad65f19c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1b:50:d3:6f:e7:4b:2a:93:a9:8d:3d:83:92:1e:25:97:db: e4:0e:10:63:2f:e9:73:d8:f4:c2:bc:9a:72:94:44:e5:c0:1e: d9:cf:0d:4e:07:04:c6:e0:32:50:c1:8d:6b:bc:e0:75:d2:97: b5:f3:fd:00:1e:66:e5:53:16:d7:75:52:a1:34:a7:1e:ae:e5: e7:77:46:79:26:78:84:1f:2e:2d:ec:9e:e5:ce:6e:05:e7:92: 6a:39:a6:a2:1d:64:bd:8e:7a:9a:47:c5:af:c7:8d:46:94:a5: b6:c5:08:1d:6e:86:c9:39:84:d0:e5:5f:ce:cf:ea:70:f2:ee: 2d:9d:e9:2d:2c:6b:d8:eb:fb:40:a9:f2:aa:0c:72:5d:49:d9: 35:55:24:57:e5:e2:c9:f2:c3:4a:47:3b:88:d4:b0:26:f9:e3: b4:15:2b:b3:bc:ac:0a:ed:a3:f8:4b:1b:96:82:b8:f5:f7:82: df:b2:0a:48:62:d3:51:c6:27:71:d5:65:b5:68:3e:5c:ea:b6: 47:48:37:7e:77:bb:73:36:56:37:b7:f6:c6:06:37:74:b4:5c: e4:56:d5:0c:f6:fe:f4:5d:28:c2:0a:e2:14:ff:45:e4:e5:15: 00:0d:bf:08:e0:95:71:e3:fc:f5:f5:b2:9a:5b:9e:43:b1:ac: 13:2d:fc:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ff6/WJzSSl2KquQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk YjY0OTAwMjYtNGNjMS00ZjU2LWFkYWUtMWU1YTNlYjVjZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucZdCfdoaR6TIsWQyUX4JCKfUQ5gsqEO+xHQ OHydt3PyYeiXzLw/2alSZn0/P1AQz/74RVbdzeWLyqJ4F81Jal3RXW6eCJ+DwExx MzGF2WQJXXnHGm8V+cMJUpI6aw7ebvzG2tl0s57N7XPIpoKl5nZxwJ303ulep5xn k9yLOArpi1hVDS4VIgMikuHtTFR0whClgEaEoP54CGXBE2y6Os2ZE8/WNL1dXPYT 9WDnVdunPK3R78HiWHRTTgl/qjbO7gI8vNgZ2iBHim3Ur/70C9ZvhdnhPRQ5+s/2 1rIxliD9sH7OsOKYU6TZYX00aT+LqHp57/UeeTfEXVzBP92vIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJqzv7HioRd9OH7cZKm+xc6QOdDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzgzYTUzYjgtYWQ2Ny0z NTA1LTk3YmUtZjc3YWQ2NWYxOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEUbUNNv50sqk6mNPYOSHiWX2+QOEGMv6XPY9MK8mnKUROXAHtnP DU4HBMbgMlDBjWu84HXSl7Xz/QAeZuVTFtd1UqE0px6u5ed3RnkmeIQfLi3snuXO bgXnkmo5pqIdZL2OeppHxa/HjUaUpbbFCB1uhsk5hNDlX87P6nDy7i2d6S0sa9jr +0Cp8qoMcl1J2TVVJFfl4snyw0pHO4jUsCb547QVK7O8rArto/hLG5aCuPX3gt+y Ckhi01HGJ3HVZbVoPlzqtkdIN353u3M2Vje39sYGN3S0XORW1Qz2/vRdKMIK4hT/ ReTlFQANvwjglXHj/PX1sppbnkOxrBMt/FU= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:19 2026 by rpki-client