$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d298f668-c2fc-3e79-9148-3cd9f31f704d.roa File: d298f668-c2fc-3e79-9148-3cd9f31f704d.roa (raw, json) Hash identifier: akdjpMn34lSjmkXlroo3QPHUF0uzW0SETZ83d4qsOn0= Subject key identifier: CF:B7:78:62:35:F6:42:99:42:9B:5D:9D:0C:21:08:B4:C9:76:C3:56 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5F7FA6F97B1A89387B274B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d298f668-c2fc-3e79-9148-3cd9f31f704d.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 2001:19b0:180::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:a6:f9:7b:1a:89:38:7b:27:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=4eebbfa6-eddd-488e-ace3-0fb86a7524d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:11:32:7b:ba:18:22:20:ce:f1:e8:75:df: e3:69:9f:68:63:ca:ba:c0:5d:af:cb:94:d4:ae:00: b7:0d:ab:ec:81:2d:96:18:e2:77:a6:1b:de:56:8a: df:04:33:20:64:98:d0:a5:bd:bc:9f:5a:c2:94:6a: df:13:8c:d9:ea:8b:cb:a1:30:9b:da:31:a8:6e:9a: 9c:c7:85:52:c3:7a:48:7a:0d:dd:c0:16:42:c1:33: 75:c8:aa:39:a5:75:82:b9:b9:68:0f:9d:d5:86:b6: 17:03:bf:9f:86:fb:e4:60:53:82:b4:04:65:ed:39: 74:81:13:2f:3b:cb:0c:75:4e:98:42:4a:d1:88:69: a7:1b:88:83:f3:26:24:1b:83:1b:82:2f:7f:14:78: a0:fe:f1:e5:7d:db:a4:e4:96:e6:e2:e2:25:ee:38: f9:6a:65:68:63:98:cb:b4:7b:1c:23:7a:b0:be:cd: 42:c8:e1:83:ee:59:1a:04:cf:b9:03:ca:d5:90:48: 06:31:c1:6e:be:e3:73:2a:86:c8:b4:41:8a:f2:86: 03:4a:ab:18:35:34:7e:07:d9:67:38:c8:83:c3:7c: 32:b9:c3:52:51:9a:0f:46:96:6b:29:04:67:3f:b2: d8:b2:d1:8f:b8:a6:5d:8a:f7:8d:33:87:35:b0:76: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B7:78:62:35:F6:42:99:42:9B:5D:9D:0C:21:08:B4:C9:76:C3:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d298f668-c2fc-3e79-9148-3cd9f31f704d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:180::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:21:3e:26:a7:35:eb:3f:a9:80:77:18:72:f9:0f:25:ed:ff: 86:53:d3:48:ff:76:00:47:c2:5b:f0:cf:0b:7b:4f:ad:98:f8: 54:60:7e:6a:6a:36:ba:43:29:8d:5c:0d:06:d0:16:a1:64:7d: 73:e6:a5:98:46:84:49:db:cc:44:37:95:61:95:ac:b0:f5:b0: ca:ed:67:77:4d:4d:67:4b:84:2f:6f:eb:4f:e1:61:98:f3:cf: 19:ff:5b:9a:04:dc:47:c8:6b:ee:b1:98:15:ef:98:51:50:6e: 50:48:19:22:ff:80:78:fe:73:e7:31:b9:bf:bf:2c:40:39:b3: bc:35:21:ff:c9:88:48:11:56:a2:1e:14:59:0b:d8:1d:87:50: 7f:bb:e6:24:dd:08:7d:10:f2:89:ab:a3:7d:bd:b3:5c:7a:98: fa:10:6a:0d:1b:83:f6:c9:bd:4e:6d:85:e6:50:53:aa:5a:f0: b9:ab:51:e8:05:28:ed:41:58:33:9d:01:dc:e8:a1:39:4b:3c: 78:46:75:20:0f:e5:2e:e5:11:b4:d5:e9:2c:1c:7f:f9:0e:2b: 29:dd:52:b6:9a:22:95:e3:97:c4:51:93:42:71:34:a2:82:cc: 74:79:a9:50:6e:65:1b:f4:70:07:13:b1:06:60:14:8e:26:4c: fa:bd:39:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ff6b5exqJOHsnS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk NGVlYmJmYTYtZWRkZC00ODhlLWFjZTMtMGZiODZhNzUyNGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZsRMnu6GCIgzvHodd/jaZ9oY8q6wF2vy5TU rgC3DavsgS2WGOJ3phveVorfBDMgZJjQpb28n1rClGrfE4zZ6ovLoTCb2jGobpqc x4VSw3pIeg3dwBZCwTN1yKo5pXWCubloD53VhrYXA7+fhvvkYFOCtARl7Tl0gRMv O8sMdU6YQkrRiGmnG4iD8yYkG4Mbgi9/FHig/vHlfduk5Jbm4uIl7jj5amVoY5jL tHscI3qwvs1CyOGD7lkaBM+5A8rVkEgGMcFuvuNzKobItEGK8oYDSqsYNTR+B9ln OMiDw3wyucNSUZoPRpZrKQRnP7LYstGPuKZdiveNM4c1sHZZPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM+3eGI19kKZQptdnQwhCLTJdsNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI5OGY2NjgtYzJmYy0z ZTc5LTkxNDgtM2NkOWYzMWY3MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHQhPianNes/qYB3GHL5DyXt/4ZT00j/dgBHwlvwzwt7T62Y+FRg fmpqNrpDKY1cDQbQFqFkfXPmpZhGhEnbzEQ3lWGVrLD1sMrtZ3dNTWdLhC9v60/h YZjzzxn/W5oE3EfIa+6xmBXvmFFQblBIGSL/gHj+c+cxub+/LEA5s7w1If/JiEgR VqIeFFkL2B2HUH+75iTdCH0Q8omro329s1x6mPoQag0bg/bJvU5theZQU6pa8Lmr UegFKO1BWDOdAdzooTlLPHhGdSAP5S7lEbTV6Swcf/kOKyndUraaIpXjl8RRk0Jx NKKCzHR5qVBuZRv0cAcTsQZgFI4mTPq9OWo= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:33 2026 by rpki-client