$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d45142a0-8be7-3838-85b8-c3eb51445659.roa File: d45142a0-8be7-3838-85b8-c3eb51445659.roa (raw, json) Hash identifier: rKT1rvIZkUI/itLQggxTc245XmzpjpkmJY6FjRE/4So= Subject key identifier: EA:7E:A9:04:C7:F0:41:7B:69:BE:60:30:53:ED:35:2A:76:BA:E6:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D57D0428CB5F9BCC6AF2C67C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d45142a0-8be7-3838-85b8-c3eb51445659.roa Signing time: Mon 30 Mar 2026 18:56:31 +0000 ROA not before: Mon 30 Mar 2026 18:56:31 +0000 ROA not after: Sun 28 Jun 2026 18:56:31 +0000 asID: 7029 IP address blocks: 2001:19b0:9ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:d0:42:8c:b5:f9:bc:c6:af:2c:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 18:56:31 2026 GMT Not After : Jun 28 18:56:31 2026 GMT Subject: CN=6ac8b2fe-91a8-4da7-9c61-b070b1f1d1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8a:e0:05:d4:e6:89:ff:31:28:b7:e5:bf:90: 36:5f:b9:6e:bd:03:9b:6f:fb:44:97:b2:bc:cb:4f: 3e:9a:fa:ed:0f:b3:09:3f:a4:43:30:bb:23:2c:dc: be:4c:eb:07:3a:18:dd:da:3f:fe:03:57:13:6c:2a: 69:f3:c9:6f:5d:88:4b:a0:8f:6a:0f:23:2b:f0:3a: 84:f5:e2:19:6e:79:98:3a:36:c2:2a:44:29:e3:5d: 4b:2f:fd:75:89:76:92:06:6d:67:03:2f:6e:ae:57: 2f:0d:2b:03:a0:dc:ce:de:56:37:2e:c5:b7:87:24: fc:d5:a9:86:dc:70:28:e4:f0:c8:7f:50:89:4a:e0: 64:cd:7e:ad:68:84:62:4c:53:31:e2:2e:a1:7c:dc: 63:b0:a9:e9:6e:96:15:59:40:a6:d3:8e:fc:5d:09: f6:2c:d6:4e:f6:9f:10:44:9c:37:05:0a:f7:a7:e3: 15:04:ab:f4:b7:16:fa:2a:93:25:7f:7b:9d:4d:18: a6:e3:02:b0:1a:12:cf:e6:41:91:4d:bd:05:94:8e: 7e:5d:6f:a1:0a:b8:f1:ed:01:4c:0f:90:fd:ac:e0: b3:0b:ab:7c:8d:69:37:57:7c:0b:20:71:0f:30:9b: 7b:25:23:76:16:0d:6d:9e:70:4a:02:75:2b:91:55: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7E:A9:04:C7:F0:41:7B:69:BE:60:30:53:ED:35:2A:76:BA:E6:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d45142a0-8be7-3838-85b8-c3eb51445659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:9ce::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1c:0f:bf:3b:b1:93:a5:87:17:8c:0f:71:55:c1:a3:07:e2: 1f:4a:ce:fc:cf:4e:7d:e5:ae:77:88:54:5b:58:b4:f3:2d:cc: 04:39:20:e1:d3:0d:3f:d8:1f:b3:5d:99:ab:73:a7:3e:5b:d5: 8d:de:40:51:32:8d:a1:f6:94:f2:fb:6f:84:1e:0b:96:03:08: f3:7d:6e:d9:23:46:73:4c:fd:7a:29:e0:0d:5a:7d:aa:98:09: 9c:46:92:98:7c:21:4b:72:ad:a4:de:3c:93:61:a0:d9:83:0e: a3:0a:55:b2:1e:dc:bf:91:fc:3d:ad:a1:9a:87:94:85:41:e3: b6:73:13:11:f5:f7:6e:46:a4:ea:6f:a9:1d:7c:b9:a4:2b:24: 6b:42:13:15:81:eb:10:77:3a:af:86:11:fc:08:cd:a1:4f:d4: 68:3a:a2:50:62:a9:ea:db:44:48:3a:2a:40:ba:d7:3f:a3:54: 19:9a:50:be:c7:72:4c:36:4f:73:a5:b0:80:f0:e4:c7:8f:b6: 86:e7:35:73:3b:83:2b:cb:94:84:70:ae:f4:ac:e3:c4:4f:c3: 6b:03:5c:9e:c3:66:ae:b1:01:8e:7e:fe:67:3e:3c:99:99:ac: 67:3c:ee:cf:ee:8a:b1:91:2e:b4:c0:ec:d2:d9:8d:5e:1d:11: 59:83:22:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1X0EKMtfm8xq8sZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDE4NTYzMVoXDTI2MDYyODE4NTYzMVowLzEtMCsGA1UEAxMk NmFjOGIyZmUtOTFhOC00ZGE3LTljNjEtYjA3MGIxZjFkMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4rgBdTmif8xKLflv5A2X7luvQObb/tEl7K8 y08+mvrtD7MJP6RDMLsjLNy+TOsHOhjd2j/+A1cTbCpp88lvXYhLoI9qDyMr8DqE 9eIZbnmYOjbCKkQp411LL/11iXaSBm1nAy9urlcvDSsDoNzO3lY3LsW3hyT81amG 3HAo5PDIf1CJSuBkzX6taIRiTFMx4i6hfNxjsKnpbpYVWUCm0478XQn2LNZO9p8Q RJw3BQr3p+MVBKv0txb6KpMlf3udTRim4wKwGhLP5kGRTb0FlI5+XW+hCrjx7QFM D5D9rOCzC6t8jWk3V3wLIHEPMJt7JSN2Fg1tnnBKAnUrkVVH/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOp+qQTH8EF7ab5gMFPtNSp2uubAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDQ1MTQyYTAtOGJlNy0z ODM4LTg1YjgtYzNlYjUxNDQ1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsAnO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADMcD787sZOlhxeMD3FVwaMH4h9KzvzPTn3lrneIVFtYtPMtzAQ5 IOHTDT/YH7Ndmatzpz5b1Y3eQFEyjaH2lPL7b4QeC5YDCPN9btkjRnNM/Xop4A1a faqYCZxGkph8IUtyraTePJNhoNmDDqMKVbIe3L+R/D2toZqHlIVB47ZzExH1925G pOpvqR18uaQrJGtCExWB6xB3Oq+GEfwIzaFP1Gg6olBiqerbREg6KkC61z+jVBma UL7Hckw2T3OlsIDw5MePtobnNXM7gyvLlIRwrvSs48RPw2sDXJ7DZq6xAY5+/mc+ PJmZrGc87s/uirGRLrTA7NLZjV4dEVmDIvw= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:38 2026 by rpki-client