$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2f14f0a-634c-37d5-862e-1a0987d02438.roa File: e2f14f0a-634c-37d5-862e-1a0987d02438.roa (raw, json) Hash identifier: wrnvENkKv4Xtj1ji3eBmu3MoNE6gDk6YD6ZOsE1ExHw= Subject key identifier: C4:3D:AF:00:01:98:68:39:C8:10:03:29:06:30:DE:C0:99:06:6A:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EBDDC6641D513ABA587C2F000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2f14f0a-634c-37d5-862e-1a0987d02438.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 2001:19b0:780::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:66:41:d5:13:ab:a5:87:c2:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=799cf29b-6616-4d00-b423-f3677f955ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:d0:26:db:fc:f3:b2:ec:d7:54:3e:ac:72: 82:56:1a:c1:05:db:e1:48:36:00:b2:08:ad:cf:bf: ab:34:46:82:85:e3:00:64:30:57:3c:56:d0:6e:56: cc:09:22:e6:4a:12:16:3e:5a:7a:3b:e9:f4:46:d2: 32:6e:6a:50:19:4a:db:ec:5a:45:12:ba:ff:89:2b: 86:5e:ed:12:4d:90:b6:20:03:5b:58:45:89:e6:be: e9:64:69:1b:0e:7b:16:64:9f:61:ba:45:98:b3:3e: a5:11:24:a4:48:1f:c7:17:79:4a:9a:80:69:db:b0: f0:f7:98:6b:d6:96:6f:51:be:42:9f:ce:08:a5:84: df:df:4d:dc:64:0f:0f:2f:d2:45:5c:71:73:1b:e4: ce:c8:61:3d:eb:c3:bc:c5:f3:c4:02:69:58:b5:af: fe:de:57:aa:60:29:79:89:64:54:1a:6b:80:b0:70: 05:43:b7:04:b3:f6:c2:6c:b2:2e:9b:29:1a:c8:26: e7:e1:d1:ed:42:69:4b:21:22:19:f6:02:a4:3b:f0: db:39:be:81:b3:5f:10:02:6a:47:40:5e:d3:79:ed: 2d:1a:93:62:cd:e8:3c:3a:86:89:45:19:2e:51:9e: f7:54:a4:24:3a:f9:7b:9d:69:23:08:61:49:d9:03: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3D:AF:00:01:98:68:39:C8:10:03:29:06:30:DE:C0:99:06:6A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2f14f0a-634c-37d5-862e-1a0987d02438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:780::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1c:7e:06:d0:e7:61:a7:1b:b0:70:82:66:4f:a4:84:d5:6c: d0:e0:d4:31:3d:7a:cb:9c:a5:82:4f:6e:37:5c:37:85:b0:c6: 2c:d8:ba:6b:3a:75:80:c7:8b:8e:bf:02:92:92:31:cf:57:ec: ef:a9:17:f4:e9:cf:e7:36:11:26:69:f5:0e:c4:18:cb:38:55: 25:f4:ca:55:1f:93:ae:00:e8:ea:40:7a:95:12:32:6e:34:01: a0:f8:24:cb:50:c2:d5:4c:55:88:d6:3f:9d:9c:7c:e4:4b:b4: dc:b1:4f:9c:b3:0a:8f:02:93:03:0a:5f:a1:0c:9d:76:51:cd: 9e:75:23:0c:5f:70:81:f5:55:0d:7d:b1:69:5a:91:01:0a:e8: 94:d1:a2:6e:d7:aa:63:e1:8c:5d:73:bd:0c:d0:53:2a:fd:03: 21:d2:9c:18:10:60:66:af:bd:21:3b:2c:16:76:aa:67:c8:93: 7d:f1:e9:fd:dc:d6:8b:bc:d7:f2:fb:5d:0f:5a:47:07:a8:d5: 4e:bb:18:f3:a6:4c:f1:d3:19:68:a8:90:bd:b2:2c:4f:fb:34: 19:18:a4:e1:42:0a:3d:bd:cf:92:25:22:86:0e:50:d6:53:26: f2:b8:8e:fd:03:a3:4f:fc:6c:96:14:e4:89:41:58:00:cb:f8: b9:a7:4f:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE693GZB1ROrpYfC8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzk5Y2YyOWItNjYxNi00ZDAwLWI0MjMtZjM2NzdmOTU1Y2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA3QJtv887Ls11Q+rHKCVhrBBdvhSDYAsgit z7+rNEaCheMAZDBXPFbQblbMCSLmShIWPlp6O+n0RtIybmpQGUrb7FpFErr/iSuG Xu0STZC2IANbWEWJ5r7pZGkbDnsWZJ9hukWYsz6lESSkSB/HF3lKmoBp27Dw95hr 1pZvUb5Cn84IpYTf303cZA8PL9JFXHFzG+TOyGE968O8xfPEAmlYta/+3leqYCl5 iWRUGmuAsHAFQ7cEs/bCbLIumykayCbn4dHtQmlLISIZ9gKkO/DbOb6Bs18QAmpH QF7Tee0tGpNizeg8OoaJRRkuUZ73VKQkOvl7nWkjCGFJ2QPMNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMQ9rwABmGg5yBADKQYw3sCZBmqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTJmMTRmMGEtNjM0Yy0z N2Q1LTg2MmUtMWEwOTg3ZDAyNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAeA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIscfgbQ52GnG7BwgmZPpITVbNDg1DE9esucpYJPbjdcN4WwxizY ums6dYDHi46/ApKSMc9X7O+pF/Tpz+c2ESZp9Q7EGMs4VSX0ylUfk64A6OpAepUS Mm40AaD4JMtQwtVMVYjWP52cfORLtNyxT5yzCo8CkwMKX6EMnXZRzZ51IwxfcIH1 VQ19sWlakQEK6JTRom7XqmPhjF1zvQzQUyr9AyHSnBgQYGavvSE7LBZ2qmfIk33x 6f3c1ou81/L7XQ9aRweo1U67GPOmTPHTGWiokL2yLE/7NBkYpOFCCj29z5IlIoYO UNZTJvK4jv0Do0/8bJYU5IlBWADL+LmnT38= -----END CERTIFICATE-----Generated at Thu Aug 27 13:17:25 2026 by rpki-client