$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2f14f0a-634c-37d5-862e-1a0987d02438.roa File: e2f14f0a-634c-37d5-862e-1a0987d02438.roa (raw, json) Hash identifier: RkL+pwPvGbTFHS0l/2nU/Su7DXmsNRE/qAw+BxlPsUY= Subject key identifier: BE:E0:2F:DD:5D:E7:7E:E0:6F:70:54:17:B1:14:81:B9:F8:7A:F8:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F612D6D2869413268677F7340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2f14f0a-634c-37d5-862e-1a0987d02438.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 2001:19b0:780::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6d:28:69:41:32:68:67:7f:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=9395f36a-3d7c-46a4-bbd4-64c54fa82041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:bc:78:4c:93:ca:71:b0:01:5e:51:87:41: 5d:37:b7:28:07:99:0c:d6:b9:c7:ba:89:08:cd:0f: 80:c4:c4:24:48:f9:47:0b:a6:a0:9b:4e:8b:9d:73: 2c:17:9d:81:63:9b:78:26:45:11:96:20:24:ce:9a: eb:e4:e7:64:2d:2c:17:4b:8d:25:3d:04:34:6a:e8: cb:81:5c:ac:ec:28:c2:65:d5:03:9d:a1:8d:ca:86: de:32:8f:35:a1:24:95:93:e4:9a:32:71:62:dd:ac: 03:13:f1:2b:d2:07:37:bb:95:33:fc:56:12:41:1f: 45:63:65:8a:cf:09:57:f3:15:f1:e2:6d:5e:91:7c: 7b:7b:bb:66:99:12:0c:ca:88:d6:0a:f8:fb:33:6f: b9:01:d5:3d:73:0e:b4:18:84:7b:9f:68:23:f8:97: 35:3e:2c:a0:c8:96:bb:1d:f8:7e:5d:3a:92:0f:19: 5a:6a:0a:b4:fe:64:d4:4a:db:d7:56:ef:49:0b:19: d3:97:bd:81:e0:af:2d:39:52:3f:eb:4d:1f:35:5b: 94:00:09:0d:14:78:df:8a:98:8e:e5:49:19:fb:b4: 27:46:97:8d:50:0b:5a:77:6a:8e:b0:31:6d:1f:28: 42:7a:3d:a2:8b:70:7a:44:4f:16:a2:04:b8:cf:34: df:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E0:2F:DD:5D:E7:7E:E0:6F:70:54:17:B1:14:81:B9:F8:7A:F8:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2f14f0a-634c-37d5-862e-1a0987d02438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:780::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:28:12:1a:d6:39:09:1a:b5:26:3d:43:fc:a9:ab:1c:04:70: fe:06:28:eb:b5:eb:3b:34:b5:67:5c:e5:eb:54:17:2c:14:9c: 33:33:64:57:38:75:31:fa:04:62:b4:7d:0f:bf:b4:91:41:cc: 44:66:67:f5:02:01:c0:f1:ed:3d:a4:f8:61:11:a5:8f:c6:6c: e5:2f:2d:00:83:04:78:3b:46:64:80:40:f5:b0:32:2d:3d:5e: 7a:46:72:55:32:5f:fd:3a:67:97:fc:81:c7:a3:5d:e7:5a:8e: 33:6b:0d:de:7b:17:68:ab:46:28:0e:6e:76:5b:22:2f:5a:b2: 63:58:d3:2e:aa:ca:9a:f6:1d:62:e5:b6:25:e5:63:30:7c:8d: ad:73:b9:0d:9a:be:76:ea:58:ad:39:59:45:c0:c5:e3:7f:99: 6b:d8:76:e3:aa:36:f6:84:d4:66:55:fa:99:95:03:06:4c:d5: 88:8c:59:f4:91:26:6c:00:b0:42:25:f8:2c:21:a2:4d:9e:9d: 2f:a4:27:37:a4:ab:e5:34:8b:93:d7:71:ac:d4:ce:cb:6f:25: 09:ef:05:f7:8b:99:fa:02:96:02:44:62:5c:b1:86:b6:99:44: 03:dd:35:e0:36:14:50:5b:2e:0d:17:9c:6b:31:c9:45:fd:ae: c2:5d:44:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLW0oaUEyaGd/c0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk OTM5NWYzNmEtM2Q3Yy00NmE0LWJiZDQtNjRjNTRmYTgyMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/u8eEyTynGwAV5Rh0FdN7coB5kM1rnHuokI zQ+AxMQkSPlHC6agm06LnXMsF52BY5t4JkURliAkzprr5OdkLSwXS40lPQQ0aujL gVys7CjCZdUDnaGNyobeMo81oSSVk+SaMnFi3awDE/Er0gc3u5Uz/FYSQR9FY2WK zwlX8xXx4m1ekXx7e7tmmRIMyojWCvj7M2+5AdU9cw60GIR7n2gj+Jc1PiygyJa7 Hfh+XTqSDxlaagq0/mTUStvXVu9JCxnTl72B4K8tOVI/600fNVuUAAkNFHjfipiO 5UkZ+7QnRpeNUAtad2qOsDFtHyhCej2ii3B6RE8WogS4zzTfowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL7gL91d537gb3BUF7EUgbn4evggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTJmMTRmMGEtNjM0Yy0z N2Q1LTg2MmUtMWEwOTg3ZDAyNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAeA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACwoEhrWOQkatSY9Q/ypqxwEcP4GKOu16zs0tWdc5etUFywUnDMz ZFc4dTH6BGK0fQ+/tJFBzERmZ/UCAcDx7T2k+GERpY/GbOUvLQCDBHg7RmSAQPWw Mi09XnpGclUyX/06Z5f8gcejXedajjNrDd57F2irRigObnZbIi9asmNY0y6qypr2 HWLltiXlYzB8ja1zuQ2avnbqWK05WUXAxeN/mWvYduOqNvaE1GZV+pmVAwZM1YiM WfSRJmwAsEIl+Cwhok2enS+kJzekq+U0i5PXcazUzstvJQnvBfeLmfoClgJEYlyx hraZRAPdNeA2FFBbLg0XnGsxyUX9rsJdRGc= -----END CERTIFICATE-----Generated at Tue Oct 13 16:02:29 2026 by rpki-client