$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edae80f4-678e-3d23-9c20-a9e8ce9cbe62.roa File: edae80f4-678e-3d23-9c20-a9e8ce9cbe62.roa (raw, json) Hash identifier: qGBfS7DVyQj+FYzlDxWPg2vMoX6tHwc0UsVnNTSl8WE= Subject key identifier: 8E:62:90:B2:E8:6B:3D:B4:9D:BA:4F:44:91:69:44:CF:95:B7:A8:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5F7FAE43EBF44E624886B580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edae80f4-678e-3d23-9c20-a9e8ce9cbe62.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 2001:19b0:200::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:ae:43:eb:f4:4e:62:48:86:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=dc130763-c5dc-480f-a8c0-66a5084daa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:b0:d8:d3:e9:12:fa:6a:9e:ad:d0:71:ac: 5e:3e:cb:5e:6c:c6:ed:4f:55:c2:af:0f:8d:d4:3d: bc:b8:b0:66:a8:41:b5:9b:9d:01:c2:b2:14:b2:0a: 3c:18:72:08:f6:c9:80:b2:d6:36:a5:3b:4b:25:06: 36:83:b7:74:e1:58:a2:c7:59:f8:8a:d6:c2:05:84: 11:9b:a1:d7:b7:75:1e:7a:b3:fc:0f:83:92:5d:f7: 77:fc:39:fe:20:59:9d:40:11:5a:95:6b:c1:86:9a: ea:64:01:a6:e7:e7:f0:a3:7f:06:75:43:1d:e6:a6: 45:8f:c7:6b:5a:4c:b4:db:3d:83:44:af:db:5c:ca: d5:15:e0:08:0d:33:f7:5b:ef:42:d0:7d:89:7d:ac: 37:ea:9b:36:d9:a9:64:2d:b5:88:e5:2d:49:d6:37: fe:72:b0:26:a7:d6:52:d4:9b:b4:57:e5:ed:a6:de: 4f:24:df:93:ab:a4:9b:0d:39:98:72:72:fa:a8:af: ef:1b:23:98:59:d9:4d:b3:97:3c:d4:cc:f7:15:98: fc:e8:42:c2:22:63:31:76:a1:97:3a:77:fb:86:eb: 64:fa:07:f8:f1:6f:0d:5c:79:dd:16:4b:0f:bd:0b: cf:27:83:b0:fd:78:04:91:2a:28:0f:62:2c:21:b7: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:62:90:B2:E8:6B:3D:B4:9D:BA:4F:44:91:69:44:CF:95:B7:A8:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edae80f4-678e-3d23-9c20-a9e8ce9cbe62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:200::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:99:c9:89:ae:1e:e8:ed:cb:e5:7a:f2:52:18:f0:09:6a:38: bc:d4:e7:2a:82:c6:39:35:7c:1a:df:1c:d8:f1:04:40:b9:c2: 5c:91:65:e3:89:51:df:9e:8b:be:1d:dc:a0:59:8e:f9:9c:a4: cb:bc:19:69:02:84:e5:29:43:23:df:9f:1e:03:ae:4c:1d:68: e3:42:e5:4f:35:89:04:a3:d1:f6:3c:31:c9:d3:9a:1a:57:f6: 13:ce:97:43:68:d8:32:d8:13:48:2a:3d:3a:e3:a4:08:25:c4: 94:76:cd:6d:22:6c:36:12:0a:a7:6f:68:1e:bd:46:4f:74:34: 76:69:ae:75:9e:01:42:02:01:3a:ac:9d:2e:5a:08:1f:51:92: 6c:ce:b0:09:21:82:de:20:a8:45:13:50:4c:d9:a6:2e:48:89: 00:c2:b3:b1:b6:bf:ce:7a:14:e2:68:45:5b:66:60:03:bd:c4: e1:28:ff:d9:7b:1c:a0:d3:32:2f:4d:07:d3:e5:88:bc:d9:ec: 37:02:9a:1f:dc:4e:40:a6:58:d5:3b:9a:44:e9:ca:27:e2:1b: 5f:b2:67:da:40:a8:95:36:31:e6:94:25:a4:9a:bb:b3:72:44: bb:3c:2e:92:a7:9e:22:0d:62:16:8c:d1:71:b3:c9:7a:e4:4e: 73:19:6c:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ff65D6/ROYkiGtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk ZGMxMzA3NjMtYzVkYy00ODBmLWE4YzAtNjZhNTA4NGRhYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqWw2NPpEvpqnq3QcaxePstebMbtT1XCrw+N 1D28uLBmqEG1m50BwrIUsgo8GHII9smAstY2pTtLJQY2g7d04Viix1n4itbCBYQR m6HXt3UeerP8D4OSXfd3/Dn+IFmdQBFalWvBhprqZAGm5+fwo38GdUMd5qZFj8dr Wky02z2DRK/bXMrVFeAIDTP3W+9C0H2Jfaw36ps22alkLbWI5S1J1jf+crAmp9ZS 1Ju0V+Xtpt5PJN+Tq6SbDTmYcnL6qK/vGyOYWdlNs5c81Mz3FZj86ELCImMxdqGX Onf7hutk+gf48W8NXHndFksPvQvPJ4Ow/XgEkSooD2IsIbcTYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI5ikLLoaz20nbpPRJFpRM+Vt6h8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWRhZTgwZjQtNjc4ZS0z ZDIzLTljMjAtYTllOGNlOWNiZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACOZyYmuHujty+V68lIY8AlqOLzU5yqCxjk1fBrfHNjxBEC5wlyR ZeOJUd+ei74d3KBZjvmcpMu8GWkChOUpQyPfnx4DrkwdaONC5U81iQSj0fY8McnT mhpX9hPOl0No2DLYE0gqPTrjpAglxJR2zW0ibDYSCqdvaB69Rk90NHZprnWeAUIC ATqsnS5aCB9RkmzOsAkhgt4gqEUTUEzZpi5IiQDCs7G2v856FOJoRVtmYAO9xOEo /9l7HKDTMi9NB9PliLzZ7DcCmh/cTkCmWNU7mkTpyifiG1+yZ9pAqJU2MeaUJaSa u7NyRLs8LpKnniINYhaM0XGzyXrkTnMZbBY= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:01 2026 by rpki-client