$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1a75fb0-441d-37df-90f7-e4f15408ebc0.roa File: f1a75fb0-441d-37df-90f7-e4f15408ebc0.roa (raw, json) Hash identifier: dCThpgW77MUvhXFUScVD0t1xrae/WXYp+aRHL2g/Zys= Subject key identifier: B8:B4:B8:4A:0A:DA:76:DA:6D:15:44:7C:EC:59:46:DA:FD:D6:9E:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F612D6BE5E6E6A1AAF7505780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1a75fb0-441d-37df-90f7-e4f15408ebc0.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 2001:19b0:4c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6b:e5:e6:e6:a1:aa:f7:50:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=4916724a-3af8-4dfa-a527-f353302f9a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:35:bf:df:09:14:2f:c2:76:b7:08:dc:bb: f1:fa:e3:00:d2:2f:e7:87:ef:bb:ee:66:ee:12:26: 07:f0:5e:fb:ab:03:44:55:b1:ab:31:6c:e3:c2:b9: e9:95:01:c3:ab:2b:18:7c:61:6d:e1:51:71:ec:49: f5:f0:34:9d:60:2b:08:87:d7:b1:cd:52:93:12:13: a1:61:4a:f4:19:0d:23:da:3a:f3:5a:57:66:7b:94: 30:18:eb:01:6e:7e:b0:e5:ed:99:74:48:a1:04:38: 6c:54:d3:0a:92:0a:40:32:f6:43:5d:19:b9:09:8e: c6:f1:94:1b:93:bb:85:c8:ff:98:85:16:be:d9:42: 3e:e8:8c:46:83:47:35:2d:2b:cc:d9:6c:3a:ed:18: 75:0f:9b:4b:a2:82:93:14:bb:62:b2:77:90:ef:99: 26:ba:44:7f:10:a8:cd:3e:08:6c:b2:be:9e:e1:8d: 86:28:76:2c:da:7e:67:f7:fc:86:b5:2e:c0:bc:27: 5f:8d:9f:87:0e:2c:8a:ac:f9:bd:37:5a:6a:1a:6f: 53:5c:59:c7:5d:1b:05:4e:b4:7e:48:91:39:2d:22: 44:76:48:71:ee:30:11:cf:b9:20:61:72:5e:5a:28: 56:52:4b:5f:e4:c1:59:30:e0:b3:fe:00:d7:02:84: b7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B4:B8:4A:0A:DA:76:DA:6D:15:44:7C:EC:59:46:DA:FD:D6:9E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1a75fb0-441d-37df-90f7-e4f15408ebc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:4c0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d8:c0:21:13:bc:7a:49:90:ce:02:82:91:3e:78:68:98:d3: 7a:36:54:bc:1c:ca:aa:11:11:57:44:54:56:3b:76:2f:c1:69: 9d:1d:e7:d8:53:51:2d:2a:97:61:d3:90:78:1d:0b:67:b6:2e: 0d:84:0f:1b:61:6a:20:54:9b:e4:ad:73:0a:ce:7c:50:85:97: a0:b3:51:71:ee:3f:c6:9a:ed:78:35:cc:70:b0:a4:a1:85:c7: 5b:50:7e:7e:85:d8:b2:14:4a:4e:ae:4a:e9:bf:a2:9b:d8:91: a6:38:59:b9:b9:68:11:7b:5d:4b:22:aa:b7:32:05:dd:ea:2c: 73:86:ad:a3:3b:26:83:55:11:ba:d4:54:6a:0d:fe:0d:31:3f: 18:ff:3c:17:03:af:ea:1a:d4:ea:3b:af:e8:6b:34:2b:d1:8f: b5:12:f4:4d:ee:73:26:82:35:70:85:7a:13:ef:06:3d:e1:35: 4d:4d:c2:f2:0e:d8:2d:ea:95:29:46:4e:e5:45:0d:68:fd:2c: 77:a5:4b:37:ae:2e:dc:89:92:a9:f4:d4:a7:2f:1b:53:2c:c6: 8f:ec:7f:1c:98:df:39:56:f4:16:63:c6:f6:e3:df:c8:9e:fc: 5b:5a:c0:2a:3d:f6:28:f3:e1:9e:8a:6f:82:85:dc:81:b2:51: e2:5f:23:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLWvl5uahqvdQV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NDkxNjcyNGEtM2FmOC00ZGZhLWE1MjctZjM1MzMwMmY5YTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVQ1v98JFC/CdrcI3Lvx+uMA0i/nh++77mbu EiYH8F77qwNEVbGrMWzjwrnplQHDqysYfGFt4VFx7En18DSdYCsIh9exzVKTEhOh YUr0GQ0j2jrzWldme5QwGOsBbn6w5e2ZdEihBDhsVNMKkgpAMvZDXRm5CY7G8ZQb k7uFyP+YhRa+2UI+6IxGg0c1LSvM2Ww67Rh1D5tLooKTFLtisneQ75kmukR/EKjN Pghssr6e4Y2GKHYs2n5n9/yGtS7AvCdfjZ+HDiyKrPm9N1pqGm9TXFnHXRsFTrR+ SJE5LSJEdkhx7jARz7kgYXJeWihWUktf5MFZMOCz/gDXAoS3vQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLi0uEoK2nbabRVEfOxZRtr91p60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFhNzVmYjAtNDQxZC0z N2RmLTkwZjctZTRmMTU0MDhlYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsATA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH/YwCETvHpJkM4CgpE+eGiY03o2VLwcyqoREVdEVFY7di/BaZ0d 59hTUS0ql2HTkHgdC2e2Lg2EDxthaiBUm+StcwrOfFCFl6CzUXHuP8aa7Xg1zHCw pKGFx1tQfn6F2LIUSk6uSum/opvYkaY4Wbm5aBF7XUsiqrcyBd3qLHOGraM7JoNV EbrUVGoN/g0xPxj/PBcDr+oa1Oo7r+hrNCvRj7US9E3ucyaCNXCFehPvBj3hNU1N wvIO2C3qlSlGTuVFDWj9LHelSzeuLtyJkqn01KcvG1Msxo/sfxyY3zlW9BZjxvbj 38ie/FtawCo99ijz4Z6Kb4KF3IGyUeJfIxM= -----END CERTIFICATE-----Generated at Tue Oct 13 04:13:42 2026 by rpki-client