$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fde550cc-00a4-3943-aa25-8a6a5120cf40.roa File: fde550cc-00a4-3943-aa25-8a6a5120cf40.roa (raw, json) Hash identifier: BZRdh+akuCRTnd6nJSk69DdxzKvsi+ULwgNlQdMl61U= Subject key identifier: 56:3C:20:43:13:D6:3E:C9:01:AE:FD:DD:A9:DE:0A:3A:18:8B:3C:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D57CF3F229845DF35BCBDF5B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fde550cc-00a4-3943-aa25-8a6a5120cf40.roa Signing time: Mon 30 Mar 2026 18:54:29 +0000 ROA not before: Mon 30 Mar 2026 18:54:29 +0000 ROA not after: Sun 28 Jun 2026 18:54:29 +0000 asID: 7029 IP address blocks: 2001:19b0:9c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:cf:3f:22:98:45:df:35:bc:bd:f5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 18:54:29 2026 GMT Not After : Jun 28 18:54:29 2026 GMT Subject: CN=57243992-2072-4c50-a8dc-eb25bed8ad1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:e1:67:4f:2a:06:2d:80:e0:98:df:89:7e: 7f:48:bf:91:7d:19:f8:09:47:8f:42:6d:65:8a:f4: 29:f3:9e:c9:3b:9f:05:8a:7d:e5:b5:3a:3d:04:fb: 6e:fd:4e:ed:8a:ff:ec:72:9b:8e:35:a5:9d:7f:aa: ce:b1:59:53:c8:05:b7:0b:c7:bf:59:2c:dc:45:d6: 28:29:f8:24:fa:d6:12:6d:61:97:b9:48:1b:f3:98: f7:78:50:be:09:72:d3:60:37:06:2e:ee:16:5c:85: a1:44:42:50:83:10:67:69:00:4b:86:db:20:b1:16: 45:f4:53:88:3a:1e:08:1c:3e:0d:53:ec:7e:e2:75: df:29:d1:28:c5:d0:40:22:99:9d:ba:72:cf:c1:61: e4:9d:3a:3d:40:ea:25:01:6f:3a:16:c4:ba:ed:8c: 4c:e9:7d:c5:eb:12:c5:a0:ca:87:4e:b9:99:91:d9: e5:f0:fa:6d:7e:93:db:5a:79:3e:f4:ab:ae:9a:67: 89:68:b3:e5:a4:59:62:81:e9:92:71:e7:58:99:f5: 3a:0c:1d:68:0a:25:18:cb:01:87:35:1e:f4:d5:4e: 6d:93:dd:cd:15:c8:69:2f:5e:70:d5:d8:09:7a:e6: a7:cd:85:0d:0e:e7:93:7a:68:9b:f2:ad:dc:c9:1a: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3C:20:43:13:D6:3E:C9:01:AE:FD:DD:A9:DE:0A:3A:18:8B:3C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fde550cc-00a4-3943-aa25-8a6a5120cf40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:9c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:29:16:0a:31:49:11:97:bd:75:1d:3e:00:69:e5:20:eb:f4: 58:8e:b3:c7:30:fa:e3:e4:44:96:72:98:72:5b:73:11:51:76: 9c:59:f0:fe:02:3e:fc:a1:c5:c9:f2:e5:c1:94:3c:2f:5f:9c: 81:5f:36:05:23:67:9e:97:bd:e0:d7:45:c3:ca:d9:76:44:12: 59:5d:84:c9:6a:04:80:d2:1b:51:6d:73:2b:df:a9:95:45:39: 5a:10:db:6a:ab:d2:d3:41:78:7d:f3:4f:31:49:48:09:b6:90: 7b:d3:3b:44:d7:2f:58:92:3e:c7:2a:d8:b3:eb:31:02:b2:7d: 85:0d:46:5b:96:b8:f3:ef:da:c7:3e:c1:50:6d:d8:f6:ce:fc: 83:6d:af:62:75:3a:06:c6:c0:b8:a3:60:4b:50:0b:1b:0c:25: 84:95:a9:bd:14:1c:c3:e8:d7:3c:8b:73:57:a2:36:47:9a:6b: 74:33:07:a7:5b:5b:c6:45:56:3b:61:3a:0d:1c:b5:34:e6:ae: 53:7e:d0:3e:86:b2:26:ca:d8:86:0d:66:da:9f:9a:09:a3:c9: 6a:ab:59:01:93:de:cc:55:0a:e2:8e:f7:1a:7a:a4:26:a2:04: 58:a4:2f:d4:b1:33:bb:f4:77:7d:01:87:e2:75:a7:c2:b9:10: 4f:1e:b1:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Xzz8imEXfNby99bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDE4NTQyOVoXDTI2MDYyODE4NTQyOVowLzEtMCsGA1UEAxMk NTcyNDM5OTItMjA3Mi00YzUwLWE4ZGMtZWIyNWJlZDhhZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAfhZ08qBi2A4JjfiX5/SL+RfRn4CUePQm1l ivQp857JO58Fin3ltTo9BPtu/U7tiv/scpuONaWdf6rOsVlTyAW3C8e/WSzcRdYo Kfgk+tYSbWGXuUgb85j3eFC+CXLTYDcGLu4WXIWhREJQgxBnaQBLhtsgsRZF9FOI Oh4IHD4NU+x+4nXfKdEoxdBAIpmdunLPwWHknTo9QOolAW86FsS67YxM6X3F6xLF oMqHTrmZkdnl8PptfpPbWnk+9KuummeJaLPlpFligemScedYmfU6DB1oCiUYywGH NR701U5tk93NFchpL15w1dgJeuanzYUNDueTemib8q3cyRrbIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFY8IEMT1j7JAa793aneCjoYizwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmRlNTUwY2MtMDBhNC0z OTQzLWFhMjUtOGE2YTUxMjBjZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsAnC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4pFgoxSRGXvXUdPgBp5SDr9FiOs8cw+uPkRJZymHJbcxFRdpxZ 8P4CPvyhxcny5cGUPC9fnIFfNgUjZ56XveDXRcPK2XZEElldhMlqBIDSG1Ftcyvf qZVFOVoQ22qr0tNBeH3zTzFJSAm2kHvTO0TXL1iSPscq2LPrMQKyfYUNRluWuPPv 2sc+wVBt2PbO/INtr2J1OgbGwLijYEtQCxsMJYSVqb0UHMPo1zyLc1eiNkeaa3Qz B6dbW8ZFVjthOg0ctTTmrlN+0D6GsibK2IYNZtqfmgmjyWqrWQGT3sxVCuKO9xp6 pCaiBFikL9SxM7v0d30Bh+J1p8K5EE8esVs= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:47 2026 by rpki-client