$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/337b8c0a-866a-37c1-9ce8-222d7c283071.roa File: 337b8c0a-866a-37c1-9ce8-222d7c283071.roa (raw, json) Hash identifier: 82Q3ofu7qhucEoBpnQeA9PhBAIuaciAr8ZbKpM+Ycm8= Subject key identifier: 60:7D:A0:7B:F4:62:2A:72:4A:51:0A:D5:D8:58:7B:17:B8:36:08:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F612D6B538564874A0F2F5700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/337b8c0a-866a-37c1-9ce8-222d7c283071.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 2001:19b0:67::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6b:53:85:64:87:4a:0f:2f:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=82719038-2a07-42d8-ae68-79089bbddd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:70:1f:31:ae:f8:42:5c:be:cb:4e:fe:78: 68:47:85:51:25:11:41:5f:f9:ee:f8:89:dd:61:d5: f8:e6:60:3d:24:a6:ec:ac:4c:eb:b7:e6:ec:af:3d: 48:74:fb:22:15:d2:f2:72:24:c0:02:f5:cb:9b:f1: f7:56:29:4e:71:08:3d:5e:21:b7:33:6d:d4:84:af: b6:98:8a:99:08:48:20:1d:30:f3:27:6e:9a:62:21: c1:9e:a4:5d:9c:2f:67:65:9b:69:1a:b7:73:cf:19: e9:66:5a:56:5c:c5:d3:18:19:75:ce:c8:90:50:b1: e7:0b:6d:32:18:49:94:27:c5:ae:89:65:91:7f:8f: cd:c8:d6:83:b6:a2:c5:bb:6a:73:0a:7a:dd:a5:19: d0:b5:55:59:59:ce:1a:7b:bf:7f:4b:93:9b:a3:cc: 05:eb:4e:64:a5:1e:62:37:48:79:72:04:44:17:f5: f1:2f:44:d9:49:ef:98:d2:5a:ef:ac:13:39:85:c5: 7c:50:3d:11:21:1a:cd:04:15:2e:35:f0:a6:81:75: 1a:c0:32:82:21:dd:4a:cf:82:76:57:c1:5c:ce:63: 47:5e:fa:ae:8e:ec:73:2e:30:d1:86:c1:6f:e0:e0: 73:0d:30:47:78:56:4d:8c:c6:4b:2f:48:92:4b:63: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7D:A0:7B:F4:62:2A:72:4A:51:0A:D5:D8:58:7B:17:B8:36:08:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/337b8c0a-866a-37c1-9ce8-222d7c283071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:67::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:61:b7:4b:0a:e7:e9:6c:8c:a8:a1:75:ff:46:ee:a8:d4:2b: d1:bd:54:29:2a:fd:ca:d8:3b:9e:dd:ca:92:ed:22:57:37:1a: da:9a:a1:90:e7:68:e6:4e:58:cc:25:56:59:97:03:e2:85:68: 58:c2:00:10:8e:e8:80:f5:26:87:50:34:72:b0:15:60:78:5c: f1:d4:8c:3c:11:5d:5a:c7:66:6f:65:54:a3:39:e4:ca:16:cc: 36:95:90:49:dc:e7:3e:e5:37:b4:9d:e2:d0:e4:bf:7a:d6:0b: 41:21:ad:34:1e:eb:d2:4a:10:4b:3d:f6:c2:c4:4c:ef:d2:90: 0f:7c:b5:ad:0a:db:68:9f:44:00:ec:86:92:f4:10:2d:e8:ca: 04:0d:b9:ce:29:c9:a3:b9:58:b8:eb:ff:83:a7:e1:19:aa:5d: 24:de:60:e2:36:42:7a:cd:c4:e3:1c:b6:2a:c9:50:a5:23:33: 0d:b8:51:e5:06:fd:f5:fb:e7:f7:ce:7c:27:b4:b4:0d:48:a3: fb:ba:fa:5a:11:b3:c6:46:53:d1:6c:0b:3d:71:e1:4e:d8:a2: c8:67:8d:fd:a5:22:a9:23:15:cb:2c:d1:14:83:33:12:94:13: 32:97:35:ad:d4:df:c5:66:4f:f1:d0:ed:20:23:de:6e:eb:25: 0d:c8:12:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLWtThWSHSg8vVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ODI3MTkwMzgtMmEwNy00MmQ4LWFlNjgtNzkwODliYmRkZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDhwHzGu+EJcvstO/nhoR4VRJRFBX/nu+Ind YdX45mA9JKbsrEzrt+bsrz1IdPsiFdLyciTAAvXLm/H3VilOcQg9XiG3M23UhK+2 mIqZCEggHTDzJ26aYiHBnqRdnC9nZZtpGrdzzxnpZlpWXMXTGBl1zsiQULHnC20y GEmUJ8WuiWWRf4/NyNaDtqLFu2pzCnrdpRnQtVVZWc4ae79/S5Obo8wF605kpR5i N0h5cgREF/XxL0TZSe+Y0lrvrBM5hcV8UD0RIRrNBBUuNfCmgXUawDKCId1Kz4J2 V8FczmNHXvqujuxzLjDRhsFv4OBzDTBHeFZNjMZLL0iSS2Od1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGB9oHv0YipySlEK1dhYexe4NgigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzM3YjhjMGEtODY2YS0z N2MxLTljZTgtMjIyZDdjMjgzMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH5ht0sK5+lsjKihdf9G7qjUK9G9VCkq/crYO57dypLtIlc3Gtqa oZDnaOZOWMwlVlmXA+KFaFjCABCO6ID1JodQNHKwFWB4XPHUjDwRXVrHZm9lVKM5 5MoWzDaVkEnc5z7lN7Sd4tDkv3rWC0EhrTQe69JKEEs99sLETO/SkA98ta0K22if RADshpL0EC3oygQNuc4pyaO5WLjr/4On4RmqXSTeYOI2QnrNxOMctirJUKUjMw24 UeUG/fX75/fOfCe0tA1Io/u6+loRs8ZGU9FsCz1x4U7Yoshnjf2lIqkjFcss0RSD MxKUEzKXNa3U38VmT/HQ7SAj3m7rJQ3IEig= -----END CERTIFICATE-----Generated at Sun Oct 11 23:47:05 2026 by rpki-client