$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5db1abf1-106e-3836-aea5-0339938cbd98.roa File: 5db1abf1-106e-3836-aea5-0339938cbd98.roa (raw, json) Hash identifier: kwfLXsoYT6Wp9OKRIMn/qrAuTeS4YdA0JIUyc1TcwJg= Subject key identifier: 17:78:76:C8:A6:56:DA:C6:B4:1B:0D:2E:D9:D9:08:59:5D:40:A5:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F612D6939C469D92899CCC800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5db1abf1-106e-3836-aea5-0339938cbd98.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 2001:19b0:700::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:69:39:c4:69:d9:28:99:cc:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=be8b7569-8bd9-4b0e-aed1-92ee61536d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d6:ea:eb:bf:8e:e5:a3:5c:4e:a2:bf:a7:45: c3:7b:ca:d7:42:ff:b2:52:9e:33:9e:a0:a7:7b:61: 49:67:a4:8c:1f:33:31:8d:30:72:0b:84:69:4c:72: b8:8a:ab:64:6c:8b:5c:28:8b:59:89:49:ed:8d:02: 66:8e:19:21:69:d9:38:67:fe:80:8f:a7:82:ac:c7: 40:43:54:4a:20:be:8e:76:4e:48:2d:41:d0:35:68: 6a:90:1a:10:d1:d6:dc:21:0d:4f:5d:9a:b6:6b:55: 18:59:dc:29:0c:85:df:b3:6e:d9:d7:6e:f3:92:ea: 29:fc:3f:5f:d8:a5:a3:01:f1:0e:ab:08:75:1b:09: 65:59:80:15:7f:22:9b:90:12:57:71:2e:2b:94:4a: 6b:90:6e:fe:48:98:c9:ae:a3:15:17:99:7e:51:26: 47:2a:12:b3:8f:47:66:bb:22:c7:d0:35:54:9b:72: da:fe:90:96:60:82:8a:8e:bc:d8:f7:0e:68:53:bb: 8a:db:ec:a6:52:37:20:49:cd:e4:02:05:af:93:c7: 13:44:79:28:d2:16:20:62:43:ef:dd:51:93:fb:d0: c3:5e:66:40:d5:b8:2c:b4:c2:0a:fd:70:2f:4d:9d: 0b:63:8e:42:d4:ac:3a:b6:01:5e:82:eb:26:b9:c9: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:76:C8:A6:56:DA:C6:B4:1B:0D:2E:D9:D9:08:59:5D:40:A5:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5db1abf1-106e-3836-aea5-0339938cbd98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:700::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:fc:41:43:41:25:74:a3:5c:8a:ed:07:80:b9:f9:a9:d4:dc: 65:9f:18:b6:51:c4:28:95:8d:86:05:36:dd:92:f1:1e:bd:fb: 79:26:12:7f:6d:c5:6f:40:0b:cd:c4:64:17:38:77:56:f4:28: 56:26:2c:b9:c8:72:bc:88:65:27:a0:fc:3d:b4:43:7d:a9:75: 07:0e:e5:0e:fe:02:12:67:68:a5:56:83:cc:ef:2f:72:96:62: 67:0a:d9:a1:f4:a7:56:22:2a:2a:c3:93:35:de:b1:b2:ab:51: 89:ea:72:93:ad:7b:6c:dd:de:4a:b7:b1:3c:e0:98:e9:52:16: 2e:79:45:ba:7a:d7:6b:56:30:aa:82:06:6d:f6:74:b8:d5:cf: b1:7b:7b:de:c1:4c:5e:9a:60:f3:84:bf:3b:50:57:f1:81:48: d8:67:4f:ba:91:4a:93:06:3d:ed:14:fb:0e:1c:49:4d:26:1a: 94:2d:17:be:5b:27:e5:5d:c8:c0:00:25:fd:04:b7:70:a3:40: 32:3e:a5:fb:22:43:a1:37:e5:01:cd:3e:c5:c7:fd:33:30:9e: e0:4e:36:06:73:9f:72:38:5a:6d:07:24:01:2d:da:df:b4:e7: 8c:ae:a3:38:39:64:e4:db:7f:4c:ae:91:04:84:28:56:2c:e3: cc:4c:4a:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLWk5xGnZKJnMyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk YmU4Yjc1NjktOGJkOS00YjBlLWFlZDEtOTJlZTYxNTM2ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tbq67+O5aNcTqK/p0XDe8rXQv+yUp4znqCn e2FJZ6SMHzMxjTByC4RpTHK4iqtkbItcKItZiUntjQJmjhkhadk4Z/6Aj6eCrMdA Q1RKIL6Odk5ILUHQNWhqkBoQ0dbcIQ1PXZq2a1UYWdwpDIXfs27Z127zkuop/D9f 2KWjAfEOqwh1GwllWYAVfyKbkBJXcS4rlEprkG7+SJjJrqMVF5l+USZHKhKzj0dm uyLH0DVUm3La/pCWYIKKjrzY9w5oU7uK2+ymUjcgSc3kAgWvk8cTRHko0hYgYkPv 3VGT+9DDXmZA1bgstMIK/XAvTZ0LY45C1Kw6tgFegusmucn+FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBd4dsimVtrGtBsNLtnZCFldQKXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWRiMWFiZjEtMTA2ZS0z ODM2LWFlYTUtMDMzOTkzOGNiZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJX8QUNBJXSjXIrtB4C5+anU3GWfGLZRxCiVjYYFNt2S8R69+3km En9txW9AC83EZBc4d1b0KFYmLLnIcryIZSeg/D20Q32pdQcO5Q7+AhJnaKVWg8zv L3KWYmcK2aH0p1YiKirDkzXesbKrUYnqcpOte2zd3kq3sTzgmOlSFi55Rbp612tW MKqCBm32dLjVz7F7e97BTF6aYPOEvztQV/GBSNhnT7qRSpMGPe0U+w4cSU0mGpQt F75bJ+VdyMAAJf0Et3CjQDI+pfsiQ6E35QHNPsXH/TMwnuBONgZzn3I4Wm0HJAEt 2t+054yuozg5ZOTbf0yukQSEKFYs48xMSoY= -----END CERTIFICATE-----Generated at Sat Oct 10 10:06:14 2026 by rpki-client