$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa File: aa48910c-d6f0-3588-8325-d2afc5dab4be.roa (raw, json) Hash identifier: 1A19EJ6dI5dLo2GPdq7drR6bsT1vlgwS9p2S/AwCvCY= Subject key identifier: FB:F2:E4:F6:28:C0:A2:45:E8:7D:93:A1:58:14:EE:5E:48:8A:1C:C8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E1B799961A4532071FF122580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa Signing time: Mon 08 Jun 2026 21:00:12 +0000 ROA not before: Mon 08 Jun 2026 21:00:12 +0000 ROA not after: Sun 06 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2001:19b0:800::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1b:79:99:61:a4:53:20:71:ff:12:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 8 21:00:12 2026 GMT Not After : Sep 6 21:00:12 2026 GMT Subject: CN=dc47a1d4-74b5-402a-bd21-77ff537d7e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a9:63:49:ac:35:32:ed:44:61:e0:fa:88:3b: 4e:fa:4e:83:0c:92:fe:20:1c:94:2f:ed:59:02:07: 8f:e0:45:42:ee:30:b3:f3:b4:23:26:cb:08:4d:4d: f2:1a:36:0e:29:d8:24:0b:b6:66:75:48:d5:a4:08: 63:ab:53:fa:10:71:5b:48:b2:c6:a8:bd:75:c0:c3: 8c:b7:b4:c6:10:df:e0:9d:01:ff:50:dc:7b:57:bf: 90:fb:1f:01:45:48:6b:ff:a6:5e:e6:cf:29:16:af: 48:19:3b:48:57:2e:69:9d:0d:10:29:4e:47:58:a4: e3:d3:e9:4f:4a:3a:cb:ff:14:3c:0c:2e:af:5d:5b: b0:bc:e4:84:cb:e3:f6:32:27:e2:88:fb:43:37:3e: 0f:d2:ab:f5:57:8f:b8:fd:b4:86:ee:06:af:49:7a: c7:48:9c:18:c8:bd:cf:cc:86:7c:93:b0:c4:ca:e6: e7:e9:90:ab:1e:f4:c8:a3:7b:cd:43:0d:43:1a:a8: 66:16:ee:67:8d:13:e3:7e:35:f8:b5:8e:45:20:b1: 71:0f:d1:56:05:f1:77:9d:6c:4f:f0:02:1c:75:1f: 57:c4:d2:10:bf:8f:30:47:be:51:f5:ef:55:8e:4f: 0d:db:fa:0c:4a:f8:88:1c:da:f5:e2:bd:42:4a:9f: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F2:E4:F6:28:C0:A2:45:E8:7D:93:A1:58:14:EE:5E:48:8A:1C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa48910c-d6f0-3588-8325-d2afc5dab4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:800::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:89:3d:1c:5e:c4:62:82:13:21:82:f7:62:5f:5b:58:1d:d3: d6:c1:da:97:39:5e:04:d3:30:45:00:be:6d:aa:a5:43:25:5b: 56:e0:a3:fe:db:9d:5a:0e:89:2c:f5:1e:11:86:ec:0f:df:c4: b4:27:99:bc:ed:f4:35:69:6d:d1:0e:49:b6:7f:42:8f:4b:a0: a3:e3:da:4c:ad:f9:8c:b8:6a:01:db:1b:5b:53:3c:a4:12:d0: 95:d8:15:c6:3f:d2:dc:b3:d4:ca:32:30:f6:29:4c:01:f0:b0: 16:15:8d:cd:39:a1:3e:79:1d:a7:bd:12:a5:01:2a:ac:b5:e2: 25:83:65:8c:f6:e3:a1:fc:fb:6d:5f:51:cb:84:9d:3b:90:0d: d5:b8:ed:eb:6a:60:00:9c:46:0d:61:77:64:46:12:41:9b:24: da:4f:5b:8b:00:76:7b:05:10:0b:e5:55:9b:c9:10:f2:11:06: 24:cc:48:53:ab:fa:16:9f:49:49:90:a0:86:b8:42:c9:6a:ef: e9:91:6e:ce:9d:84:c1:7f:c4:91:6f:15:12:04:1c:b3:f4:b7: 35:6c:7b:30:d1:d1:13:91:de:4d:e1:9f:e8:77:42:bc:aa:5a: b8:09:4d:ce:4e:87:75:3e:9d:f0:e6:90:51:6c:2d:69:2d:07: 22:60:de:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4beZlhpFMgcf8SJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZGM0N2ExZDQtNzRiNS00MDJhLWJkMjEtNzdmZjUzN2Q3ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6ljSaw1Mu1EYeD6iDtO+k6DDJL+IByUL+1Z AgeP4EVC7jCz87QjJssITU3yGjYOKdgkC7ZmdUjVpAhjq1P6EHFbSLLGqL11wMOM t7TGEN/gnQH/UNx7V7+Q+x8BRUhr/6Ze5s8pFq9IGTtIVy5pnQ0QKU5HWKTj0+lP SjrL/xQ8DC6vXVuwvOSEy+P2MifiiPtDNz4P0qv1V4+4/bSG7gavSXrHSJwYyL3P zIZ8k7DEyubn6ZCrHvTIo3vNQw1DGqhmFu5njRPjfjX4tY5FILFxD9FWBfF3nWxP 8AIcdR9XxNIQv48wR75R9e9Vjk8N2/oMSviIHNr14r1CSp8juQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPvy5PYowKJF6H2ToVgU7l5IihzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE0ODkxMGMtZDZmMC0z NTg4LTgzMjUtZDJhZmM1ZGFiNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHWJPRxexGKCEyGC92JfW1gd09bB2pc5XgTTMEUAvm2qpUMlW1bg o/7bnVoOiSz1HhGG7A/fxLQnmbzt9DVpbdEOSbZ/Qo9LoKPj2kyt+Yy4agHbG1tT PKQS0JXYFcY/0tyz1MoyMPYpTAHwsBYVjc05oT55Hae9EqUBKqy14iWDZYz246H8 +21fUcuEnTuQDdW47etqYACcRg1hd2RGEkGbJNpPW4sAdnsFEAvlVZvJEPIRBiTM SFOr+hafSUmQoIa4Qslq7+mRbs6dhMF/xJFvFRIEHLP0tzVsezDR0ROR3k3hn+h3 QryqWrgJTc5Oh3U+nfDmkFFsLWktByJg3gs= -----END CERTIFICATE-----Generated at Sat Jun 13 07:24:57 2026 by rpki-client