$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08cd69f8-da2d-34c9-8e88-13abf0201107.roa File: 08cd69f8-da2d-34c9-8e88-13abf0201107.roa (raw, json) Hash identifier: IVIA95cJbm2Tst2wwqphmcJTtWEtjjvgmx3i+8afkO8= Subject key identifier: C1:E1:41:E9:65:C1:28:BC:88:39:02:E2:17:7C:69:0B:87:86:BA:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A728B27508DBBBD0C7700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08cd69f8-da2d-34c9-8e88-13abf0201107.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:72:8b:27:50:8d:bb:bd:0c:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=627320f3-f7bc-4b21-892c-8c55ad612455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d4:66:bf:35:dd:fa:54:23:38:37:0b:46:a8: 7b:0a:9f:4f:11:a8:67:c3:b5:44:4d:45:80:f0:a0: 48:5d:00:24:9a:0a:58:74:f8:ec:0c:03:6a:d0:c6: b1:14:3f:91:6f:9e:75:7b:d2:a7:78:4f:27:22:49: 6a:9d:f7:a3:7d:1f:8c:c5:97:23:29:30:1f:8c:0e: f6:e6:40:a5:06:87:23:6a:aa:27:2e:5e:85:7f:11: ed:fc:a2:55:e8:7c:87:c7:8c:69:ff:98:7c:d7:1a: 28:db:a8:f1:e7:79:c0:a7:08:fd:1b:44:ab:da:a2: 17:c8:77:f5:c2:5c:38:ea:59:74:2e:d6:f8:2c:44: f8:2c:f1:03:61:db:fb:10:f9:6c:f1:11:e2:f5:a7: 07:ab:95:f6:c6:8f:90:eb:9d:0a:05:a3:c9:0a:f4: 29:15:2b:6f:5e:64:4b:8c:f2:6d:59:65:7b:2f:67: 04:5d:60:50:bc:58:08:13:53:ff:a3:be:e8:64:36: 11:32:bb:4d:eb:d8:90:6b:41:e3:04:39:0a:4c:75: f2:18:9b:f3:64:39:3d:7f:c5:83:23:6d:21:ad:7e: 81:9f:76:78:73:f3:ef:6f:7b:41:a4:e8:b5:2c:73: f2:d4:8c:d4:b5:f6:9a:f6:2b:15:1b:5a:42:ad:5a: 62:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E1:41:E9:65:C1:28:BC:88:39:02:E2:17:7C:69:0B:87:86:BA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08cd69f8-da2d-34c9-8e88-13abf0201107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:be:b0:60:0f:75:04:b7:87:a4:63:ab:67:38:c7:db:4d:1f: e3:7d:b8:da:d2:a6:4e:ac:e0:7d:a8:00:8b:91:8e:17:0b:60: 6f:70:79:d2:b3:fe:42:95:46:d7:bd:3c:8b:74:36:27:69:47: 61:e7:80:95:d5:83:66:d2:ec:89:27:8c:d9:18:bf:97:16:21: 61:a6:8c:58:2e:99:d5:0e:a5:67:a4:6f:33:cd:aa:2a:34:a9: a7:00:d4:d5:de:c7:a8:b5:52:96:67:8f:2b:ac:00:7c:8f:95: 40:0a:3e:90:6e:71:00:19:1b:29:f2:bb:6a:a6:32:3a:23:02: 3c:3b:cf:c5:79:aa:88:e1:1b:6f:cb:cb:e4:04:b2:a9:cc:1e: bc:7f:dd:72:7f:b6:37:52:d2:2a:28:06:62:c7:ea:98:0b:50: de:b4:08:19:bf:26:fa:9b:03:82:50:d8:6c:73:04:85:cf:9e: 64:3a:60:85:73:7d:a1:b8:c1:3e:82:05:39:a8:fd:76:bf:30: fa:4c:aa:68:a0:45:36:2d:cf:8c:c6:85:cc:b7:8a:7f:0b:a2: d3:be:e7:9b:d3:cd:db:cf:25:c9:09:28:36:25:6f:79:76:1b: 25:b8:9f:13:fd:01:2d:dd:a5:43:e7:34:73:60:60:ee:80:f7: e9:4a:43:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCnKLJ1CNu70MdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NjI3MzIwZjMtZjdiYy00YjIxLTg5MmMtOGM1NWFkNjEyNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtRmvzXd+lQjODcLRqh7Cp9PEahnw7VETUWA 8KBIXQAkmgpYdPjsDANq0MaxFD+Rb551e9KneE8nIklqnfejfR+MxZcjKTAfjA72 5kClBocjaqonLl6FfxHt/KJV6HyHx4xp/5h81xoo26jx53nApwj9G0Sr2qIXyHf1 wlw46ll0Ltb4LET4LPEDYdv7EPls8RHi9acHq5X2xo+Q650KBaPJCvQpFStvXmRL jPJtWWV7L2cEXWBQvFgIE1P/o77oZDYRMrtN69iQa0HjBDkKTHXyGJvzZDk9f8WD I20hrX6Bn3Z4c/Pvb3tBpOi1LHPy1IzUtfaa9isVG1pCrVpi9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMHhQellwSi8iDkC4hd8aQuHhrqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhjZDY5ZjgtZGEyZC0z NGM5LThlODgtMTNhYmYwMjAxMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADy+sGAPdQS3h6Rjq2c4x9tNH+N9uNrSpk6s4H2oAIuRjhcLYG9w edKz/kKVRte9PIt0NidpR2HngJXVg2bS7IknjNkYv5cWIWGmjFgumdUOpWekbzPN qio0qacA1NXex6i1UpZnjyusAHyPlUAKPpBucQAZGynyu2qmMjojAjw7z8V5qojh G2/Ly+QEsqnMHrx/3XJ/tjdS0iooBmLH6pgLUN60CBm/JvqbA4JQ2GxzBIXPnmQ6 YIVzfaG4wT6CBTmo/Xa/MPpMqmigRTYtz4zGhcy3in8LotO+55vTzdvPJckJKDYl b3l2GyW4nxP9AS3dpUPnNHNgYO6A9+lKQ0k= -----END CERTIFICATE-----Generated at Thu Mar 26 07:40:57 2026 by rpki-client