$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa File: 0e7207dc-82a9-38cc-b3f8-463397db34e2.roa (raw, json) Hash identifier: OYlYDOZnL7Oi+0HJctRLFQ+BgmFe8T/AUX1toBTuTxE= Subject key identifier: 2C:7C:D0:05:94:E0:74:0A:FB:9C:C4:F6:CD:68:AA:0E:E0:E4:05:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA3339090BA346E9CF440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2607:4f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a3:33:90:90:ba:34:6e:9c:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=643862ca-f663-46e9-952d-06d10b969c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:bc:9f:4c:9d:4c:46:30:d9:8b:35:42:7e: 92:6b:87:03:6e:2a:e9:fb:e2:81:a5:a8:7a:01:00: 1f:46:b4:05:c6:32:7c:2c:42:90:84:97:7a:e3:52: 88:6d:2b:fa:41:b4:f7:12:0e:6f:31:ca:9f:d3:a2: 93:4d:b6:c7:d6:0a:01:47:4c:ad:d0:98:a1:9c:9a: e0:84:66:7c:34:91:e3:00:c4:15:09:78:d7:b0:d7: 33:4d:9f:56:86:f7:09:6b:b0:6e:54:51:d0:37:70: 9f:d0:01:97:3d:6a:c2:a0:3e:3c:d1:57:ea:21:4c: 22:49:5a:b2:b1:b8:92:d2:16:ed:6d:e9:f4:79:df: c1:09:6e:f2:2a:19:2f:af:38:b9:04:98:10:56:a2: b9:f6:67:d9:19:3e:25:4d:67:5a:03:a3:4f:7a:17: 8b:21:b5:0c:e1:8d:85:16:12:11:68:43:6e:84:6e: ca:7e:38:f8:ee:b8:7b:97:14:d2:cc:23:53:c5:a8: ab:c6:b1:34:77:c2:fe:de:13:65:53:75:fc:8b:e7: 85:20:95:2a:8c:8e:fa:ea:a4:dd:8f:46:98:10:d5: fe:d3:47:84:6b:d2:90:d9:8f:64:22:16:10:74:9d: 00:7e:a3:08:dd:b0:d1:68:99:e3:75:92:7f:07:98: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7C:D0:05:94:E0:74:0A:FB:9C:C4:F6:CD:68:AA:0E:E0:E4:05:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8b:2a:99:e6:95:60:30:60:53:35:99:e7:15:9b:44:a1:78: 24:54:f2:0b:ea:74:d6:32:33:cc:11:59:69:48:b7:46:ac:0a: e9:a3:2d:d6:70:88:e0:4a:07:78:77:ac:5b:c9:4e:a7:aa:56: 1b:52:04:20:09:06:d8:0f:47:ba:f8:af:7e:4b:dc:26:39:ab: 7b:09:7e:46:05:92:9d:7c:e9:ef:3f:e9:39:91:fe:29:61:b0: ee:da:8c:f9:43:93:fa:6a:cb:3d:a6:40:65:1d:e0:bb:a7:f7: ee:09:df:08:87:75:16:b7:a9:2d:8c:be:65:56:3d:33:df:01: 9c:f8:8e:bb:c6:ac:c1:1b:1b:6b:13:3d:60:1a:42:02:49:95: b7:af:85:f6:ba:76:cd:10:fb:fe:22:5f:f8:70:8f:09:a0:1f: 4b:ee:33:b0:27:dd:5c:17:4c:a6:c1:4a:aa:0e:08:02:fb:ce: f6:25:f8:6b:45:5f:1e:a5:6d:d0:43:e0:16:44:88:93:1d:4a: 36:bb:35:b2:8e:cb:e3:2d:c0:92:8b:89:9e:66:be:3e:e9:bf: dc:48:a2:17:16:51:e1:d9:00:37:81:9e:e5:0a:aa:08:dc:53: 30:4f:b5:1d:c5:ea:d1:84:72:3c:94:b3:b9:ba:08:1c:f7:fc: df:53:85:b2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0wCqMzkJC6NG6c9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NjQzODYyY2EtZjY2My00NmU5LTk1MmQtMDZkMTBiOTY5YzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKW8n0ydTEYw2Ys1Qn6Sa4cDbirp++KBpah6 AQAfRrQFxjJ8LEKQhJd641KIbSv6QbT3Eg5vMcqf06KTTbbH1goBR0yt0JihnJrg hGZ8NJHjAMQVCXjXsNczTZ9WhvcJa7BuVFHQN3Cf0AGXPWrCoD480VfqIUwiSVqy sbiS0hbtben0ed/BCW7yKhkvrzi5BJgQVqK59mfZGT4lTWdaA6NPeheLIbUM4Y2F FhIRaENuhG7Kfjj47rh7lxTSzCNTxairxrE0d8L+3hNlU3X8i+eFIJUqjI766qTd j0aYENX+00eEa9KQ2Y9kIhYQdJ0AfqMI3bDRaJnjdZJ/B5isAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCx80AWU4HQK+5zE9s1oqg7g5AXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGU3MjA3ZGMtODJhOS0z OGNjLWIzZjgtNDYzMzk3ZGIzNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdPgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQiyqZ5pVgMGBTNZnnFZtEoXgkVPIL6nTWMjPMEVlpSLdGrArpoy3W cIjgSgd4d6xbyU6nqlYbUgQgCQbYD0e6+K9+S9wmOat7CX5GBZKdfOnvP+k5kf4p YbDu2oz5Q5P6ass9pkBlHeC7p/fuCd8Ih3UWt6ktjL5lVj0z3wGc+I67xqzBGxtr Ez1gGkICSZW3r4X2unbNEPv+Il/4cI8JoB9L7jOwJ91cF0ymwUqqDggC+872Jfhr RV8epW3QQ+AWRIiTHUo2uzWyjsvjLcCSi4meZr4+6b/cSKIXFlHh2QA3gZ7lCqoI 3FMwT7UdxerRhHI8lLO5uggc9/zfU4Wy -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:31 2026 by rpki-client