$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/106d5bb7-bab7-33dc-99c7-aa4ffb37aa66.roa File: 106d5bb7-bab7-33dc-99c7-aa4ffb37aa66.roa (raw, json) Hash identifier: 7XmYenqWUjWBcTQtpCF7h5a2k3S8shtMLQHvK29cfis= Subject key identifier: 52:13:E0:EF:29:49:A2:CD:ED:DA:F5:6D:B1:4A:4E:C4:60:3C:54:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D359FDF284A4BC5F6392D2140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/106d5bb7-bab7-33dc-99c7-aa4ffb37aa66.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:df:28:4a:4b:c5:f6:39:2d:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=d1fae0b2-973a-4b54-8c1c-b2cf0f6ac279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:10:c8:d3:bd:cf:b5:54:0c:da:ec:b8:b8:cb: 56:2b:cd:ab:d3:61:1d:e7:05:1e:e4:95:8e:95:02: cb:38:d2:61:11:28:01:b9:39:fb:2b:75:f0:ea:91: 3c:19:b4:b7:34:17:3a:30:89:54:c3:78:41:62:33: 0c:3d:78:65:2e:f6:7c:b7:1b:77:1b:b0:61:95:d4: 29:6e:cf:f9:5f:82:32:59:84:9a:fb:cb:86:e2:5a: ff:60:58:8c:e0:a1:7c:4c:4f:8d:99:6d:05:54:cc: 7a:2a:87:2a:0c:a2:31:98:27:2b:8c:a2:79:5c:77: 3a:85:f3:ee:dc:83:dd:14:12:90:35:4e:ca:e9:a8: 63:6e:29:12:2d:af:85:b9:ea:aa:2a:03:b7:3f:ab: ea:ba:ee:ab:62:e0:73:d1:de:65:91:28:60:a0:74: 93:28:ff:f8:ad:7e:3a:81:83:11:32:94:b4:46:ae: da:e7:c5:e7:c0:3f:b4:ff:6d:3b:98:0e:b0:72:6f: cc:35:22:41:e8:7c:87:3e:c9:db:05:a6:4e:21:61: dd:db:4d:0e:79:73:99:4f:48:a8:ca:92:c0:35:92: e6:6f:19:43:99:61:32:c2:af:5d:65:61:66:31:33: 01:87:ef:ce:01:f4:75:00:ef:c7:18:3a:1d:96:6c: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:13:E0:EF:29:49:A2:CD:ED:DA:F5:6D:B1:4A:4E:C4:60:3C:54:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/106d5bb7-bab7-33dc-99c7-aa4ffb37aa66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:28:0c:b0:6e:d0:57:a7:e8:5c:7b:0f:32:c6:41:43:cb:38: 5c:59:2c:14:a3:b1:e5:be:dc:72:69:29:8b:1f:a8:de:a5:0b: 45:8c:1e:38:c1:b8:26:ce:75:4b:33:b9:31:de:47:c5:75:6d: 23:15:38:d5:df:e4:fe:ce:2b:c4:a7:be:01:53:7d:47:8d:45: 4a:61:d0:bc:16:4e:98:dd:85:3a:85:50:44:19:66:68:94:7f: 61:58:a7:46:9c:e0:49:96:bf:91:a2:75:65:88:f4:f1:d4:8d: ed:8e:59:79:f4:63:dc:72:6b:af:d3:9e:f7:6a:ba:8b:cc:a9: 5d:23:0e:4d:39:b4:07:5e:2e:bc:fe:5d:89:5f:c6:57:46:e4: cb:a0:8f:d7:e0:49:91:79:89:b9:66:e2:ae:2d:b6:a1:87:5e: 12:79:c9:65:92:8e:c3:76:87:99:91:3f:17:92:ac:58:1d:5a: 5c:f3:80:f7:e0:54:92:13:34:56:ff:f2:d5:c7:e7:40:5b:c9: 19:b7:4e:76:73:36:66:83:a5:ca:ac:5a:bd:3d:ef:5f:87:09: 70:0a:78:12:f6:5f:6b:4c:bd:e6:f5:4a:fa:12:5c:fc:92:0d: b8:dc:3a:1e:4a:e0:64:ab:3e:39:f3:68:d0:4a:45:d4:22:67: 2a:79:b8:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE01n98oSkvF9jktIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZDFmYWUwYjItOTczYS00YjU0LThjMWMtYjJjZjBmNmFjMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhDI073PtVQM2uy4uMtWK82r02Ed5wUe5JWO lQLLONJhESgBuTn7K3Xw6pE8GbS3NBc6MIlUw3hBYjMMPXhlLvZ8txt3G7BhldQp bs/5X4IyWYSa+8uG4lr/YFiM4KF8TE+NmW0FVMx6KocqDKIxmCcrjKJ5XHc6hfPu 3IPdFBKQNU7K6ahjbikSLa+FueqqKgO3P6vquu6rYuBz0d5lkShgoHSTKP/4rX46 gYMRMpS0Rq7a58XnwD+0/207mA6wcm/MNSJB6HyHPsnbBaZOIWHd200OeXOZT0io ypLANZLmbxlDmWEywq9dZWFmMTMBh+/OAfR1AO/HGDodlmwR2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFIT4O8pSaLN7dr1bbFKTsRgPFRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA2ZDViYjctYmFiNy0z M2RjLTk5YzctYWE0ZmZiMzdhYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACcoDLBu0Fen6Fx7DzLGQUPLOFxZLBSjseW+3HJpKYsfqN6lC0WM HjjBuCbOdUszuTHeR8V1bSMVONXf5P7OK8SnvgFTfUeNRUph0LwWTpjdhTqFUEQZ ZmiUf2FYp0ac4EmWv5GidWWI9PHUje2OWXn0Y9xya6/TnvdquovMqV0jDk05tAde Lrz+XYlfxldG5Mugj9fgSZF5iblm4q4ttqGHXhJ5yWWSjsN2h5mRPxeSrFgdWlzz gPfgVJITNFb/8tXH50BbyRm3TnZzNmaDpcqsWr0971+HCXAKeBL2X2tMveb1SvoS XPySDbjcOh5K4GSrPjnzaNBKRdQiZyp5uKA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:21:10 2026 by rpki-client