$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cad5d43-69f5-315b-bb25-ea88239524b0.roa File: 1cad5d43-69f5-315b-bb25-ea88239524b0.roa (raw, json) Hash identifier: jSp4OuxLmMHLzArg9uml0zPXDu9z8xPUWB920ylActk= Subject key identifier: A4:64:27:87:81:D6:43:AE:C6:7E:D1:D4:F4:20:3A:06:7E:D6:74:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A74C1AD0B5570FBB0C900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cad5d43-69f5-315b-bb25-ea88239524b0.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:1900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:74:c1:ad:0b:55:70:fb:b0:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ccf1df86-a4e4-4723-ac87-9fdd1d923fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:c5:d7:f4:f6:49:c0:53:f4:39:46:93:f5: 9d:ec:6c:ff:c3:b1:a1:ca:e1:28:bc:1f:ca:4d:71: 9f:c7:c2:38:65:57:1b:fb:65:c1:b1:ec:8e:fd:dd: ce:df:47:14:c5:2e:99:38:71:21:0b:89:7e:0d:6e: 5d:8a:fc:b2:27:b7:e1:b8:48:05:19:fb:ee:ad:94: 2d:fe:48:3a:df:1a:c2:ec:04:ed:5d:50:aa:cf:b1: da:ac:1f:f4:a5:02:f8:4a:ca:7d:8f:63:28:67:c7: 80:03:b0:2b:6f:c0:44:52:d6:11:b1:02:82:55:0a: a9:ab:6a:f4:15:e3:f4:cd:91:2b:91:c9:a1:6a:1b: 8d:ca:01:16:ef:7d:b7:4e:1f:e0:39:f6:d9:ab:a4: 6d:ad:03:28:43:1f:db:38:c6:66:36:7a:12:fe:b0: 2a:23:e9:e5:15:48:8c:32:ce:d2:68:06:16:e9:ea: 0f:84:82:8a:1b:8a:13:b1:b8:34:d6:07:00:ab:ac: 7b:42:10:94:d9:f1:30:38:91:94:5a:a4:2a:0a:7c: 36:cd:d0:58:7e:a9:8c:ad:18:a1:d0:6b:59:e6:f1: c1:6d:72:b5:4c:e6:b2:0c:5c:90:3a:03:02:58:f0: 5a:fe:24:58:1e:85:d3:f8:d4:83:54:21:08:eb:ee: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:64:27:87:81:D6:43:AE:C6:7E:D1:D4:F4:20:3A:06:7E:D6:74:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cad5d43-69f5-315b-bb25-ea88239524b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:91:7e:bf:c1:77:2b:f5:a1:f0:3d:ff:49:f8:82:90:fc:08: 83:8e:f2:05:ba:c3:f3:f8:e3:91:8f:8c:bf:94:40:fe:0a:d6: 81:19:ef:69:07:64:3a:29:dd:97:a5:e2:5d:bc:0c:41:86:06: 1a:d6:8e:61:ff:84:4e:ff:97:7e:3a:80:0f:d7:ad:67:47:f6: f7:e9:88:c8:14:0c:cf:8e:87:1c:5f:80:da:c4:f7:47:c1:d4: f8:59:4f:17:eb:02:ba:d6:9b:2e:51:f4:fa:4c:68:ad:15:40: db:ae:1d:25:4d:2d:47:1c:7a:d8:37:d2:39:74:fd:21:1a:fc: d3:ae:18:1b:f8:a0:43:e1:0d:10:4f:b5:0b:9e:7c:ad:64:c1: 01:32:2d:bd:b8:4b:0b:c1:7a:0a:a2:7e:4d:99:5e:c8:12:63: 7c:7e:8f:20:87:b6:09:d5:94:f1:57:db:62:7a:3f:e6:19:a3: 05:e2:8c:77:95:a0:5b:19:30:99:74:4f:bc:1f:f3:e1:40:81: b4:45:5a:6d:0b:69:10:9e:bd:aa:67:5e:bb:bc:ab:86:48:f5: 14:20:d3:b3:2e:8a:2c:1e:c9:c4:ef:ca:6f:0e:f2:40:f7:ec: fe:3b:59:5b:10:35:96:b9:3c:be:76:a4:d9:db:17:92:9c:7a: d1:4a:53:04 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCnTBrQtVcPuwyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2NmMWRmODYtYTRlNC00NzIzLWFjODctOWZkZDFkOTIzZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPDF1/T2ScBT9DlGk/Wd7Gz/w7GhyuEovB/K TXGfx8I4ZVcb+2XBseyO/d3O30cUxS6ZOHEhC4l+DW5divyyJ7fhuEgFGfvurZQt /kg63xrC7ATtXVCqz7HarB/0pQL4Ssp9j2MoZ8eAA7Arb8BEUtYRsQKCVQqpq2r0 FeP0zZErkcmhahuNygEW7323Th/gOfbZq6RtrQMoQx/bOMZmNnoS/rAqI+nlFUiM Ms7SaAYW6eoPhIKKG4oTsbg01gcAq6x7QhCU2fEwOJGUWqQqCnw2zdBYfqmMrRih 0GtZ5vHBbXK1TOayDFyQOgMCWPBa/iRYHoXT+NSDVCEI6+5rmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKRkJ4eB1kOuxn7R1PQgOgZ+1nRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWNhZDVkNDMtNjlmNS0z MTViLWJiMjUtZWE4ODIzOTUyNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABpF+v8F3K/Wh8D3/SfiCkPwIg47yBbrD8/jjkY+Mv5RA/grWgRnv aQdkOindl6XiXbwMQYYGGtaOYf+ETv+XfjqAD9etZ0f29+mIyBQMz46HHF+A2sT3 R8HU+FlPF+sCutabLlH0+kxorRVA264dJU0tRxx62DfSOXT9IRr8064YG/igQ+EN EE+1C558rWTBATItvbhLC8F6CqJ+TZleyBJjfH6PIIe2CdWU8VfbYno/5hmjBeKM d5WgWxkwmXRPvB/z4UCBtEVabQtpEJ69qmdeu7yrhkj1FCDTsy6KLB7JxO/Kbw7y QPfs/jtZWxA1lrk8vnak2dsXkpx60UpTBA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:44 2026 by rpki-client