$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa File: 1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa (raw, json) Hash identifier: gNw5MNND81eEllhhLokMjKMt0+mIMu8SRZQUTAQqge8= Subject key identifier: 9B:15:15:06:45:D8:8F:FA:74:08:80:CD:94:4E:D4:19:E9:3E:EE:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA0958717137DAAB3B280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a0:95:87:17:13:7d:aa:b3:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=2ed36a9e-f5d5-4232-94a2-0679f8f3a599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:19:d2:be:4e:2b:51:1b:98:c4:80:26:5f: 3c:e9:52:02:d4:c1:8c:73:37:ba:1b:8a:71:0a:b4: 97:9d:12:bc:42:9d:d0:a8:19:df:4a:65:18:8a:bf: 70:49:e8:e5:ad:a7:33:95:bf:3a:83:c8:2b:18:41: f6:0d:b8:18:ed:73:58:63:40:77:82:93:78:e2:3d: 9b:84:24:c0:53:9c:c5:e3:36:6c:26:9a:9c:b9:83: b9:46:ff:09:0d:3a:45:62:13:0c:fc:32:15:70:7a: 65:7c:c2:90:19:89:b0:e2:5d:c6:e4:6d:c3:eb:33: d8:4a:63:ea:a0:c6:f3:41:c5:60:4c:63:73:2c:11: 8d:e7:26:53:80:cf:72:e0:7f:18:de:a8:5c:ec:5e: 9e:61:c9:5b:98:7f:56:82:fd:77:49:88:7a:c2:14: 2c:d7:03:9d:b0:a5:0a:bf:6f:92:8b:e0:ab:45:92: 3f:e2:ea:62:0b:dd:54:df:e8:46:72:a5:2a:87:8d: 6d:07:02:b8:f7:bd:ab:4d:49:ea:7e:e9:2f:5a:d4: 9a:39:f5:d3:8b:ce:d2:22:b0:2c:14:5a:de:71:21: f1:d2:77:f6:fe:4a:20:cb:46:f3:7c:2a:99:dd:93: 2e:a9:f7:d7:d8:c3:e8:5d:2b:31:f6:e3:c8:4b:be: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:15:15:06:45:D8:8F:FA:74:08:80:CD:94:4E:D4:19:E9:3E:EE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:4b:d8:66:da:dc:fd:b9:c2:86:e7:de:5e:18:db:87:9c:24: c4:f2:cc:53:c2:83:86:10:e5:a4:57:cd:9a:42:42:49:9a:6e: 4c:8d:c9:40:e8:e6:80:3c:ad:d7:69:27:61:a3:ce:d3:20:76: 07:a0:a6:45:27:0e:65:ab:77:2a:ec:56:c4:50:67:12:69:88: bb:91:ee:bd:ad:90:52:90:81:7f:8f:82:ef:9e:42:1b:ef:45: 08:41:0c:28:91:32:ea:6e:47:bf:e5:9f:d2:dd:6f:e5:14:d2: eb:f4:55:43:ee:86:af:df:1c:a2:f7:ca:a0:b0:91:f3:70:23: 75:be:4e:40:85:cd:9d:cf:99:1e:be:a7:4c:e0:c3:d2:98:a7: 8d:98:57:7e:a9:b2:61:35:e2:05:18:0a:fd:49:e1:c1:13:64: 68:b9:c9:70:69:4e:60:c6:99:18:bb:65:88:b0:46:8d:85:e6: e9:ad:42:e1:15:51:1b:d7:66:55:3a:e4:68:5d:e1:a5:7e:4c: 87:c2:70:a2:34:67:5b:0e:c2:7b:48:08:0e:8e:10:5a:7b:df: f0:fb:c0:64:c7:9d:34:21:47:d5:40:a0:38:80:6f:c5:42:14: 62:68:2f:3b:e2:17:07:4b:d0:33:f4:0d:a6:56:21:93:15:d3: 46:a7:03:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCqCVhxcTfaqzsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MmVkMzZhOWUtZjVkNS00MjMyLTk0YTItMDY3OWY4ZjNhNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3AZ0r5OK1EbmMSAJl886VIC1MGMcze6G4px CrSXnRK8Qp3QqBnfSmUYir9wSejlraczlb86g8grGEH2DbgY7XNYY0B3gpN44j2b hCTAU5zF4zZsJpqcuYO5Rv8JDTpFYhMM/DIVcHplfMKQGYmw4l3G5G3D6zPYSmPq oMbzQcVgTGNzLBGN5yZTgM9y4H8Y3qhc7F6eYclbmH9Wgv13SYh6whQs1wOdsKUK v2+Si+CrRZI/4upiC91U3+hGcqUqh41tBwK4972rTUnqfukvWtSaOfXTi87SIrAs FFrecSHx0nf2/kogy0bzfCqZ3ZMuqffX2MPoXSsx9uPIS7668wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJsVFQZF2I/6dAiAzZRO1BnpPu40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRmOTFlY2EtNGI4YS0z YWIzLTg5OWItZGI0Yzk4YmM1ODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHVL2Gba3P25wobn3l4Y24ecJMTyzFPCg4YQ5aRXzZpCQkmabkyN yUDo5oA8rddpJ2GjztMgdgegpkUnDmWrdyrsVsRQZxJpiLuR7r2tkFKQgX+Pgu+e QhvvRQhBDCiRMupuR7/ln9Ldb+UU0uv0VUPuhq/fHKL3yqCwkfNwI3W+TkCFzZ3P mR6+p0zgw9KYp42YV36psmE14gUYCv1J4cETZGi5yXBpTmDGmRi7ZYiwRo2F5umt QuEVURvXZlU65Ghd4aV+TIfCcKI0Z1sOwntICA6OEFp73/D7wGTHnTQhR9VAoDiA b8VCFGJoLzviFwdL0DP0DaZWIZMV00anA5A= -----END CERTIFICATE-----Generated at Thu Mar 26 09:13:03 2026 by rpki-client