$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa File: 219bc4aa-8142-3f5e-a469-4a615b68d218.roa (raw, json) Hash identifier: z0zO5y5KcLHnH2vMA19XcaN842RQk1e41J6Tw60pf5w= Subject key identifier: 98:CD:F5:94:8E:E6:39:C2:0F:D4:A2:8E:A5:B6:E9:8C:8B:A4:E7:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A75219925F56B9604317C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:2300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:75:21:99:25:f5:6b:96:04:31:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c6bf7443-51a0-46cc-a714-cf4eefaed597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:50:79:d4:67:cc:7f:03:30:b6:75:5e:ca: 0f:20:25:1d:2f:6a:e7:1d:4d:c6:5c:bd:20:8e:06: 2d:da:77:c1:15:69:b2:d3:ce:6e:88:55:e0:6a:9b: ed:43:81:00:e5:b6:15:e2:74:d1:95:fd:60:fa:a2: 29:3a:93:4c:d0:e3:91:b0:a1:6d:1c:b0:3a:6c:6c: 46:f2:41:ff:b1:c5:1e:22:c9:2c:5b:28:af:14:4d: 90:61:e4:db:ed:65:bd:c6:ea:0d:03:96:0a:8d:90: e0:26:d4:31:cf:68:78:49:4d:f6:6c:a7:59:5b:98: 35:70:2d:a1:14:cc:c9:22:39:64:58:30:32:11:e5: a1:25:39:bb:bb:e2:3e:cc:91:93:7c:cb:e7:35:8a: ba:51:cd:da:c5:bd:04:e7:08:62:e8:1f:7f:40:c7: 01:ed:44:1b:70:f9:a0:d1:8e:3e:a5:ef:58:a6:f4: a9:be:22:87:80:c0:24:36:2f:71:3b:b7:1a:aa:2d: b8:15:97:ac:47:5f:71:b6:2e:c5:30:ce:21:b2:eb: ec:f5:cf:7c:0b:1d:14:f7:aa:5a:b7:9c:bb:39:b0: 31:6a:0e:c1:fe:8a:9c:95:ca:e8:4f:5c:13:61:f9: 22:1d:4c:a5:f5:f4:bf:33:41:a3:58:0b:45:a9:1c: 79:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:F5:94:8E:E6:39:C2:0F:D4:A2:8E:A5:B6:E9:8C:8B:A4:E7:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:60:70:d3:d0:3f:c0:fc:ff:63:d9:04:27:c1:91:fb:dc:48: ab:3a:18:2a:a7:e9:33:15:3a:bd:1c:de:92:cc:f2:17:ec:2b: 6a:7e:9f:a7:19:6d:6a:99:cf:91:fe:94:a5:9a:fa:d8:1f:83: 93:7a:44:b9:ea:2f:e4:b0:69:d3:32:3a:25:d9:c3:05:3e:27: 26:2e:46:95:70:06:af:31:44:49:df:06:49:07:e5:78:66:7d: c8:37:61:f0:84:9f:99:ad:d9:1e:a8:03:8e:86:eb:35:6c:f8: c5:53:08:6a:0f:51:0b:64:b9:0f:36:29:9c:8d:b1:f6:70:f4: a2:40:3f:ca:1d:c8:2b:55:6a:e9:8a:9b:ea:18:db:85:f8:12: c3:06:4a:28:35:d4:4d:74:04:5a:7a:dd:22:39:72:69:81:9e: dc:fb:17:d6:70:39:74:29:b2:c3:1e:95:f2:8b:c7:ea:99:e8: e3:c9:54:0c:20:cf:e3:00:89:92:98:66:e0:b6:8d:c8:42:0d: 0b:92:1d:f4:fb:5d:84:50:81:fc:d3:7a:fe:13:44:3b:89:b7: 9e:4e:10:a6:f5:76:36:e5:66:31:e6:62:af:1a:35:34:1e:b7: 6d:57:6f:4a:8f:9d:6d:63:ef:fd:9f:cf:a0:b8:bb:28:0f:56: 06:8f:7b:b3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCnUhmSX1a5YEMXwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzZiZjc0NDMtNTFhMC00NmNjLWE3MTQtY2Y0ZWVmYWVkNTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+JQedRnzH8DMLZ1XsoPICUdL2rnHU3GXL0g jgYt2nfBFWmy085uiFXgapvtQ4EA5bYV4nTRlf1g+qIpOpNM0OORsKFtHLA6bGxG 8kH/scUeIsksWyivFE2QYeTb7WW9xuoNA5YKjZDgJtQxz2h4SU32bKdZW5g1cC2h FMzJIjlkWDAyEeWhJTm7u+I+zJGTfMvnNYq6Uc3axb0E5whi6B9/QMcB7UQbcPmg 0Y4+pe9YpvSpviKHgMAkNi9xO7caqi24FZesR19xti7FMM4hsuvs9c98Cx0U96pa t5y7ObAxag7B/oqclcroT1wTYfkiHUyl9fS/M0GjWAtFqRx5VwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJjN9ZSO5jnCD9SijqW26YyLpOdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE5YmM0YWEtODE0Mi0z ZjVlLWE0NjktNGE2MTViNjhkMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZWBw09A/wPz/Y9kEJ8GR+9xIqzoYKqfpMxU6vRzekszyF+wran6f pxltapnPkf6UpZr62B+Dk3pEueov5LBp0zI6JdnDBT4nJi5GlXAGrzFESd8GSQfl eGZ9yDdh8ISfma3ZHqgDjobrNWz4xVMIag9RC2S5DzYpnI2x9nD0okA/yh3IK1Vq 6Yqb6hjbhfgSwwZKKDXUTXQEWnrdIjlyaYGe3PsX1nA5dCmywx6V8ovH6pno48lU DCDP4wCJkphm4LaNyEINC5Id9PtdhFCB/NN6/hNEO4m3nk4QpvV2NuVmMeZirxo1 NB63bVdvSo+dbWPv/Z/PoLi7KA9WBo97sw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:20 2026 by rpki-client