$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/278f2c28-3302-3737-a97e-4160c5c35b37.roa File: 278f2c28-3302-3737-a97e-4160c5c35b37.roa (raw, json) Hash identifier: 95E5F6XpI6NuBgFPeEfLc9C49oez/M6skIMqa9clQeA= Subject key identifier: 1A:A3:51:AA:15:14:95:5E:14:95:3C:EC:8A:78:AF:84:14:EF:5D:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A71CABDF5FBDCB1BD8F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/278f2c28-3302-3737-a97e-4160c5c35b37.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:71:ca:bd:f5:fb:dc:b1:bd:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=97fbe06a-10c9-4c06-b33b-f82450c5fc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:ce:3e:64:1c:ac:af:1e:05:d2:cf:e1:f5: ac:2f:2d:9e:77:65:6f:44:72:78:59:5c:11:1e:6b: 38:c5:d5:72:e1:ad:ba:5b:8a:aa:73:57:d9:e3:99: 7e:8f:0a:6f:c0:5b:12:4b:ba:9d:d2:93:78:17:d9: 50:83:cf:50:ac:4b:54:bc:6f:8f:c3:c6:55:9d:37: c6:19:42:61:df:ac:62:03:da:09:61:32:41:2f:e2: 40:de:c9:04:e6:81:9f:b0:19:2a:39:d4:09:1e:41: c7:0e:22:f1:59:9e:f2:da:06:f5:ec:30:8f:fb:ef: e6:d8:e8:f3:15:16:67:45:43:fc:17:3c:31:bb:54: a9:a8:b7:23:2c:85:18:5e:41:c3:49:25:57:d9:95: 3e:f9:1e:90:0e:f2:49:e9:5d:1e:d1:32:99:ed:a8: 0e:97:5b:5f:89:c6:a4:4b:ab:30:cb:2f:de:8c:f1: 7e:3f:a8:2c:fa:34:0c:83:63:2b:91:d8:0f:ac:d8: 0a:98:5b:7e:10:e5:b0:9a:27:29:c0:ed:95:8c:c4: 74:2d:11:c5:64:da:39:7e:3f:68:3e:1f:b3:71:22: 87:f3:39:57:c2:79:b0:5c:11:d3:73:e1:83:71:51: 83:5f:d0:d3:56:3c:50:d0:99:fe:c8:37:b0:7e:67: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A3:51:AA:15:14:95:5E:14:95:3C:EC:8A:78:AF:84:14:EF:5D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/278f2c28-3302-3737-a97e-4160c5c35b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:64:28:39:ae:e4:c9:af:e2:bf:a4:8d:b2:d3:62:73:ea:0c: 50:b0:7b:59:56:03:4c:5d:9c:2e:04:ee:a0:d3:c7:03:3c:9b: 21:15:fe:e6:ff:78:b4:be:bf:8c:e7:b5:61:8e:65:94:d3:46: 21:78:cf:1b:8a:84:bf:b6:b0:7c:88:04:34:76:f0:f3:ab:57: 8c:b2:8b:73:23:cd:1c:67:e1:79:a3:72:e8:3d:c3:e9:4f:35: ac:5d:83:20:6b:fd:1e:99:8c:7c:12:31:ff:1a:f6:d2:24:d3: ea:71:92:46:62:16:07:35:9b:4c:1b:54:82:a7:24:e1:13:55: 20:ef:da:25:fa:f7:8f:90:87:49:df:39:65:1d:4f:97:1a:39: 0f:07:ca:b2:fa:31:f4:46:18:66:19:24:89:09:13:d9:70:67: 51:1c:ff:ac:91:8f:f8:4f:57:08:7a:e9:21:7f:09:96:d3:d6: ac:0c:b1:b2:f0:b7:dd:d6:90:e9:b7:50:11:d3:e0:f2:46:2c: d1:12:55:6f:5c:cc:c8:b7:90:d8:9f:e4:33:5d:01:58:be:e5: 10:ef:76:37:78:77:ac:12:59:da:76:cb:39:f0:ac:8b:28:19: 08:70:8a:7e:70:df:18:17:a0:02:85:61:a9:3e:56:4a:91:e3: 38:86:ec:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCnHKvfX73LG9jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTdmYmUwNmEtMTBjOS00YzA2LWIzM2ItZjgyNDUwYzVmYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxfOPmQcrK8eBdLP4fWsLy2ed2VvRHJ4WVwR Hms4xdVy4a26W4qqc1fZ45l+jwpvwFsSS7qd0pN4F9lQg89QrEtUvG+Pw8ZVnTfG GUJh36xiA9oJYTJBL+JA3skE5oGfsBkqOdQJHkHHDiLxWZ7y2gb17DCP++/m2Ojz FRZnRUP8Fzwxu1SpqLcjLIUYXkHDSSVX2ZU++R6QDvJJ6V0e0TKZ7agOl1tficak S6swyy/ejPF+P6gs+jQMg2MrkdgPrNgKmFt+EOWwmicpwO2VjMR0LRHFZNo5fj9o Ph+zcSKH8zlXwnmwXBHTc+GDcVGDX9DTVjxQ0Jn+yDewfmdWRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBqjUaoVFJVeFJU87Ip4r4QU7113MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjc4ZjJjMjgtMzMwMi0z NzM3LWE5N2UtNDE2MGM1YzM1YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhkKDmu5Mmv4r+kjbLTYnPqDFCwe1lWA0xdnC4E7qDTxwM8myEV /ub/eLS+v4zntWGOZZTTRiF4zxuKhL+2sHyIBDR28POrV4yyi3MjzRxn4Xmjcug9 w+lPNaxdgyBr/R6ZjHwSMf8a9tIk0+pxkkZiFgc1m0wbVIKnJOETVSDv2iX694+Q h0nfOWUdT5caOQ8HyrL6MfRGGGYZJIkJE9lwZ1Ec/6yRj/hPVwh66SF/CZbT1qwM sbLwt93WkOm3UBHT4PJGLNESVW9czMi3kNif5DNdAVi+5RDvdjd4d6wSWdp2yznw rIsoGQhwin5w3xgXoAKFYak+VkqR4ziG7F8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:02:44 2026 by rpki-client