$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa File: 2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa (raw, json) Hash identifier: AHHYM83FCmyrXqXFh+5fLcDH5IvUyPFqK1kkHmkquE0= Subject key identifier: 67:2C:29:9E:B1:2C:9E:A6:66:D2:31:E5:6E:F0:97:51:7F:0A:5D:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA02074AE7A9FAB41B200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a0:20:74:ae:7a:9f:ab:41:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=94289445-a7a7-40c1-ba41-509478256fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:9a:50:a3:e8:7d:28:af:17:36:9e:08:ea: fa:69:c1:e9:95:43:5e:4f:de:c7:90:5f:30:1d:2f: ea:af:ff:c1:14:08:1a:86:36:2d:83:bc:e3:c8:8c: bc:03:e6:2c:4b:f6:80:a5:a3:c3:c1:1d:3d:1a:be: d3:72:cf:84:1f:be:ec:83:c3:4e:ba:72:5c:aa:dc: e4:6a:83:60:23:ec:e0:d8:38:6e:f9:76:2c:31:1c: a4:f1:85:45:c2:c7:87:75:d8:c5:f9:9b:49:91:3e: 6b:c2:a3:ea:ff:28:b8:a8:85:67:a4:ba:43:c2:65: 95:8c:71:fb:2d:c5:73:6e:d4:46:25:c5:d9:ec:39: 0e:2a:59:76:10:b7:29:25:07:0b:ed:b2:23:2d:60: 44:ba:a3:94:bc:7a:7d:2b:42:a6:68:a5:4e:55:1d: 3d:b6:48:25:2c:ef:38:54:99:12:85:bc:b0:22:cb: a3:d7:f6:d3:bc:16:23:81:5c:fa:02:fe:63:6d:b5: 04:b9:ea:30:5a:5c:26:5b:2e:82:e0:79:77:2b:7f: 12:b7:a9:83:1a:a6:2e:05:16:bb:ff:26:87:58:45: 13:f0:a8:04:e3:f7:32:0f:70:e5:7b:81:47:ad:54: 47:47:93:35:4e:4a:79:28:24:28:15:ac:b4:ba:8f: 51:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2C:29:9E:B1:2C:9E:A6:66:D2:31:E5:6E:F0:97:51:7F:0A:5D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:4e:4b:21:b1:95:39:95:d1:8d:ad:e9:d4:36:fc:31:78:49: 8b:8d:be:2e:11:6b:97:9a:e4:7c:4c:20:95:64:7c:ab:8e:af: b2:0a:1f:5d:85:f4:7e:dc:e2:ab:12:7b:67:4a:f5:4b:14:12: c1:b9:da:f7:7d:4e:ee:b6:96:ba:38:f1:b0:60:83:db:4f:02: bc:2b:39:14:b5:1b:90:7d:72:f4:6f:fb:c5:6e:94:2c:30:b8: 97:76:4e:08:31:04:bd:e5:a2:b7:26:86:21:0b:28:2f:b4:9b: c9:b6:bd:0c:5a:cb:82:53:a3:48:62:0c:2d:f8:79:6c:9b:71: a0:cb:16:74:98:43:10:23:1c:15:7c:ca:1b:2f:73:95:7e:34: b9:dc:15:29:98:54:a6:3a:6f:9c:13:7c:d2:01:92:72:d2:56: d1:a7:02:c8:6c:1d:f6:df:9c:78:77:70:de:29:af:0d:61:fd: 6d:16:6b:79:d4:34:bc:7a:6c:10:fc:69:29:44:f1:9c:6e:49: ed:72:5b:95:60:9c:9c:1a:b5:a0:4f:fc:59:8a:ee:98:74:3c: bb:b7:94:8d:d7:03:13:33:62:d1:b1:8e:cd:82:20:a5:ea:c4: ba:e4:78:94:44:63:95:e5:f4:f5:d6:d9:e0:0b:31:7c:d5:44: 64:b5:b9:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCqAgdK56n6tBsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTQyODk0NDUtYTdhNy00MGMxLWJhNDEtNTA5NDc4MjU2ZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eWaUKPofSivFzaeCOr6acHplUNeT97HkF8w HS/qr//BFAgahjYtg7zjyIy8A+YsS/aApaPDwR09Gr7Tcs+EH77sg8NOunJcqtzk aoNgI+zg2Dhu+XYsMRyk8YVFwseHddjF+ZtJkT5rwqPq/yi4qIVnpLpDwmWVjHH7 LcVzbtRGJcXZ7DkOKll2ELcpJQcL7bIjLWBEuqOUvHp9K0KmaKVOVR09tkglLO84 VJkShbywIsuj1/bTvBYjgVz6Av5jbbUEueowWlwmWy6C4Hl3K38St6mDGqYuBRa7 /yaHWEUT8KgE4/cyD3Dle4FHrVRHR5M1Tkp5KCQoFay0uo9RbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGcsKZ6xLJ6mZtIx5W7wl1F/Cl2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmJmMGM0YzYtYjgwYy0z YzQwLWI4YzgtMmE0ZDBlZjljM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADlOSyGxlTmV0Y2t6dQ2/DF4SYuNvi4Ra5ea5HxMIJVkfKuOr7IK H12F9H7c4qsSe2dK9UsUEsG52vd9Tu62lro48bBgg9tPArwrORS1G5B9cvRv+8Vu lCwwuJd2TggxBL3lorcmhiELKC+0m8m2vQxay4JTo0hiDC34eWybcaDLFnSYQxAj HBV8yhsvc5V+NLncFSmYVKY6b5wTfNIBknLSVtGnAshsHfbfnHh3cN4prw1h/W0W a3nUNLx6bBD8aSlE8ZxuSe1yW5VgnJwataBP/FmK7ph0PLu3lI3XAxMzYtGxjs2C IKXqxLrkeJREY5Xl9PXW2eALMXzVRGS1uYs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:43:04 2026 by rpki-client