$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa File: 2d21dbca-2657-35c0-8519-24ed1492a5e2.roa (raw, json) Hash identifier: /yPSAOgSw6C+LC3Jg6yShMM6hYCYWcirm3VFfmdvywU= Subject key identifier: 4C:35:BF:FB:46:28:8B:21:CF:07:FD:01:08:CE:F6:B3:BF:C7:97:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7555B0ADFEE591811780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:2a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:75:55:b0:ad:fe:e5:91:81:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e6651167-f611-4c7f-918f-338a0aa86a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:9e:12:30:5e:04:4f:fd:9a:2e:35:0f:15: 2d:19:13:56:bc:e9:5e:63:8f:c8:56:fa:52:23:d4: 34:ab:6d:b5:1b:ea:e2:7b:5f:82:67:34:a6:2d:77: 2f:8a:1c:9a:85:4b:de:7c:8b:ea:5e:f0:65:83:5f: e8:d1:0a:70:e7:35:8a:d5:f6:31:76:3b:16:da:3f: 9e:24:75:2d:eb:f2:35:48:23:6e:7b:50:53:ac:0a: 45:d3:59:e7:b5:16:cd:a7:83:c1:ff:85:99:45:eb: 8c:58:fe:c5:80:19:c8:73:0f:ec:6a:ef:7a:40:a0: 1f:20:17:04:ce:16:24:2a:9d:b7:71:d5:3c:4d:21: 05:c1:aa:b1:05:9e:b5:12:0a:57:09:55:dd:a1:ec: 16:ce:95:fb:ca:3a:3f:b5:15:24:ec:57:3e:6d:c5: ff:67:81:5d:ab:9b:89:33:44:c3:62:82:76:d2:6c: b0:4f:b6:1b:1a:f5:31:d6:47:24:82:88:a5:61:50: 89:a5:a6:50:aa:8f:4b:37:e1:4d:d9:c1:d5:d3:81: 2c:75:d3:e8:48:39:29:c8:59:9b:de:fb:45:e3:ff: de:40:22:32:ef:04:cd:86:04:af:79:34:b1:84:a4: b6:07:97:48:d0:e3:9e:3e:55:11:ab:0e:ae:36:a0: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:35:BF:FB:46:28:8B:21:CF:07:FD:01:08:CE:F6:B3:BF:C7:97:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e6:85:36:58:75:c9:f3:d2:e4:32:67:a5:69:b7:3f:0b:2b: d9:b4:1c:5b:63:45:b4:5e:05:31:08:94:94:8e:7b:9f:d6:a4: fa:03:c7:84:94:30:53:ed:12:79:f5:6f:ef:97:bb:b7:93:e6: b3:92:9f:da:e7:47:d1:04:4d:98:9b:d8:88:f8:6e:96:23:10: b0:82:20:b5:a2:15:c3:f2:31:34:c6:be:05:87:87:99:6c:89: bb:20:c3:f3:a2:ba:69:e1:7c:50:45:57:dc:e7:7c:8c:4b:31: 20:da:84:76:d8:80:ca:94:03:ba:de:77:b3:30:26:48:b7:fb: 22:16:ca:42:58:69:51:64:ce:23:2d:b6:40:59:2b:47:67:d1: 25:75:f6:45:52:91:93:7c:00:2b:c2:fa:bf:01:25:b7:0c:ba: e5:14:21:9a:e3:15:62:f6:23:d4:f7:8a:c3:01:ff:a6:d2:60: 22:b9:ae:d9:51:ae:84:1b:18:d5:23:84:7c:8b:50:61:b4:04: c7:17:d0:65:c9:a6:08:4e:be:92:58:39:dc:02:22:77:85:e7: 79:ab:a9:6b:f9:03:bf:5e:17:41:8f:5a:43:67:9f:4f:ca:d3: 11:5e:f5:8e:34:1d:60:89:09:98:3d:fe:aa:41:8d:bf:5c:d7: 53:d4:3e:8b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCnVVsK3+5ZGBF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTY2NTExNjctZjYxMS00YzdmLTkxOGYtMzM4YTBhYTg2YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1WeEjBeBE/9mi41DxUtGRNWvOleY4/IVvpS I9Q0q221G+rie1+CZzSmLXcvihyahUvefIvqXvBlg1/o0Qpw5zWK1fYxdjsW2j+e JHUt6/I1SCNue1BTrApF01nntRbNp4PB/4WZReuMWP7FgBnIcw/sau96QKAfIBcE zhYkKp23cdU8TSEFwaqxBZ61EgpXCVXdoewWzpX7yjo/tRUk7Fc+bcX/Z4Fdq5uJ M0TDYoJ20mywT7YbGvUx1kckgoilYVCJpaZQqo9LN+FN2cHV04EsddPoSDkpyFmb 3vtF4//eQCIy7wTNhgSveTSxhKS2B5dI0OOePlURqw6uNqCexwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEw1v/tGKIshzwf9AQjO9rO/x5eyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQyMWRiY2EtMjY1Ny0z NWMwLTg1MTktMjRlZDE0OTJhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeuaFNlh1yfPS5DJnpWm3Pwsr2bQcW2NFtF4FMQiUlI57n9ak+gPH hJQwU+0SefVv75e7t5Pms5Kf2udH0QRNmJvYiPhuliMQsIIgtaIVw/IxNMa+BYeH mWyJuyDD86K6aeF8UEVX3Od8jEsxINqEdtiAypQDut53szAmSLf7IhbKQlhpUWTO Iy22QFkrR2fRJXX2RVKRk3wAK8L6vwEltwy65RQhmuMVYvYj1PeKwwH/ptJgIrmu 2VGuhBsY1SOEfItQYbQExxfQZcmmCE6+klg53AIid4Xneaupa/kDv14XQY9aQ2ef T8rTEV71jjQdYIkJmD3+qkGNv1zXU9Q+iw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:58:18 2026 by rpki-client