$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa File: 2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa (raw, json) Hash identifier: BE3mAZCCP6ADYQtuKfRCrfWtiGj0fIEodg5DV1bc0Z4= Subject key identifier: 76:C7:7A:B8:71:06:D1:62:C1:86:ED:8D:21:8E:56:4D:85:85:E5:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA1981A56B34C641D0520 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a1:98:1a:56:b3:4c:64:1d:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9a29e1bf-5e83-4596-bbd5-bfa4f3906f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:36:e3:90:a2:ed:12:09:54:66:9b:03:8a:c4: 41:38:5f:54:86:df:27:e4:1f:f0:8a:e9:9e:41:d2: 25:c8:1a:b9:4a:ea:af:80:b5:65:80:98:db:fd:78: d2:82:58:0c:a3:37:f4:08:c0:57:e0:ac:79:ee:3a: c6:8f:70:98:cf:0a:d1:13:27:40:22:b9:87:ba:15: 75:96:77:4e:08:fd:ed:63:79:dc:fd:2b:27:c1:f0: 25:c4:9a:e1:5c:1d:f1:78:99:24:97:98:9c:8e:cb: 92:48:88:d4:a0:c6:b1:26:82:0d:03:18:30:d9:9f: 51:ce:00:bd:d6:20:42:6e:b1:a4:5e:a3:94:65:bb: 5e:a2:8c:27:df:5c:95:ce:a5:43:91:22:09:c8:a2: 81:2f:ff:54:6a:38:73:d5:30:a4:27:e8:ab:30:45: d9:10:0d:c4:67:b7:89:82:ce:2e:4d:93:32:a9:1f: bc:b0:07:08:b1:59:82:70:33:fd:07:57:3f:05:05: 73:45:2f:46:0c:80:ea:a7:54:bb:96:65:58:ac:fc: 42:9d:02:44:e9:18:2a:0c:47:46:c3:14:c4:0b:24: 1f:ed:05:0d:91:11:04:5a:ee:47:8f:36:52:17:63: a6:7e:bd:f7:aa:c6:64:cd:01:8c:45:42:e8:db:77: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C7:7A:B8:71:06:D1:62:C1:86:ED:8D:21:8E:56:4D:85:85:E5:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7a:88:87:d1:5b:1a:a4:30:5b:2d:fd:8b:79:0d:25:46:d2: 0a:c2:43:de:94:04:b7:0a:43:d9:03:6a:5e:45:f4:6e:80:ec: 5a:9b:86:89:e3:94:6f:31:20:57:8b:35:89:47:7a:16:e7:fb: 95:76:77:1c:79:19:42:b7:e1:27:34:3d:e6:d5:f4:38:ab:c2: 5f:e5:c3:2c:a9:cd:e8:70:aa:7e:3a:af:61:6e:38:13:66:9f: 94:79:e2:81:a7:d1:1e:a6:e3:8b:e7:c3:ff:dd:bf:a2:97:1f: f5:89:72:24:48:5b:3a:14:b4:33:58:90:0e:83:8c:5f:08:5a: 8a:60:32:2f:4e:98:a1:b5:6c:88:47:65:48:fc:23:56:6d:78: 8d:2d:6c:c5:f8:26:63:26:64:78:e6:38:9e:ee:0c:bd:f8:8c: d9:2b:1e:d0:b2:a2:1c:84:3a:2a:f7:3b:23:f5:9f:23:2e:cc: b2:17:a4:a0:1c:b9:1a:8c:e5:0c:68:92:a3:6d:73:3c:58:99: fd:f9:d1:79:5f:72:67:39:a2:36:7f:24:5a:1a:f3:e7:b6:13: f7:e7:75:a6:b6:2b:18:4f:7f:c1:7f:c6:05:c5:e3:1f:77:a1: 9f:2f:3c:d5:63:78:dc:f8:8f:93:3b:f5:4d:14:0c:3d:e0:ad: e1:d8:e9:3b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCqGYGlazTGQdBSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OWEyOWUxYmYtNWU4My00NTk2LWJiZDUtYmZhNGYzOTA2ZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijbjkKLtEglUZpsDisRBOF9Uht8n5B/wiume QdIlyBq5SuqvgLVlgJjb/XjSglgMozf0CMBX4Kx57jrGj3CYzwrREydAIrmHuhV1 lndOCP3tY3nc/SsnwfAlxJrhXB3xeJkkl5icjsuSSIjUoMaxJoINAxgw2Z9RzgC9 1iBCbrGkXqOUZbteoown31yVzqVDkSIJyKKBL/9Uajhz1TCkJ+irMEXZEA3EZ7eJ gs4uTZMyqR+8sAcIsVmCcDP9B1c/BQVzRS9GDIDqp1S7lmVYrPxCnQJE6RgqDEdG wxTECyQf7QUNkREEWu5HjzZSF2Omfr33qsZkzQGMRULo23ejgQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHbHerhxBtFiwYbtjSGOVk2FheVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmU5MGUwOWYtZjQ4Ny0z Y2UzLWI5YmQtNTI2M2M5MzhlMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlHqIh9FbGqQwWy39i3kNJUbSCsJD3pQEtwpD2QNqXkX0boDsWpuG ieOUbzEgV4s1iUd6Fuf7lXZ3HHkZQrfhJzQ95tX0OKvCX+XDLKnN6HCqfjqvYW44 E2aflHnigafRHqbji+fD/92/opcf9YlyJEhbOhS0M1iQDoOMXwhaimAyL06YobVs iEdlSPwjVm14jS1sxfgmYyZkeOY4nu4MvfiM2Sse0LKiHIQ6Kvc7I/WfIy7Mshek oBy5GozlDGiSo21zPFiZ/fnReV9yZzmiNn8kWhrz57YT9+d1prYrGE9/wX/GBcXj H3ehny881WN43PiPkzv1TRQMPeCt4djpOw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:29 2026 by rpki-client