$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa File: 35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa (raw, json) Hash identifier: r6EGk+P/DGAfwK5Slcmalk85YJt9Qk7u1jVtNFepw+4= Subject key identifier: D5:4E:32:60:86:61:EA:F7:66:96:29:00:8D:9F:F7:DD:F1:10:51:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9CB3DC12177994B516C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2001:4988::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9c:b3:dc:12:17:79:94:b5:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=b7eed63d-2e55-490e-bc20-18bd74052742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:56:80:cd:38:96:44:b9:63:9b:63:87:89: 18:9f:4e:cf:a5:52:a7:7d:3e:12:30:51:d7:b5:0c: 80:c6:3e:b1:72:c3:5c:16:bf:42:8d:9d:51:0e:05: 78:94:ce:39:8c:82:3b:02:df:b1:89:60:17:c0:fd: b3:c5:7e:73:ce:3d:c2:ed:fd:d8:d9:a2:20:c1:49: f9:d8:54:f6:c8:74:15:81:39:fe:00:f9:bc:9b:18: 79:21:ef:ff:84:d8:30:cf:f3:fa:a0:0b:a3:48:16: 65:f9:3c:56:57:b8:c1:5e:d1:eb:cd:4f:1b:38:0c: 12:7f:49:45:fc:d4:b3:c2:6c:89:00:d3:a9:25:07: e2:68:3d:26:e8:c8:15:31:df:5f:b2:f6:62:12:71: 79:08:e5:fe:cd:8a:c0:60:76:71:1b:80:6a:39:65: ff:82:67:ea:d9:67:a3:4c:c8:3c:7b:a5:f9:c7:e6: bd:f1:5a:37:9b:61:0b:32:b3:07:5a:b9:3c:da:9e: ed:d1:a5:b5:b9:ec:8a:40:cd:ad:a5:a6:83:5c:8d: 8b:21:19:e3:a2:ac:d7:30:a3:1a:37:b5:b0:d2:24: a8:81:71:32:2e:25:48:54:d0:14:52:aa:11:ca:f9: e7:7f:61:55:b1:e7:76:99:97:9b:15:ce:eb:91:2b: c2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4E:32:60:86:61:EA:F7:66:96:29:00:8D:9F:F7:DD:F1:10:51:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4988::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:80:76:85:70:89:dc:f0:f3:37:50:4c:71:46:81:4c:32:f0: a6:fc:93:12:dd:63:93:76:53:06:71:8a:8e:57:41:60:69:fe: b0:c2:83:a2:b4:c7:64:38:16:42:7e:cf:52:65:37:34:23:52: c4:34:52:db:d2:0a:4d:04:33:e8:a5:20:c8:98:6e:a0:ff:64: d6:f9:7b:9e:de:63:f5:79:11:68:43:a2:1a:ce:71:fc:3d:e3: fa:96:95:72:cd:b6:24:82:06:3d:b5:6d:2b:dd:0a:59:7f:dd: 04:34:0d:96:ee:57:cd:94:26:e5:b3:52:0e:77:4a:c3:f8:da: c6:bd:aa:8f:af:51:89:1d:67:e9:ff:17:85:48:8f:73:cd:f4: 5e:e6:a4:64:65:2e:92:e1:94:f1:a8:5d:d0:fa:18:e7:dc:79: ff:c0:d5:c2:1a:86:d5:f4:81:8e:08:93:89:f5:c4:3b:2a:a3: 84:16:4f:d3:34:fd:a9:ce:28:ca:ff:f2:d8:e6:01:0e:df:97: b8:66:10:60:5d:53:06:20:ef:96:8d:fd:96:67:b5:13:d3:6e: d5:c4:02:0b:36:7a:f5:8d:83:b5:e1:45:fa:72:e6:fd:18:9d: f2:f8:dd:24:33:81:1a:07:a0:16:3d:b8:6d:95:45:1d:23:51: 8d:35:f5:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0wCpyz3BIXeZS1FsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YjdlZWQ2M2QtMmU1NS00OTBlLWJjMjAtMThiZDc0MDUyNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheFWgM04lkS5Y5tjh4kYn07PpVKnfT4SMFHX tQyAxj6xcsNcFr9CjZ1RDgV4lM45jII7At+xiWAXwP2zxX5zzj3C7f3Y2aIgwUn5 2FT2yHQVgTn+APm8mxh5Ie//hNgwz/P6oAujSBZl+TxWV7jBXtHrzU8bOAwSf0lF /NSzwmyJANOpJQfiaD0m6MgVMd9fsvZiEnF5COX+zYrAYHZxG4BqOWX/gmfq2Wej TMg8e6X5x+a98Vo3m2ELMrMHWrk82p7t0aW1ueyKQM2tpaaDXI2LIRnjoqzXMKMa N7Ww0iSogXEyLiVIVNAUUqoRyvnnf2FVsed2mZebFc7rkSvCLwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNVOMmCGYer3ZpYpAI2f993xEFF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzVlNWM1M2UtYzUzNi0z ZjcwLThmNGQtMTlhZThhMjg4NmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWgHaFcInc8PM3UExxRoFMMvCm/JMS3WOTdlMGcYqOV0Fgaf6wwoOi tMdkOBZCfs9SZTc0I1LENFLb0gpNBDPopSDImG6g/2TW+Xue3mP1eRFoQ6IaznH8 PeP6lpVyzbYkggY9tW0r3QpZf90ENA2W7lfNlCbls1IOd0rD+NrGvaqPr1GJHWfp /xeFSI9zzfRe5qRkZS6S4ZTxqF3Q+hjn3Hn/wNXCGobV9IGOCJOJ9cQ7KqOEFk/T NP2pzijK//LY5gEO35e4ZhBgXVMGIO+Wjf2WZ7UT027VxAILNnr1jYO14UX6cub9 GJ3y+N0kM4EaB6AWPbhtlUUdI1GNNfWW -----END CERTIFICATE-----Generated at Thu Mar 26 09:24:21 2026 by rpki-client