$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa File: 3984502e-c09e-303c-bae0-fddf3483cb3a.roa (raw, json) Hash identifier: Sc85viIav8IZ3rvB1Zi/+IM/Ii/CvjkDx//vVjPc7fg= Subject key identifier: 14:C7:9F:BC:61:9B:D0:9E:32:D1:4E:9D:20:5B:CF:3C:04:2F:FA:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6F1F294BB1F3DA9C8500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2001:4908::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6f:1f:29:4b:b1:f3:da:9c:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=473c896a-682d-4138-8ded-c13cd3b5fef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ad:3b:66:f9:62:88:28:25:ce:46:8f:48:2d: 14:6f:c7:6f:f2:db:78:82:0f:c7:31:9d:f5:0e:88: c0:63:e5:71:d6:05:ad:55:ca:a7:f7:49:22:cf:6d: 5f:1e:7b:f8:bb:91:a5:e0:a8:60:04:17:93:73:61: bb:ee:f6:ef:5e:7a:6f:f2:63:bf:be:3b:7e:97:ff: 98:c3:de:53:c4:fd:63:38:96:b2:ec:01:93:aa:d7: 02:19:9e:d8:99:c4:e8:bc:24:a9:8b:ed:ae:f1:72: 17:6a:53:0a:08:4d:0f:48:b4:78:66:92:d9:8c:e4: af:35:b6:be:f8:d8:26:b2:a5:33:fe:17:b0:1d:ed: 73:25:27:c6:80:69:8f:83:6d:a3:00:97:af:c1:6e: f5:71:df:a3:2d:ed:56:3d:64:59:35:a8:39:12:2b: 85:52:c8:11:01:6d:0f:17:85:19:e7:d7:d0:0b:2e: 34:42:bc:8f:5b:0d:0b:11:a8:d9:ed:bc:d7:f2:94: b4:07:6d:df:b9:75:f3:3e:e4:39:a6:8c:da:32:74: c2:c9:bd:38:ec:9b:c1:c4:c9:89:86:95:38:f5:2d: c0:7c:57:a1:59:6a:02:32:07:84:ad:1f:7c:20:c9: 4e:6c:db:15:ae:24:88:82:40:6a:4f:02:1e:04:8a: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C7:9F:BC:61:9B:D0:9E:32:D1:4E:9D:20:5B:CF:3C:04:2F:FA:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4908::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:60:43:b0:d7:0b:fa:73:ee:a4:d3:f9:87:0f:3d:e1:e9:23: 27:c7:24:fc:bf:8b:d0:01:d5:e9:b1:31:10:14:6f:5a:61:ce: da:49:74:51:4e:64:18:53:12:9f:3f:ec:b3:63:83:f0:b1:b7: 9a:bf:00:83:0f:64:b9:23:ee:ea:f9:1c:43:f0:e4:b3:fc:7b: a8:3b:5e:20:8a:01:77:e4:95:1c:fc:27:5b:84:b1:98:4f:e4: b7:69:37:ba:9b:df:35:81:6a:be:5e:c1:cd:0f:93:22:08:52: 83:58:29:b2:5b:39:df:bd:b1:11:c4:a3:d2:99:9a:07:eb:77: 39:36:57:a3:1a:d1:69:6f:68:25:7f:20:ea:5e:84:b0:16:ca: ef:e5:a7:b3:b5:c3:d6:d6:05:a9:28:8e:b0:39:5d:be:a3:a3: c7:f2:76:ac:d7:ce:c7:69:02:e2:cb:cf:57:ad:7b:24:9d:68: 9b:22:a4:f1:3c:73:8b:08:5a:e7:02:b6:25:32:bc:61:f5:f3: 0f:ee:06:51:f8:d7:38:d3:b2:2c:8e:60:33:20:46:3e:22:b0: 3b:6e:0b:70:ae:b0:1c:69:c7:18:03:5d:c7:cc:53:a8:8b:13: ae:07:8e:8c:93:42:6f:f2:71:6e:9c:d3:74:fb:84:6c:18:83: e3:59:5b:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0wCm8fKUux89qchQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDczYzg5NmEtNjgyZC00MTM4LThkZWQtYzEzY2QzYjVmZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga07ZvliiCglzkaPSC0Ub8dv8tt4gg/HMZ31 DojAY+Vx1gWtVcqn90kiz21fHnv4u5Gl4KhgBBeTc2G77vbvXnpv8mO/vjt+l/+Y w95TxP1jOJay7AGTqtcCGZ7YmcTovCSpi+2u8XIXalMKCE0PSLR4ZpLZjOSvNba+ +NgmsqUz/hewHe1zJSfGgGmPg22jAJevwW71cd+jLe1WPWRZNag5EiuFUsgRAW0P F4UZ59fQCy40QryPWw0LEajZ7bzX8pS0B23fuXXzPuQ5pozaMnTCyb047JvBxMmJ hpU49S3AfFehWWoCMgeErR98IMlObNsVriSIgkBqTwIeBIpZDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBTHn7xhm9CeMtFOnSBbzzwEL/rbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzk4NDUwMmUtYzA5ZS0z MDNjLWJhZTAtZmRkZjM0ODNjYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGYEOw1wv6c+6k0/mHDz3h6SMnxyT8v4vQAdXpsTEQFG9aYc7aSXRR TmQYUxKfP+yzY4PwsbeavwCDD2S5I+7q+RxD8OSz/HuoO14gigF35JUc/CdbhLGY T+S3aTe6m981gWq+XsHND5MiCFKDWCmyWznfvbERxKPSmZoH63c5NlejGtFpb2gl fyDqXoSwFsrv5aeztcPW1gWpKI6wOV2+o6PH8nas187HaQLiy89XrXsknWibIqTx PHOLCFrnArYlMrxh9fMP7gZR+Nc407IsjmAzIEY+IrA7bgtwrrAcaccYA13HzFOo ixOuB46Mk0Jv8nFunNN0+4RsGIPjWVuG -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:07 2026 by rpki-client