$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa File: 3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa (raw, json) Hash identifier: Ns8zVOvyXaEqBDI9Vuvy9yXzGua8qkoDclW+wDnTzfw= Subject key identifier: 96:7C:05:C5:4A:AE:60:7F:E1:FF:C9:4C:2B:88:C6:63:87:52:DD:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA16757BB81B89BAB4100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a1:67:57:bb:81:b8:9b:ab:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=75483a7d-8857-4c86-bea6-18acbfe1fb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:27:35:a9:0a:29:90:d8:0b:9b:4c:5a:ab: 50:b9:70:4c:e6:fa:10:55:5c:f4:68:33:22:d0:76: d0:51:73:6a:e4:da:d0:23:47:7f:ff:ea:8b:f8:c7: e9:a7:be:02:0e:d2:39:74:7e:90:cb:c3:0d:33:c7: c3:bb:37:a1:d2:df:c0:96:45:83:3b:f0:b1:79:4b: 59:97:20:b9:cb:a2:95:e8:20:be:35:da:60:9b:e6: 7d:39:74:f8:b2:91:ee:02:18:f1:e7:7b:c5:c8:04: 40:aa:7d:4c:40:40:2a:83:e9:cf:fe:6c:31:05:08: bc:5e:fd:61:2e:00:a2:fa:f8:50:36:c2:02:d4:3e: 71:51:d2:3b:9f:42:7e:26:d6:42:73:5b:d2:45:c7: 64:66:30:eb:23:10:63:bd:26:e2:da:c4:f5:a6:b4: fe:04:5d:27:e4:80:8a:df:2a:4d:14:cb:b0:0f:64: 83:e4:ba:b2:a6:4a:de:49:07:0a:51:7a:1a:c7:f5: 89:84:46:11:aa:6f:36:24:24:98:0b:f2:db:74:41: 44:51:b3:48:8b:42:5b:fa:96:f6:eb:72:17:5f:c9: 78:a3:da:3b:b0:6a:29:13:51:24:df:2c:e5:77:ff: 04:48:77:1c:cd:0c:c5:8f:3b:18:9f:fc:28:7a:02: 71:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7C:05:C5:4A:AE:60:7F:E1:FF:C9:4C:2B:88:C6:63:87:52:DD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:cb:44:15:f0:d2:85:63:8b:e4:2c:b8:b8:50:26:8b:b3:03: ef:08:c8:4d:bf:b4:b5:8d:57:5c:f0:1e:9b:cb:60:72:1a:08: a5:2c:96:71:8c:a5:79:05:44:51:f1:76:89:30:4a:ce:b9:da: 66:bb:fd:b7:b9:88:e8:fe:05:be:f3:5b:fd:ef:fc:97:ad:44: 1f:9d:11:10:e0:04:8e:7e:03:6e:9f:f5:64:a8:ef:93:2f:d9: 83:bd:7f:2b:9d:2f:40:69:1c:f7:f4:f0:7f:8d:ab:e7:b2:f2: 36:74:df:22:ff:55:36:f5:cc:f7:d6:83:81:0a:0f:25:45:af: 65:31:a7:60:4b:84:f8:9c:51:96:89:2b:b3:3d:29:7c:74:a7: d9:e2:fb:32:e9:80:aa:69:f6:f8:b8:2c:ce:1e:ad:a9:27:15: e1:50:2c:68:eb:24:bb:5d:65:eb:95:a3:fd:d0:03:03:37:bf: 4c:a7:f2:8a:ed:7b:40:9a:1d:41:bb:3d:44:8c:30:72:0e:0f: 00:f6:79:80:ae:eb:55:65:4b:10:af:70:92:f6:d5:68:11:56: 61:e0:75:2c:b7:35:a1:d1:90:58:da:17:e9:ba:fc:d8:58:4e: 9a:2f:12:0a:a4:53:35:fb:27:5b:8b:2f:05:ee:29:26:e1:66: 78:0e:b7:10 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCqFnV7uBuJurQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NzU0ODNhN2QtODg1Ny00Yzg2LWJlYTYtMThhY2JmZTFmYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmesnNakKKZDYC5tMWqtQuXBM5voQVVz0aDMi 0HbQUXNq5NrQI0d//+qL+Mfpp74CDtI5dH6Qy8MNM8fDuzeh0t/AlkWDO/CxeUtZ lyC5y6KV6CC+Ndpgm+Z9OXT4spHuAhjx53vFyARAqn1MQEAqg+nP/mwxBQi8Xv1h LgCi+vhQNsIC1D5xUdI7n0J+JtZCc1vSRcdkZjDrIxBjvSbi2sT1prT+BF0n5ICK 3ypNFMuwD2SD5LqypkreSQcKUXoax/WJhEYRqm82JCSYC/LbdEFEUbNIi0Jb+pb2 63IXX8l4o9o7sGopE1Ek3yzld/8ESHcczQzFjzsYn/woegJxSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJZ8BcVKrmB/4f/JTCuIxmOHUt2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2NmYjg4NTMtMjQyNi0z YjcyLWJkNGUtM2QxYmMxN2Q5ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZ8tEFfDShWOL5Cy4uFAmi7MD7wjITb+0tY1XXPAem8tgchoIpSyW cYyleQVEUfF2iTBKzrnaZrv9t7mI6P4FvvNb/e/8l61EH50REOAEjn4Dbp/1ZKjv ky/Zg71/K50vQGkc9/Twf42r57LyNnTfIv9VNvXM99aDgQoPJUWvZTGnYEuE+JxR lokrsz0pfHSn2eL7MumAqmn2+Lgszh6tqScV4VAsaOsku11l65Wj/dADAze/TKfy iu17QJodQbs9RIwwcg4PAPZ5gK7rVWVLEK9wkvbVaBFWYeB1LLc1odGQWNoX6br8 2FhOmi8SCqRTNfsnW4svBe4pJuFmeA63EA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:25 2026 by rpki-client