$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa File: 5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa (raw, json) Hash identifier: UGTMp1biFAZTARkJA+d1/Feb9sIoCFrLg0ei/2fs0Eo= Subject key identifier: 73:55:D3:30:D1:8F:5B:42:94:11:AC:E4:87:C0:15:4D:FC:1D:64:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA0A5C9517B3A2BA7C020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a0:a5:c9:51:7b:3a:2b:a7:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=569d50a7-ef14-43a1-beb7-af18ebea8977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:17:bd:a8:73:1f:e7:01:05:2c:41:d8:4a: 47:3b:0e:fc:94:67:8e:85:a7:9c:56:b7:02:e3:a2: 56:61:85:a8:4d:b9:c6:03:e8:79:5e:e3:f6:f8:ff: eb:09:4b:78:18:44:8d:72:a6:84:78:ca:15:62:01: 9d:37:66:3e:3f:ab:2b:3c:9b:a6:00:2d:f3:ac:08: dd:9d:8a:8c:df:ac:7d:84:76:1f:47:55:e3:13:8a: f2:b0:93:7a:e0:24:1e:87:84:b1:ea:19:96:70:0a: 4d:7b:ca:8a:60:60:50:9b:25:7a:d7:bf:fa:0d:50: ac:a4:0e:b9:8a:88:3b:f4:18:87:4b:54:96:9a:21: d5:b9:bc:a8:b1:43:dc:00:15:9e:32:08:40:ad:12: 28:78:39:d6:31:2d:99:08:6e:98:05:dd:03:0b:7a: f5:33:10:fa:aa:bf:d1:9d:dc:02:42:0c:ec:08:95: fe:e1:bc:15:35:87:6b:bd:78:43:2e:c1:8b:d2:ff: 10:d8:b8:a4:77:df:5a:0f:73:4e:22:70:a0:b1:4c: 6e:63:80:d3:c3:6f:49:d4:cf:a7:b1:fe:a3:2e:ff: 75:b4:8c:b6:c9:b0:d0:a8:8d:08:08:e9:66:aa:12: 67:bf:08:a4:53:9d:93:fc:33:b6:81:40:0e:57:23: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:55:D3:30:D1:8F:5B:42:94:11:AC:E4:87:C0:15:4D:FC:1D:64:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6f:90:39:a1:f2:14:74:29:25:61:d5:72:cf:04:e7:9b:bd: c8:39:37:03:58:eb:7a:67:ca:29:37:06:34:b2:9d:e7:1b:c1: c7:d6:34:d8:48:a4:43:b3:47:f9:66:72:51:2b:ff:31:76:35: bb:c5:0a:d0:ed:43:8d:cf:9e:93:2c:a6:f6:8c:19:b9:18:0e: 3e:d2:ac:b2:50:a4:54:7f:f9:cb:c2:46:f9:e0:e9:83:6e:90: 08:b7:61:de:fb:ff:59:e2:cf:2a:0c:e2:ff:85:80:9e:63:67: 3a:54:c4:aa:71:55:a2:d2:14:f8:1e:96:44:0c:7a:cd:6d:c9: ed:7d:b7:00:e6:51:05:0e:1b:2d:e6:90:9f:6b:b6:53:45:f1: 90:17:3a:38:cc:57:99:0f:5b:8b:39:60:1a:f0:0c:73:ea:39: b0:eb:ee:df:8b:df:34:45:2d:1b:8f:36:d7:2e:b8:4f:92:8d: 3f:48:f8:50:d4:cb:40:c4:dd:53:e1:02:de:74:40:8c:1a:19: ff:03:b6:6f:49:b6:13:8b:8d:c4:1e:65:69:b7:2a:e2:fa:2f: 5c:50:aa:ad:63:e5:04:ff:de:62:69:a8:d1:31:23:0e:97:82: af:39:61:c7:71:65:59:85:0b:3c:70:1b:8f:e7:79:29:d2:d6: 4e:fe:1e:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCqClyVF7OiunwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTY5ZDUwYTctZWYxNC00M2ExLWJlYjctYWYxOGViZWE4OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/UXvahzH+cBBSxB2EpHOw78lGeOhaecVrcC 46JWYYWoTbnGA+h5XuP2+P/rCUt4GESNcqaEeMoVYgGdN2Y+P6srPJumAC3zrAjd nYqM36x9hHYfR1XjE4rysJN64CQeh4Sx6hmWcApNe8qKYGBQmyV617/6DVCspA65 iog79BiHS1SWmiHVubyosUPcABWeMghArRIoeDnWMS2ZCG6YBd0DC3r1MxD6qr/R ndwCQgzsCJX+4bwVNYdrvXhDLsGL0v8Q2Likd99aD3NOInCgsUxuY4DTw29J1M+n sf6jLv91tIy2ybDQqI0ICOlmqhJnvwikU52T/DO2gUAOVyN6uQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHNV0zDRj1tClBGs5IfAFU38HWRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWVhNjMwOGEtNGViNy0z ZDkzLWI4M2EtYTgyODkwMWI1YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHBvkDmh8hR0KSVh1XLPBOebvcg5NwNY63pnyik3BjSynecbwcfW NNhIpEOzR/lmclEr/zF2NbvFCtDtQ43PnpMspvaMGbkYDj7SrLJQpFR/+cvCRvng 6YNukAi3Yd77/1nizyoM4v+FgJ5jZzpUxKpxVaLSFPgelkQMes1tye19twDmUQUO Gy3mkJ9rtlNF8ZAXOjjMV5kPW4s5YBrwDHPqObDr7t+L3zRFLRuPNtcuuE+SjT9I +FDUy0DE3VPhAt50QIwaGf8Dtm9JthOLjcQeZWm3KuL6L1xQqq1j5QT/3mJpqNEx Iw6Xgq85YcdxZVmFCzxwG4/neSnS1k7+Hkw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:58 2026 by rpki-client