$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa File: 7812d5a6-8aa4-3831-abe7-befad072a1d3.roa (raw, json) Hash identifier: OwxvzBX8VXuJr4crbusZ6fg8vgksDZKK2lUlq2NIIvY= Subject key identifier: EE:7F:47:47:60:6F:30:8A:E2:41:91:7C:B9:92:D4:65:34:E5:FE:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A74035EE71060D5402FA8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:74:03:5e:e7:10:60:d5:40:2f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=6ba5a764-af30-42b0-8d48-b28b305d58a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2a:59:1f:e3:fa:13:4a:b9:90:0e:1b:4b:8e: c8:99:cd:42:9f:08:f8:36:14:62:5e:85:bd:b6:01: 81:99:84:38:19:2c:f3:ea:1b:7a:d4:b5:2d:e1:bf: 63:eb:72:75:4f:db:9e:7e:fb:a0:a0:46:ed:f5:f9: 00:f2:f5:09:00:91:40:6f:f0:4d:ea:05:7d:68:e7: 1a:34:6f:0c:5f:14:cc:0a:a8:01:33:ec:2e:22:e7: 73:96:53:22:d1:01:6f:51:d5:c0:4f:66:61:d7:24: a6:e3:1d:7f:ab:e4:ce:54:89:8a:15:1f:f4:3e:49: 4f:f4:5e:ed:69:5f:82:d1:de:a2:ad:c1:5e:36:2b: 36:6a:e8:7c:73:47:76:9f:10:37:d9:b2:78:c2:07: 17:38:2a:9c:af:d8:7e:e8:67:a7:3d:d4:76:e1:b9: 66:8e:87:91:c0:db:41:c8:b0:a5:5f:64:04:db:61: b6:a8:33:6c:17:a1:1a:f8:f7:57:a0:3b:84:f4:bc: a6:4d:fb:aa:23:29:95:2b:06:a6:11:71:ea:c4:77: 7e:ac:94:e6:5a:04:0b:a5:ec:3f:2a:8b:b3:50:29: 87:af:ad:2d:bd:95:12:b2:11:06:9e:3c:a6:93:2f: cc:83:d6:91:da:20:bd:ed:0e:aa:fd:53:1d:02:63: 5f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7F:47:47:60:6F:30:8A:E2:41:91:7C:B9:92:D4:65:34:E5:FE:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3e:98:a9:31:1b:d6:04:e8:c1:ff:4b:3b:ef:0c:95:77:1c: 1d:ef:0b:94:b6:e2:6e:bc:05:a4:09:b0:cc:19:bc:8f:e1:5d: b1:de:47:60:1f:8c:36:7e:74:e9:93:e5:33:fa:1e:5b:40:e7: 8c:eb:c0:e3:9e:f4:0a:4e:77:da:ec:68:48:0a:28:ff:b8:4b: a0:b7:8d:c8:2f:e8:c6:c1:32:eb:d3:3d:5b:04:34:16:a2:50: 7a:8e:9c:cf:c1:77:81:5c:71:f5:48:3a:83:27:0c:8a:39:8a: 50:a4:b9:d2:68:fd:0a:bb:9e:74:ff:6d:51:57:c0:d2:1f:47: 35:eb:64:ee:67:c8:d8:f3:6c:05:c6:c6:15:58:1e:d6:ed:86: e7:ec:2a:9c:17:f0:7b:dc:7f:54:d8:2a:ff:75:a5:85:24:d4: c4:02:83:fa:cd:e3:8c:e7:0f:6d:4e:3c:7d:89:2b:09:4e:76: 17:1d:9f:83:17:20:a8:8f:1c:1d:23:d6:63:4f:4c:41:2c:4a: 98:5f:0e:96:8b:cd:42:f3:bb:c1:da:50:1c:e9:f9:e4:28:58: 61:78:50:72:8c:7f:ad:61:e3:da:f3:9c:5f:35:00:fc:bc:50: 99:ae:52:cb:f1:d2:92:b9:ee:85:92:b0:88:85:85:0a:86:d7: fe:8b:ce:61 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCnQDXucQYNVAL6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NmJhNWE3NjQtYWYzMC00MmIwLThkNDgtYjI4YjMwNWQ1OGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSpZH+P6E0q5kA4bS47Imc1Cnwj4NhRiXoW9 tgGBmYQ4GSzz6ht61LUt4b9j63J1T9uefvugoEbt9fkA8vUJAJFAb/BN6gV9aOca NG8MXxTMCqgBM+wuIudzllMi0QFvUdXAT2Zh1ySm4x1/q+TOVImKFR/0PklP9F7t aV+C0d6ircFeNis2auh8c0d2nxA32bJ4wgcXOCqcr9h+6GenPdR24blmjoeRwNtB yLClX2QE22G2qDNsF6Ea+PdXoDuE9LymTfuqIymVKwamEXHqxHd+rJTmWgQLpew/ KouzUCmHr60tvZUSshEGnjymky/Mg9aR2iC97Q6q/VMdAmNfYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFO5/R0dgbzCK4kGRfLmS1GU05f5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzgxMmQ1YTYtOGFhNC0z ODMxLWFiZTctYmVmYWQwNzJhMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATj6YqTEb1gTowf9LO+8MlXccHe8LlLbibrwFpAmwzBm8j+Fdsd5H YB+MNn506ZPlM/oeW0DnjOvA4570Ck532uxoSAoo/7hLoLeNyC/oxsEy69M9WwQ0 FqJQeo6cz8F3gVxx9Ug6gycMijmKUKS50mj9CruedP9tUVfA0h9HNetk7mfI2PNs BcbGFVge1u2G5+wqnBfwe9x/VNgq/3WlhSTUxAKD+s3jjOcPbU48fYkrCU52Fx2f gxcgqI8cHSPWY09MQSxKmF8OlovNQvO7wdpQHOn55ChYYXhQcox/rWHj2vOcXzUA /LxQma5Sy/HSkrnuhZKwiIWFCobX/ovOYQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:37:23 2026 by rpki-client