$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8614a06c-6ba8-3abc-ac45-cef9596174d1.roa File: 8614a06c-6ba8-3abc-ac45-cef9596174d1.roa (raw, json) Hash identifier: 1DK706hgd5CdgzgVDu64WrdpzMFaQyJZYurCjKoYUTk= Subject key identifier: 73:16:DE:11:EB:91:33:4A:BB:90:D1:2A:BF:98:20:B8:70:62:3A:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A721C125CFC24510E4B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8614a06c-6ba8-3abc-ac45-cef9596174d1.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:72:1c:12:5c:fc:24:51:0e:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c3d85dab-c7b2-455a-a362-60211755270e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:75:6e:8c:27:14:10:5d:64:a6:9f:ca:53:cb: 9b:3f:e8:e9:9a:8d:8f:0c:23:40:dd:f5:dc:9a:ca: a8:3a:a3:72:59:b7:a9:d1:82:3b:48:22:c4:03:29: 4d:1b:71:da:ff:7d:75:2d:4c:94:82:ea:09:a7:8e: 61:9c:e4:81:5c:0d:44:33:e5:c7:ac:a6:e0:cb:69: 5a:7d:ad:d9:2b:01:61:c0:1e:bb:7b:30:18:ae:73: c4:e6:ff:33:71:db:bb:3e:93:18:d0:97:9c:44:d6: af:58:52:63:4e:8d:de:de:cb:5e:15:12:e4:24:cb: 8f:eb:2f:d2:23:d2:52:ed:3a:2c:6f:57:2d:77:ed: 33:4f:23:90:62:cc:a8:62:91:ce:c5:30:35:09:3c: e1:76:44:f6:85:32:01:89:70:03:27:a0:75:bc:8c: e0:45:08:64:61:00:8f:70:db:fd:bf:d5:43:14:b1: 4a:27:9d:64:96:d2:7f:17:26:05:c0:32:55:cb:8d: 57:72:73:eb:28:07:d8:b9:b6:45:c9:a4:83:38:af: d4:cc:3f:bc:69:e0:6c:b8:0b:93:7e:45:49:7a:e0: c4:58:d0:d0:98:f1:d1:d7:bb:86:5a:4e:09:37:54: b3:0a:e1:03:b8:fb:04:e3:79:79:38:bc:a1:c9:ad: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:16:DE:11:EB:91:33:4A:BB:90:D1:2A:BF:98:20:B8:70:62:3A:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8614a06c-6ba8-3abc-ac45-cef9596174d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:07:c2:fb:75:14:96:22:15:ac:35:bb:92:92:f6:20:92:8f: be:f9:9a:59:ae:e7:d9:77:50:b6:5b:53:86:ae:aa:bf:89:40: a2:8c:9a:88:f2:f1:99:3f:0d:03:7e:0f:f3:69:8a:1c:bc:14: e3:38:10:9b:41:b0:d3:9f:a1:15:d1:ed:b8:13:e5:ce:b4:53: ac:50:81:0e:ef:4b:fb:5f:cc:38:73:73:03:01:a7:db:7b:55: 9a:c9:51:8d:84:a2:03:3c:9d:97:c3:0d:78:16:05:d5:2c:3a: 3b:87:56:a2:98:04:3e:59:a5:a1:20:c0:f2:14:c6:40:e5:fc: d5:b9:dc:d3:da:eb:21:6c:d6:0a:55:2c:87:68:60:7c:9a:b1: d1:8d:ac:ae:5e:11:69:b9:6e:6c:f7:4d:62:5c:e4:79:21:33: b6:53:3a:3b:46:ed:a8:d3:3d:20:55:a6:48:c8:ea:b3:c5:f8: 2e:16:48:b6:ea:65:66:cd:fb:42:22:09:11:82:d4:be:b7:10: c5:69:7d:ff:99:e6:d7:0a:9e:e3:73:f0:42:c2:a5:3d:a0:06: 1f:4b:11:4d:ea:1f:03:99:81:b1:7c:1f:94:27:5e:2e:27:7e: 48:1e:eb:39:f1:9a:e4:5c:fc:7b:be:3a:62:ae:a7:0f:17:f4: c6:04:2c:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCnIcElz8JFEOSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzNkODVkYWItYzdiMi00NTVhLWEzNjItNjAyMTE3NTUyNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33VujCcUEF1kpp/KU8ubP+jpmo2PDCNA3fXc msqoOqNyWbep0YI7SCLEAylNG3Ha/311LUyUguoJp45hnOSBXA1EM+XHrKbgy2la fa3ZKwFhwB67ezAYrnPE5v8zcdu7PpMY0JecRNavWFJjTo3e3steFRLkJMuP6y/S I9JS7Tosb1ctd+0zTyOQYsyoYpHOxTA1CTzhdkT2hTIBiXADJ6B1vIzgRQhkYQCP cNv9v9VDFLFKJ51kltJ/FyYFwDJVy41XcnPrKAfYubZFyaSDOK/UzD+8aeBsuAuT fkVJeuDEWNDQmPHR17uGWk4JN1SzCuEDuPsE43l5OLyhya0dUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHMW3hHrkTNKu5DRKr+YILhwYjrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODYxNGEwNmMtNmJhOC0z YWJjLWFjNDUtY2VmOTU5NjE3NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMHwvt1FJYiFaw1u5KS9iCSj775mlmu59l3ULZbU4auqr+JQKKM mojy8Zk/DQN+D/Npihy8FOM4EJtBsNOfoRXR7bgT5c60U6xQgQ7vS/tfzDhzcwMB p9t7VZrJUY2EogM8nZfDDXgWBdUsOjuHVqKYBD5ZpaEgwPIUxkDl/NW53NPa6yFs 1gpVLIdoYHyasdGNrK5eEWm5bmz3TWJc5HkhM7ZTOjtG7ajTPSBVpkjI6rPF+C4W SLbqZWbN+0IiCRGC1L63EMVpff+Z5tcKnuNz8ELCpT2gBh9LEU3qHwOZgbF8H5Qn Xi4nfkge6znxmuRc/Hu+OmKupw8X9MYELEk= -----END CERTIFICATE-----Generated at Thu Mar 26 08:02:47 2026 by rpki-client