$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa File: 9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa (raw, json) Hash identifier: LTZGNXRvro1E/+lbtbip2aVFTilGwvAvxDWHfYXfgs8= Subject key identifier: ED:75:B8:32:35:46:54:35:2E:77:29:9B:4B:C1:7A:68:4D:CE:01:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A73E1C945B7D05FDBF240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:73:e1:c9:45:b7:d0:5f:db:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=1d652b21-4b29-445c-ac81-cf7ec6731334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:8d:47:6a:28:3b:49:fd:51:2c:9f:cb:8e: 2a:9f:c9:29:d8:2f:10:d1:75:5d:cc:92:2d:21:70: 76:3e:d3:fd:e5:5f:ef:21:4d:ed:2c:e0:0f:ca:81: fb:b2:c7:28:84:03:5e:70:cf:d9:ee:7e:35:de:38: 99:ca:bc:4e:66:a4:05:fd:7f:b4:63:f0:f6:e3:38: 63:5a:a1:65:82:2e:34:d5:c1:97:ec:46:e4:5b:65: 65:2d:32:b8:60:3f:35:9c:48:ad:a3:0a:7a:87:3d: 63:2b:64:9c:81:56:6a:4d:af:49:ad:f9:88:c2:62: e2:1a:92:3d:32:bc:57:4a:12:b5:db:52:62:fd:eb: ae:f6:e5:1d:36:76:3e:ba:1f:ef:d5:3c:c3:34:bd: 83:6c:86:51:ae:50:7d:95:3d:dc:4a:96:4e:6c:c3: 7f:63:b0:d2:0f:75:b5:37:f7:39:42:f6:6c:9d:58: 50:84:a4:97:0e:02:61:dd:ba:37:e3:bc:0a:48:2b: 9d:f7:63:bb:52:ca:ef:60:71:bc:ef:29:6b:36:21: d7:bf:de:b1:30:5f:2b:f8:f4:40:ec:49:e5:59:fc: 0a:24:de:55:14:ac:b8:7d:cd:d2:5f:e2:26:dc:ba: c9:f8:15:ae:b6:25:22:37:d2:7f:78:36:6e:83:31: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:75:B8:32:35:46:54:35:2E:77:29:9B:4B:C1:7A:68:4D:CE:01:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:4d:9e:8f:17:52:19:e8:80:54:ac:17:87:95:86:db:b4:70: 40:c3:1e:c6:bc:3a:d9:ba:11:7f:be:f3:4b:35:1c:0f:49:82: d7:a4:0b:f4:68:96:c6:ed:43:fb:b8:0c:03:34:23:25:04:d2: 38:e5:d8:56:33:80:ff:2a:00:7b:19:90:4b:53:5b:27:0b:8a: 9b:dc:a6:4b:12:95:f1:db:e5:be:ed:73:49:46:9a:99:35:cf: 39:26:26:99:9f:68:a6:5b:72:63:c4:79:c3:88:c8:4c:bb:ac: f6:ef:92:40:87:95:c0:f8:fc:db:b4:f9:98:fe:2a:c0:01:1e: 18:b4:de:a5:64:0d:b9:6c:11:7f:95:57:aa:fd:62:6c:a8:23: 1a:61:92:b2:ef:a4:0c:ec:46:89:ef:26:4e:0f:df:17:5b:f0: 14:1d:98:6e:63:38:fd:71:8c:ef:79:cd:1f:dd:86:07:9c:4a: 0c:03:58:df:cf:45:fa:28:f2:c0:bc:50:9d:7e:5a:e7:85:92: ac:cd:05:3b:a8:26:1f:95:0c:99:c6:e2:90:d6:be:60:da:c3: 67:67:5a:75:2d:b5:2d:6b:e7:30:dc:2c:aa:bf:a8:30:ac:12: 84:b8:ed:6d:73:1c:8d:be:81:c4:1f:36:de:40:17:3e:58:4f: 2f:cc:d5:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCnPhyUW30F/b8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MWQ2NTJiMjEtNGIyOS00NDVjLWFjODEtY2Y3ZWM2NzMxMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT+NR2ooO0n9USyfy44qn8kp2C8Q0XVdzJIt IXB2PtP95V/vIU3tLOAPyoH7sscohANecM/Z7n413jiZyrxOZqQF/X+0Y/D24zhj WqFlgi401cGX7EbkW2VlLTK4YD81nEitowp6hz1jK2ScgVZqTa9JrfmIwmLiGpI9 MrxXShK121Ji/euu9uUdNnY+uh/v1TzDNL2DbIZRrlB9lT3cSpZObMN/Y7DSD3W1 N/c5QvZsnVhQhKSXDgJh3bo347wKSCud92O7UsrvYHG87ylrNiHXv96xMF8r+PRA 7EnlWfwKJN5VFKy4fc3SX+Im3LrJ+BWutiUiN9J/eDZugzEPbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO11uDI1RlQ1Lncpm0vBemhNzgEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTAyMTE3NWQtZTk5ZC0z M2I2LTgwYmYtMWIyMmFjNGQyZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAERNno8XUhnogFSsF4eVhtu0cEDDHsa8Otm6EX++80s1HA9Jgtek C/RolsbtQ/u4DAM0IyUE0jjl2FYzgP8qAHsZkEtTWycLipvcpksSlfHb5b7tc0lG mpk1zzkmJpmfaKZbcmPEecOIyEy7rPbvkkCHlcD4/Nu0+Zj+KsABHhi03qVkDbls EX+VV6r9YmyoIxphkrLvpAzsRonvJk4P3xdb8BQdmG5jOP1xjO95zR/dhgecSgwD WN/PRfoo8sC8UJ1+WueFkqzNBTuoJh+VDJnG4pDWvmDaw2dnWnUttS1r5zDcLKq/ qDCsEoS47W1zHI2+gcQfNt5AFz5YTy/M1VE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:43 2026 by rpki-client