$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b1728fc-c881-33c6-a899-014e97c3f766.roa File: 9b1728fc-c881-33c6-a899-014e97c3f766.roa (raw, json) Hash identifier: rCeC75VANvjEC/j2XgYOgtRZHbUYmjES3PlATpe0T+Q= Subject key identifier: 02:ED:D0:60:F7:EF:A3:10:6D:E7:5D:4F:ED:A4:DC:C4:FF:3A:3E:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA1E9FC1C29105B8F5280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b1728fc-c881-33c6-a899-014e97c3f766.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a1:e9:fc:1c:29:10:5b:8f:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=4f9deac9-0d74-419c-96dd-d95834ba38bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:05:6d:a7:34:ee:96:0d:70:ab:0b:a3:54: 0c:25:da:38:a1:4c:6e:9f:c8:e4:7b:b2:20:69:63: 28:ea:d7:47:b6:59:5e:2a:19:95:b2:d4:60:68:c2: de:91:dc:97:ac:f0:24:13:c0:80:5b:d7:68:a0:64: ed:4b:31:04:63:bf:d3:23:80:c1:2e:7d:fc:cc:3a: 28:ab:14:cc:81:31:31:21:29:65:6b:7b:61:b5:e6: 81:3b:8d:f5:ba:0e:27:03:27:86:c8:5b:43:21:1a: 93:d8:c5:2a:73:17:22:4f:ae:9c:be:ec:c5:a1:c7: a0:f3:08:75:95:49:17:97:f9:b8:c1:35:96:07:9e: fb:46:f6:19:a3:ae:7a:38:bf:7c:77:8f:1d:ec:fd: be:a9:79:95:3e:05:cf:ff:62:e9:0d:ce:3f:1c:63: db:01:21:37:cd:57:91:86:61:5c:c7:29:76:09:75: 63:73:0c:30:63:b9:18:5c:40:59:56:d6:49:be:7f: 80:42:86:9b:a1:51:38:a4:1b:ac:3b:90:2a:26:05: 84:c1:fe:1e:50:a7:6c:4c:ea:d5:cd:5b:48:74:d1: 37:9b:33:61:dd:79:f9:de:4f:68:21:31:c7:8f:a7: ff:d8:bc:3d:4f:35:54:9a:9e:b7:66:b2:3d:af:38: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:ED:D0:60:F7:EF:A3:10:6D:E7:5D:4F:ED:A4:DC:C4:FF:3A:3E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b1728fc-c881-33c6-a899-014e97c3f766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:52:c7:0c:78:98:07:f7:d2:8c:ff:fc:19:d0:e0:d8:5c:df: 5f:60:a7:33:e5:47:f3:44:64:d6:6e:75:9f:d3:5d:7c:a9:2a: 32:74:3c:a6:c3:30:35:75:ff:ee:c0:1e:05:59:ee:92:0b:d8: c2:a3:33:e1:86:84:42:7a:9b:88:4d:07:30:32:e7:02:a0:4c: 6e:b3:eb:02:59:1c:7e:b8:55:f0:69:ef:6b:61:e4:e8:a5:d5: ca:f7:f9:f2:82:54:9d:a6:b6:90:49:f1:e3:42:20:78:0a:15: 80:a5:2f:11:47:79:53:0e:cd:78:82:d4:45:f5:cf:04:d0:b1: 13:67:ac:07:90:13:73:32:44:2e:9e:9d:3e:c5:f9:4c:35:94: 05:3d:f7:bc:64:9b:67:ce:3e:ed:c1:39:5b:88:d8:c8:81:4b: a1:96:b3:cf:65:79:fd:59:a7:1e:90:05:67:34:20:77:89:70: 47:9a:d7:5c:79:61:64:71:a0:f1:f3:7b:ae:09:a9:84:39:5f: 5b:a4:e2:4d:06:c7:0c:33:a9:0a:07:28:0e:6b:f1:88:51:6c: 73:f8:0c:77:c5:52:fb:38:b8:8c:c4:08:1e:7e:00:3d:81:a4: 78:20:11:9d:e8:25:bd:05:93:71:74:8c:a6:2c:0d:fc:6b:84: 90:9e:a2:ce -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCqHp/BwpEFuPUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NGY5ZGVhYzktMGQ3NC00MTljLTk2ZGQtZDk1ODM0YmEzOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBcFbac07pYNcKsLo1QMJdo4oUxun8jke7Ig aWMo6tdHtlleKhmVstRgaMLekdyXrPAkE8CAW9dooGTtSzEEY7/TI4DBLn38zDoo qxTMgTExISlla3thteaBO431ug4nAyeGyFtDIRqT2MUqcxciT66cvuzFoceg8wh1 lUkXl/m4wTWWB577RvYZo656OL98d48d7P2+qXmVPgXP/2LpDc4/HGPbASE3zVeR hmFcxyl2CXVjcwwwY7kYXEBZVtZJvn+AQoaboVE4pBusO5AqJgWEwf4eUKdsTOrV zVtIdNE3mzNh3Xn53k9oITHHj6f/2Lw9TzVUmp63ZrI9rzi36QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFALt0GD376MQbeddT+2k3MT/Oj7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWIxNzI4ZmMtYzg4MS0z M2M2LWE4OTktMDE0ZTk3YzNmNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlVLHDHiYB/fSjP/8GdDg2FzfX2CnM+VH80Rk1m51n9NdfKkqMnQ8 psMwNXX/7sAeBVnukgvYwqMz4YaEQnqbiE0HMDLnAqBMbrPrAlkcfrhV8Gnva2Hk 6KXVyvf58oJUnaa2kEnx40IgeAoVgKUvEUd5Uw7NeILURfXPBNCxE2esB5ATczJE Lp6dPsX5TDWUBT33vGSbZ84+7cE5W4jYyIFLoZazz2V5/VmnHpAFZzQgd4lwR5rX XHlhZHGg8fN7rgmphDlfW6TiTQbHDDOpCgcoDmvxiFFsc/gMd8VS+zi4jMQIHn4A PYGkeCARneglvQWTcXSMpiwN/GuEkJ6izg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:16:09 2026 by rpki-client