$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa File: 9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa (raw, json) Hash identifier: SeHygrbga6AWrSBc4lwuTNNCZmAqGlx7hGdyHG/3ySk= Subject key identifier: 71:8E:ED:CA:43:4D:A6:82:A3:B8:53:BF:A8:BF:05:20:40:2D:EE:61 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A71EC5A557D3F07748980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:71:ec:5a:55:7d:3f:07:74:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=fabe045f-98cf-4a23-b8c4-66ffecb6e924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:06:49:60:b9:28:09:ea:3a:de:01:d9:6f:3b: 25:a3:75:ca:62:04:9b:78:ad:d5:b7:e3:32:f4:3f: 9e:ec:3f:a1:83:ad:e3:88:20:33:db:62:4c:1d:9d: eb:98:2b:15:4e:67:b4:5f:66:dc:55:05:d9:e2:58: 11:bd:7e:23:58:db:1a:1d:bb:d6:94:1d:0a:83:53: f6:f7:fe:04:9c:90:fe:4e:4e:00:f0:c0:ee:12:bf: 0c:53:d0:96:29:f0:55:c1:54:12:0f:ad:03:d9:97: c6:b2:74:af:94:4b:4f:9d:79:3b:64:99:e3:24:09: 73:99:61:ea:ec:a0:ee:63:24:ba:7f:4c:da:33:bf: 0a:8a:10:87:45:f9:92:d0:38:87:b9:df:8d:3e:e0: 35:61:30:f6:e8:c8:5e:ca:93:c4:6f:85:97:36:80: 0e:7b:60:7d:65:4d:a8:c8:7e:ae:6c:82:f7:0c:87: 0c:57:82:5c:33:60:8e:99:66:78:46:eb:4d:8b:82: 11:00:25:17:8f:ef:ce:6c:93:a5:3e:45:69:60:6c: 09:c0:be:84:df:bb:72:21:70:33:a6:00:cf:d8:14: ee:72:5c:4e:35:4b:a7:e2:a4:31:d5:3e:20:e1:b2: ae:fd:a5:86:48:2f:19:00:d0:6e:e6:1c:79:2e:58: 18:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8E:ED:CA:43:4D:A6:82:A3:B8:53:BF:A8:BF:05:20:40:2D:EE:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2d:bd:bf:75:2a:91:0e:92:4d:74:f1:44:3a:9d:72:69:ff: ff:a9:d7:e2:91:94:fc:f5:dc:c4:fc:5a:1b:e5:b0:d8:08:90: 97:fd:8e:bf:01:f2:b9:9f:af:fc:3a:54:a6:40:5e:23:54:2d: 29:a7:79:c6:7a:5d:d3:4c:1c:51:af:02:c6:27:ff:c9:5c:3e: a3:86:34:19:67:37:18:25:7b:a9:1c:7b:24:14:14:d2:9a:91: 75:4d:b2:c5:2d:b4:b1:8a:2b:64:42:49:0d:b5:bb:7b:d6:bd: 36:36:67:58:50:fc:45:c6:f6:4b:37:42:bc:c2:87:ba:c7:b5: bb:bf:0f:ab:54:d9:09:1a:75:b8:59:ab:69:a4:1e:f1:74:6b: 18:b5:c7:73:c6:51:42:b3:6b:64:1f:f8:cb:55:bc:64:77:66: da:59:78:59:6d:f0:d7:be:47:8f:86:11:95:98:70:c6:cc:72: ec:0a:1d:65:b9:7f:a1:99:87:fd:3e:59:a2:7e:95:38:fb:c1: c2:5f:b8:35:f7:90:46:9d:a5:55:75:c3:03:f8:a6:e8:c9:a4: 4a:5d:40:41:cc:8c:0e:1b:f7:bf:ec:e4:f8:11:e8:7c:74:80: 32:ac:18:c5:ce:72:d1:08:f7:a1:42:c4:89:07:70:4b:ab:a9: fa:90:1d:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCnHsWlV9Pwd0iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmFiZTA0NWYtOThjZi00YTIzLWI4YzQtNjZmZmVjYjZlOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQZJYLkoCeo63gHZbzslo3XKYgSbeK3Vt+My 9D+e7D+hg63jiCAz22JMHZ3rmCsVTme0X2bcVQXZ4lgRvX4jWNsaHbvWlB0Kg1P2 9/4EnJD+Tk4A8MDuEr8MU9CWKfBVwVQSD60D2ZfGsnSvlEtPnXk7ZJnjJAlzmWHq 7KDuYyS6f0zaM78KihCHRfmS0DiHud+NPuA1YTD26MheypPEb4WXNoAOe2B9ZU2o yH6ubIL3DIcMV4JcM2COmWZ4RutNi4IRACUXj+/ObJOlPkVpYGwJwL6E37tyIXAz pgDP2BTuclxONUun4qQx1T4g4bKu/aWGSC8ZANBu5hx5LlgYmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHGO7cpDTaaCo7hTv6i/BSBALe5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZiNWE3MDEtMWM0My0z ZjdhLTlkMGQtZDc4ZjcxZWQwYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFUtvb91KpEOkk108UQ6nXJp//+p1+KRlPz13MT8WhvlsNgIkJf9 jr8B8rmfr/w6VKZAXiNULSmnecZ6XdNMHFGvAsYn/8lcPqOGNBlnNxgle6kceyQU FNKakXVNssUttLGKK2RCSQ21u3vWvTY2Z1hQ/EXG9ks3QrzCh7rHtbu/D6tU2Qka dbhZq2mkHvF0axi1x3PGUUKza2Qf+MtVvGR3ZtpZeFlt8Ne+R4+GEZWYcMbMcuwK HWW5f6GZh/0+WaJ+lTj7wcJfuDX3kEadpVV1wwP4pujJpEpdQEHMjA4b97/s5PgR 6Hx0gDKsGMXOctEI96FCxIkHcEurqfqQHYg= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:26 2026 by rpki-client