$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa File: a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa (raw, json) Hash identifier: AwZBqhcKyAakCJvJR0CRUratEg+Rqjl8jSyBDfONNSo= Subject key identifier: E3:8F:14:2A:8B:69:87:35:B3:D1:63:94:8B:1D:A9:DA:02:57:29:FE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA0C3A048D97482794C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a0:c3:a0:48:d9:74:82:79:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=4a466b74-0980-453a-a1b4-647c54ffc65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ad:ac:b7:53:25:f4:99:ac:c4:45:89:2b:fc: 4e:52:7b:1b:0b:27:d3:2c:de:28:b2:40:17:44:73: c5:ba:c6:97:66:8a:95:94:c5:2a:98:99:73:f3:3e: c2:24:88:e0:cc:8a:eb:fb:84:4e:a5:c6:dd:c6:a5: 1e:3b:c8:cd:11:91:05:94:10:38:89:12:87:e8:dc: 64:62:8b:7f:88:3b:5b:2f:fc:8a:60:db:4c:02:5c: da:cc:89:03:69:15:49:e4:2b:ed:68:cd:6e:16:57: ff:cf:05:6f:be:5e:e0:59:3d:c4:b6:c0:0c:68:b1: c8:97:4f:ac:ad:60:e9:d8:56:40:2b:57:4c:38:75: d5:2a:d1:08:ac:68:27:c6:50:30:d9:1a:98:5e:75: 5c:0d:f2:5e:b6:79:ed:f1:46:7b:98:b8:fe:89:9f: f9:0c:37:c9:19:03:81:be:45:32:84:2c:e7:05:e9: 63:04:59:f2:ce:12:94:50:b6:ee:ec:cd:7f:4f:1f: ee:31:b3:ce:3a:49:06:44:91:98:dc:1d:76:72:63: b3:91:ce:70:c1:e6:c9:9c:9e:c6:09:14:6c:33:06: 02:a4:69:9d:fb:38:76:47:d9:eb:18:ed:bf:f5:e6: 6d:60:05:fe:0d:5d:93:1a:c8:13:c3:8b:02:df:5d: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8F:14:2A:8B:69:87:35:B3:D1:63:94:8B:1D:A9:DA:02:57:29:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bb:0a:ae:70:5b:25:03:ad:b8:0e:42:62:0a:08:87:6e:54: 84:ae:d0:99:bb:d1:67:40:e0:a2:ca:bc:e4:47:47:3c:71:25: 36:09:67:c5:b3:f1:dd:18:ec:13:9f:49:1b:37:55:d7:25:55: 01:81:c7:16:72:42:d6:26:1c:83:77:15:51:26:ad:c6:0d:97: 91:f4:46:c2:85:71:4a:8a:bf:a7:b1:17:3c:e3:fd:ba:9d:0e: 56:dd:4f:15:34:ae:97:72:b0:74:67:e6:88:96:f9:ac:ce:ae: d4:aa:5c:ce:a6:f4:fa:39:40:34:a1:4e:f7:d5:00:4a:4d:48: 90:e5:d8:e4:b6:b0:40:b8:a3:47:98:78:64:0a:45:9c:2f:cb: 0e:4e:6f:80:03:d6:5a:e3:45:b1:87:75:92:90:8b:b3:67:54: 63:77:6b:2e:e1:14:48:a2:86:ac:7e:03:38:a8:42:77:06:ba: b5:87:31:32:ea:34:20:b9:a7:cc:46:e7:3c:3c:71:70:b0:59: 25:ac:b3:97:b9:38:39:66:9a:25:ab:b2:a5:c1:f2:d5:fc:ae: bc:fc:4e:90:09:b5:15:5d:4c:e9:22:72:03:0e:e4:a4:48:01: 09:7c:ab:47:c4:6d:49:c2:21:ff:97:4f:9d:6e:c2:b9:b8:84: dd:75:c3:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCqDDoEjZdIJ5TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NGE0NjZiNzQtMDk4MC00NTNhLWExYjQtNjQ3YzU0ZmZjNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK2st1Ml9JmsxEWJK/xOUnsbCyfTLN4oskAX RHPFusaXZoqVlMUqmJlz8z7CJIjgzIrr+4ROpcbdxqUeO8jNEZEFlBA4iRKH6Nxk Yot/iDtbL/yKYNtMAlzazIkDaRVJ5CvtaM1uFlf/zwVvvl7gWT3EtsAMaLHIl0+s rWDp2FZAK1dMOHXVKtEIrGgnxlAw2RqYXnVcDfJetnnt8UZ7mLj+iZ/5DDfJGQOB vkUyhCznBeljBFnyzhKUULbu7M1/Tx/uMbPOOkkGRJGY3B12cmOzkc5wwebJnJ7G CRRsMwYCpGmd+zh2R9nrGO2/9eZtYAX+DV2TGsgTw4sC311PNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOOPFCqLaYc1s9FjlIsdqdoCVyn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNjNzlmMjgtZmE4YS0z MjY3LWE2ZjAtZDEwOTlkNjA0YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG27Cq5wWyUDrbgOQmIKCIduVISu0Jm70WdA4KLKvORHRzxxJTYJ Z8Wz8d0Y7BOfSRs3VdclVQGBxxZyQtYmHIN3FVEmrcYNl5H0RsKFcUqKv6exFzzj /bqdDlbdTxU0rpdysHRn5oiW+azOrtSqXM6m9Po5QDShTvfVAEpNSJDl2OS2sEC4 o0eYeGQKRZwvyw5Ob4AD1lrjRbGHdZKQi7NnVGN3ay7hFEiihqx+AzioQncGurWH MTLqNCC5p8xG5zw8cXCwWSWss5e5ODlmmiWrsqXB8tX8rrz8TpAJtRVdTOkicgMO 5KRIAQl8q0fEbUnCIf+XT51uwrm4hN11w20= -----END CERTIFICATE-----Generated at Thu Mar 26 10:50:33 2026 by rpki-client