$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa File: ae55df24-7c19-3bfc-87d0-5689589fa0de.roa (raw, json) Hash identifier: upLdKHdRRg4drzhxXwvjDHR644UQ+RVBUFzr4W1y5/w= Subject key identifier: DC:5E:2A:48:50:54:A0:CA:99:5D:8D:68:DC:3D:32:92:5A:DD:29:6F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA040676188334D378810 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a0:40:67:61:88:33:4d:37:88:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=45c39539-cc2d-4f82-a932-56a5b47733c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e8:ed:36:42:02:e7:f3:00:46:3d:48:97:0e: e7:93:53:a9:11:b6:f6:c7:13:62:6c:8d:fa:82:00: c3:18:b5:90:8f:cb:78:19:53:3d:85:3a:6d:5f:0e: c8:bf:96:a2:0d:c4:92:c9:93:e0:c7:92:7c:f2:e4: cb:8b:2a:a0:d9:d8:98:e5:b6:2f:41:9c:3d:43:13: 0f:00:0a:d6:dc:12:de:e9:cd:d1:31:24:e8:d6:ef: 8c:dc:2e:ef:76:9e:cf:1e:d5:23:ad:0e:6e:a4:ee: c6:b2:ae:08:bb:9e:02:3c:0a:cd:66:ab:e6:e6:8e: db:af:f5:73:6b:d4:c0:d8:64:37:a1:90:c9:ba:b3: 22:17:2d:65:32:09:ce:9b:0c:b4:04:f5:de:09:6c: 73:cc:5d:13:ff:4b:f4:da:fe:68:dc:8d:b0:41:6e: 9d:64:d9:5a:ac:ee:0f:a9:71:cb:3c:b1:d4:fa:f3: bd:66:d0:a2:4f:b2:21:ac:19:32:fc:b1:44:fb:6e: b7:43:81:3b:db:63:38:ad:3e:75:a3:32:d5:95:02: 29:25:ff:6d:6c:71:b4:81:5d:ea:b1:5b:aa:ae:56: a7:ab:03:51:98:8c:1f:61:63:99:fc:d1:71:a4:a2: 58:cf:3f:fb:b3:30:c0:d2:5f:3f:36:bb:42:cd:e5: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5E:2A:48:50:54:A0:CA:99:5D:8D:68:DC:3D:32:92:5A:DD:29:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9e:d8:a0:7e:1e:bc:0f:4a:61:67:4d:8a:57:d1:07:41:15: 0f:53:e7:8c:b9:33:1f:83:db:c5:e9:42:9a:6f:06:78:29:79: 8e:ff:b0:ae:ba:f6:7b:c6:9e:0d:3e:47:fd:5b:55:b2:40:a8: 03:f3:49:30:e5:0e:28:76:b2:08:f1:01:47:ee:2b:2d:e5:e4: b0:34:03:2c:94:b2:62:03:c6:7a:d0:0e:60:46:b1:46:de:b2: b8:1e:36:d2:a2:bd:e5:ad:25:dd:58:78:e3:71:45:23:89:ed: d1:39:3b:7e:8d:3b:1b:22:5e:7b:9c:64:0a:b5:3c:72:42:ca: 8c:9a:13:9d:e4:f2:fb:89:fc:be:87:e3:b6:75:5e:99:76:23: e5:89:1e:a4:61:cf:1d:b6:e3:40:c2:55:1e:ea:3e:11:aa:47: 0f:38:a5:c8:57:f1:c4:ab:2b:f2:d6:58:ee:18:65:ed:32:0c: fd:ad:0b:e7:b8:44:a3:a9:97:1e:5e:e8:be:e7:52:f5:c2:75: 88:88:fb:c1:ee:3f:db:db:35:91:17:58:87:86:72:29:30:22: 07:e3:7c:ca:e7:25:a3:50:ca:f4:30:17:cb:58:8d:67:ee:15: 5e:cd:dd:d3:5b:1e:be:63:c8:01:cb:d8:6a:b3:47:0e:dc:50: 0f:c4:7a:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCqBAZ2GIM003iBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDVjMzk1MzktY2MyZC00ZjgyLWE5MzItNTZhNWI0NzczM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OjtNkIC5/MARj1Ilw7nk1OpEbb2xxNibI36 ggDDGLWQj8t4GVM9hTptXw7Iv5aiDcSSyZPgx5J88uTLiyqg2diY5bYvQZw9QxMP AArW3BLe6c3RMSTo1u+M3C7vdp7PHtUjrQ5upO7Gsq4Iu54CPArNZqvm5o7br/Vz a9TA2GQ3oZDJurMiFy1lMgnOmwy0BPXeCWxzzF0T/0v02v5o3I2wQW6dZNlarO4P qXHLPLHU+vO9ZtCiT7IhrBky/LFE+263Q4E722M4rT51ozLVlQIpJf9tbHG0gV3q sVuqrlanqwNRmIwfYWOZ/NFxpKJYzz/7szDA0l8/NrtCzeXInQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNxeKkhQVKDKmV2NaNw9MpJa3SlvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWU1NWRmMjQtN2MxOS0z YmZjLTg3ZDAtNTY4OTU4OWZhMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACye2KB+HrwPSmFnTYpX0QdBFQ9T54y5Mx+D28XpQppvBngpeY7/ sK669nvGng0+R/1bVbJAqAPzSTDlDih2sgjxAUfuKy3l5LA0AyyUsmIDxnrQDmBG sUbesrgeNtKiveWtJd1YeONxRSOJ7dE5O36NOxsiXnucZAq1PHJCyoyaE53k8vuJ /L6H47Z1Xpl2I+WJHqRhzx2240DCVR7qPhGqRw84pchX8cSrK/LWWO4YZe0yDP2t C+e4RKOplx5e6L7nUvXCdYiI+8HuP9vbNZEXWIeGcikwIgfjfMrnJaNQyvQwF8tY jWfuFV7N3dNbHr5jyAHL2GqzRw7cUA/EegY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:40:13 2026 by rpki-client