$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa File: af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa (raw, json) Hash identifier: Cqbu/FHB1ItVpkSsRyCPDymdJ7xGSyzn4U0EfXfr7hs= Subject key identifier: 3E:F2:41:80:CB:86:0A:4B:96:1B:C9:7D:55:1C:21:FE:C5:89:0F:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA342C2EE919123D4A100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2607:f400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a3:42:c2:ee:91:91:23:d4:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=045f3031-91e5-4153-8a28-2d34ea1c44a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:e9:ca:0e:72:a4:9d:6d:47:71:31:06:0c: 33:37:e3:cd:51:58:fc:93:71:60:32:df:2d:51:db: e7:76:97:d6:cc:b6:df:a0:ed:27:a7:ea:c8:90:9d: 82:5a:ef:af:82:a5:16:00:68:05:cb:80:eb:f1:c6: 75:c2:84:ed:3a:f2:b0:da:4a:1e:a0:0c:1a:b9:86: 35:0d:96:76:86:b4:e9:33:94:af:5a:9e:91:8f:66: b6:94:b7:4a:72:8f:ff:90:0a:95:5c:44:7b:fe:49: a0:e8:f8:c8:1e:07:a6:f1:96:2a:53:43:58:7c:26: 5e:03:56:e0:7f:0f:2e:59:f2:32:3f:86:35:fc:bb: 34:77:47:38:11:7f:a4:03:d7:3a:12:26:b0:c9:d4: a7:09:2a:25:f9:67:2d:43:7e:ce:e4:82:4c:20:65: 6e:da:5d:ec:26:8e:da:b5:48:7d:78:9b:47:b4:84: 33:78:0c:0c:f9:0b:a9:e5:71:5f:61:a7:c5:07:16: 76:f0:8b:b0:16:9d:14:f5:fa:ff:7d:98:7d:b5:ab: 65:1b:e8:45:12:31:ec:b5:63:69:7e:92:23:4b:6e: a3:6a:2a:13:c9:f7:26:1a:73:31:0c:07:0f:25:c0: bf:fd:46:91:ee:c4:03:e6:ff:0b:f1:e4:b1:92:10: 56:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F2:41:80:CB:86:0A:4B:96:1B:C9:7D:55:1C:21:FE:C5:89:0F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:da:4d:b7:cd:ee:b4:33:00:67:e6:93:50:85:32:51:f8:cf: d6:95:16:aa:be:7b:5e:6d:28:18:fe:6c:71:09:10:3e:2a:a4: 82:d9:e6:4e:e9:4e:6e:16:50:8c:c5:91:43:ed:95:ba:a6:4f: 03:1b:cc:c9:19:64:91:10:b3:f0:eb:88:49:7b:ed:f1:87:67: c1:ce:62:eb:72:42:66:2c:6c:af:ad:29:86:c3:b3:0c:f7:95: ee:2a:26:37:1f:67:85:69:96:b3:f4:7f:e0:28:3d:12:35:03: c8:be:0d:2a:dd:ec:1c:21:c4:ec:07:4a:a9:73:85:3c:c5:33: ea:7e:1e:d6:c6:5e:38:da:f8:46:15:d4:0a:f3:6d:39:69:84: f4:3f:74:0a:e5:2f:e4:ef:57:78:27:89:f7:3e:a5:73:50:1d: 4e:c4:65:de:a2:7e:1f:ab:b0:3a:63:b4:b4:b9:82:35:1f:ef: e3:83:22:f9:2e:e4:a0:22:ca:2f:03:b3:1a:5b:56:00:b3:66: 67:c5:c3:bf:17:de:84:87:dd:ec:f2:4a:9a:e4:bb:eb:c2:51: 4d:37:86:b4:ab:ab:9f:80:15:0d:2b:9a:3c:c4:ee:78:fc:c1: cc:ce:f6:48:b5:e7:8a:0c:ec:6c:37:2e:b5:40:0e:1b:a9:de: 74:24:d1:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0wCqNCwu6RkSPUoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MDQ1ZjMwMzEtOTFlNS00MTUzLThhMjgtMmQzNGVhMWM0NGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyXpyg5ypJ1tR3ExBgwzN+PNUVj8k3FgMt8t UdvndpfWzLbfoO0np+rIkJ2CWu+vgqUWAGgFy4Dr8cZ1woTtOvKw2koeoAwauYY1 DZZ2hrTpM5SvWp6Rj2a2lLdKco//kAqVXER7/kmg6PjIHgem8ZYqU0NYfCZeA1bg fw8uWfIyP4Y1/Ls0d0c4EX+kA9c6EiawydSnCSol+WctQ37O5IJMIGVu2l3sJo7a tUh9eJtHtIQzeAwM+Qup5XFfYafFBxZ28IuwFp0U9fr/fZh9tatlG+hFEjHstWNp fpIjS26jaioTyfcmGnMxDAcPJcC//UaR7sQD5v8L8eSxkhBWzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD7yQYDLhgpLlhvJfVUcIf7FiQ/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWY2ZWI2YWItMDIwNS0z N2I0LWI3MjgtY2U5MGVmNDRhZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB22k23ze60MwBn5pNQhTJR+M/WlRaqvntebSgY/mxxCRA+KqSC2eZO 6U5uFlCMxZFD7ZW6pk8DG8zJGWSRELPw64hJe+3xh2fBzmLrckJmLGyvrSmGw7MM 95XuKiY3H2eFaZaz9H/gKD0SNQPIvg0q3ewcIcTsB0qpc4U8xTPqfh7Wxl442vhG FdQK8205aYT0P3QK5S/k71d4J4n3PqVzUB1OxGXeon4fq7A6Y7S0uYI1H+/jgyL5 LuSgIsovA7MaW1YAs2ZnxcO/F96Eh93s8kqa5LvrwlFNN4a0q6ufgBUNK5o8xO54 /MHMzvZIteeKDOxsNy61QA4bqd50JNGs -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:46 2026 by rpki-client