$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa File: b3253730-2bce-3ed6-b8ef-448c69deee6b.roa (raw, json) Hash identifier: yVOevBC2LCbrpYjSnIpNWrIBI3gdD91kWpwdalhCN1Q= Subject key identifier: 90:35:E6:BA:60:29:7A:B3:07:08:FC:16:B2:2E:FA:D3:3B:88:35:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9FE218582FD5285D4F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9f:e2:18:58:2f:d5:28:5d:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=fa769a77-e25d-42a9-baf8-1cdfb21412f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:77:48:b7:65:d3:16:f3:19:a6:bf:25:77:16: 0d:bc:31:29:bf:3d:71:59:75:5a:0f:de:a5:34:ee: e6:4a:7b:a8:9d:7f:76:89:01:9d:b2:5b:25:9e:93: 9b:49:af:41:bf:c3:37:65:75:0b:11:fe:bf:4c:85: b5:8d:85:50:9e:42:36:e8:4b:ca:6e:5c:4b:ff:1b: ed:70:84:be:e3:da:2f:5c:7d:c5:f4:51:f8:f7:03: 91:0d:7d:a1:f1:df:75:7e:64:07:07:e6:d0:48:97: d6:7f:f2:50:d7:12:bd:b3:8d:ef:70:d4:48:99:92: 4e:e6:8b:ee:97:9d:06:b2:50:61:95:d5:a8:7b:ee: f0:2e:c2:58:d6:9b:19:62:cd:b0:33:7c:b0:0d:d7: 7d:0f:cd:82:e1:ae:3b:d0:65:ed:8e:7a:3d:a4:20: 1c:fa:8b:11:31:c2:62:e3:a5:49:d0:e6:f4:d4:30: 46:ae:a3:ee:84:d8:14:b6:76:18:f2:23:3a:88:d4: cf:8f:95:ac:70:03:0a:28:cd:7e:da:75:80:36:26: 4d:6d:39:9b:1b:33:b2:72:8b:42:52:0b:d4:22:a0: 84:66:c7:00:e7:39:f6:7e:e8:db:2a:4b:41:31:79: f4:26:fc:25:de:18:ac:4f:23:a4:f5:36:ea:5e:6a: dc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:35:E6:BA:60:29:7A:B3:07:08:FC:16:B2:2E:FA:D3:3B:88:35:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ec:62:d3:1e:58:99:67:f9:db:0b:35:0b:14:f6:c9:4b:cf: 1f:00:53:10:63:db:26:a8:59:35:f2:2d:ae:37:a3:e1:1d:76: 42:16:48:42:81:c9:1d:ee:85:3b:6f:5d:1c:44:6c:dd:47:44: 54:40:84:05:12:78:38:60:42:06:ce:88:51:d5:58:23:4f:b7: 60:23:9b:a1:7f:c7:5b:2c:24:51:74:f3:40:38:e6:d5:00:10: c0:32:88:0a:27:d9:e2:c1:42:fb:74:eb:91:09:8a:fa:09:6b: 0b:99:8e:91:68:4a:fa:65:97:44:85:a0:07:5c:be:91:20:00: 99:0c:99:24:c5:ef:55:bf:22:9f:97:87:81:7e:81:a6:f3:6b: ef:1f:5f:43:ae:b6:ed:ac:45:85:c0:3c:1f:c2:c7:2e:2f:f1: 26:47:cd:ef:45:00:49:bf:1f:b4:6f:81:80:e9:92:67:f0:98: d2:b0:6f:dd:1e:06:9e:02:fc:32:ad:ef:ae:27:e4:6e:19:34: da:b5:ee:0d:31:b9:6c:f4:6c:18:32:14:26:d0:a7:c4:63:94: 5d:2d:b8:0c:f8:46:04:38:fd:fc:b7:45:be:90:6d:60:44:39: bc:b1:f3:1f:2b:f9:22:ad:de:60:e8:9d:75:30:9b:7e:79:ee: a9:c6:ad:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCp/iGFgv1ShdTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmE3NjlhNzctZTI1ZC00MmE5LWJhZjgtMWNkZmIyMTQxMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHdIt2XTFvMZpr8ldxYNvDEpvz1xWXVaD96l NO7mSnuonX92iQGdslslnpObSa9Bv8M3ZXULEf6/TIW1jYVQnkI26EvKblxL/xvt cIS+49ovXH3F9FH49wORDX2h8d91fmQHB+bQSJfWf/JQ1xK9s43vcNRImZJO5ovu l50GslBhldWoe+7wLsJY1psZYs2wM3ywDdd9D82C4a470GXtjno9pCAc+osRMcJi 46VJ0Ob01DBGrqPuhNgUtnYY8iM6iNTPj5WscAMKKM1+2nWANiZNbTmbGzOycotC UgvUIqCEZscA5zn2fujbKktBMXn0Jvwl3hisTyOk9TbqXmrcAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJA15rpgKXqzBwj8FrIu+tM7iDWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjMyNTM3MzAtMmJjZS0z ZWQ2LWI4ZWYtNDQ4YzY5ZGVlZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGLsYtMeWJln+dsLNQsU9slLzx8AUxBj2yaoWTXyLa43o+EddkIW SEKByR3uhTtvXRxEbN1HRFRAhAUSeDhgQgbOiFHVWCNPt2Ajm6F/x1ssJFF080A4 5tUAEMAyiAon2eLBQvt065EJivoJawuZjpFoSvpll0SFoAdcvpEgAJkMmSTF71W/ Ip+Xh4F+gabza+8fX0Outu2sRYXAPB/Cxy4v8SZHze9FAEm/H7RvgYDpkmfwmNKw b90eBp4C/DKt764n5G4ZNNq17g0xuWz0bBgyFCbQp8RjlF0tuAz4RgQ4/fy3Rb6Q bWBEObyx8x8r+SKt3mDonXUwm3557qnGrfg= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:07 2026 by rpki-client