$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4222608-8b35-3c41-97a0-25f33987aef4.roa File: b4222608-8b35-3c41-97a0-25f33987aef4.roa (raw, json) Hash identifier: yDrJwJYVX0G1pL4aTgSzzrYBplb93ugD91wbjNMvLMQ= Subject key identifier: 5C:FB:44:14:B0:3F:02:4E:5B:FF:20:C9:89:AD:67:00:46:54:18:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A731D00EE4FF7051F6140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4222608-8b35-3c41-97a0-25f33987aef4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:73:1d:00:ee:4f:f7:05:1f:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=235763b8-0f29-4574-b697-4c67ea488b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:5f:e0:b4:95:e1:7a:7a:49:50:f2:c7:61: 35:fb:86:3a:bc:6b:ef:9e:0d:bb:98:46:df:d1:80: cb:64:77:eb:7c:2c:72:ef:11:8f:34:be:e3:c6:71: 26:5d:2e:0d:61:09:dc:b0:aa:48:9e:f3:54:23:c2: 53:54:52:dc:a2:6d:bb:7f:4f:d8:31:0f:f3:e1:b5: 82:63:bb:6b:0f:46:e7:50:c0:0d:83:32:32:6d:0a: 36:ba:72:fe:41:4e:c8:eb:96:80:25:e1:ef:07:e9: f5:87:cd:14:a1:77:42:c2:da:5c:63:ec:20:9b:42: ac:52:6c:63:21:5a:52:f4:e7:68:55:df:1c:c0:b9: 1b:4a:cd:2a:01:c0:5d:6b:48:b9:27:a4:05:8a:05: 55:0b:5c:c5:e4:8a:cd:24:60:7f:1c:74:8e:25:25: 7e:32:cd:3e:0d:f7:b3:7f:d6:5a:43:c2:01:0d:c8: a9:08:22:ea:fa:43:a6:f4:b7:ea:bf:81:5d:42:e3: b1:fb:a2:f1:6a:8b:91:e8:6e:be:c8:01:4d:73:e3: b8:8a:e0:b5:51:1a:d7:f9:ab:9a:a2:10:f3:8f:03: 72:dc:0b:3d:f6:b6:55:49:2d:d9:24:9b:da:12:83: 92:3c:9c:95:1f:a3:13:1a:d0:8d:50:a8:69:fb:e4: 17:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FB:44:14:B0:3F:02:4E:5B:FF:20:C9:89:AD:67:00:46:54:18:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4222608-8b35-3c41-97a0-25f33987aef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:28:6e:e2:5e:85:86:45:1f:57:38:fc:90:57:f8:c4:6c:c6: 70:8f:fb:47:de:26:75:e9:1d:56:0d:f0:47:86:b8:f4:18:68: 61:cc:05:d3:bb:fc:8d:b3:78:59:6d:ee:e1:c8:29:5b:bb:56: 57:c9:6d:08:fd:ec:9f:45:6a:a1:26:5d:cc:e2:9b:83:89:56: f3:b0:20:35:08:dd:3a:ab:78:d4:fb:67:50:09:06:6a:7c:ef: 5b:83:b1:cb:fd:0d:df:7e:ea:49:0e:7f:19:55:62:e0:6f:a0: 0a:9a:0c:27:1a:33:ba:a3:2d:6d:60:0c:eb:ff:68:b2:02:eb: cf:97:f0:8e:d0:56:bd:d3:df:6f:55:b5:4e:15:96:88:00:71: 55:a4:d9:40:fe:5a:32:70:eb:b4:49:a2:15:3c:d2:1f:7d:28: 46:3f:90:14:58:52:3d:2d:4d:b2:24:91:59:11:54:de:02:c5: 40:3f:67:0b:ab:9b:45:2a:63:85:98:d8:c6:d5:f6:86:2e:c6: ff:2b:33:d3:ad:2f:cc:e3:fa:90:43:36:39:ca:03:cb:4e:e1: a4:f1:60:6f:c3:b9:ad:d3:9a:03:47:be:6f:61:ae:b3:e8:1a: 28:57:dd:44:6a:30:6b:20:97:f1:1f:8e:7c:6d:a3:70:27:48: 69:dc:37:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCnMdAO5P9wUfYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjM1NzYzYjgtMGYyOS00NTc0LWI2OTctNGM2N2VhNDg4Yjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrhf4LSV4Xp6SVDyx2E1+4Y6vGvvng27mEbf 0YDLZHfrfCxy7xGPNL7jxnEmXS4NYQncsKpInvNUI8JTVFLcom27f0/YMQ/z4bWC Y7trD0bnUMANgzIybQo2unL+QU7I65aAJeHvB+n1h80UoXdCwtpcY+wgm0KsUmxj IVpS9OdoVd8cwLkbSs0qAcBda0i5J6QFigVVC1zF5IrNJGB/HHSOJSV+Ms0+Dfez f9ZaQ8IBDcipCCLq+kOm9Lfqv4FdQuOx+6LxaouR6G6+yAFNc+O4iuC1URrX+aua ohDzjwNy3As99rZVSS3ZJJvaEoOSPJyVH6MTGtCNUKhp++QXKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFz7RBSwPwJOW/8gyYmtZwBGVBg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQyMjI2MDgtOGIzNS0z YzQxLTk3YTAtMjVmMzM5ODdhZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgobuJehYZFH1c4/JBX+MRsxnCP+0feJnXpHVYN8EeGuPQYaGHM BdO7/I2zeFlt7uHIKVu7VlfJbQj97J9FaqEmXczim4OJVvOwIDUI3TqreNT7Z1AJ Bmp871uDscv9Dd9+6kkOfxlVYuBvoAqaDCcaM7qjLW1gDOv/aLIC68+X8I7QVr3T 329VtU4VlogAcVWk2UD+WjJw67RJohU80h99KEY/kBRYUj0tTbIkkVkRVN4CxUA/ Zwurm0UqY4WY2MbV9oYuxv8rM9OtL8zj+pBDNjnKA8tO4aTxYG/Dua3TmgNHvm9h rrPoGihX3URqMGsgl/Efjnxto3AnSGncN5U= -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:48 2026 by rpki-client