$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa File: b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa (raw, json) Hash identifier: DsYsf8oZjHfRooLpxcUmkgtjLCyuR4EBQDyR1EuZIMQ= Subject key identifier: 93:ED:6D:A7:CA:F3:46:94:A3:27:38:00:AE:E7:24:12:79:78:E6:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A75EC60CEB2634183A400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2607:f490::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:75:ec:60:ce:b2:63:41:83:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=aa81fd3d-29ec-4748-9c7d-1dd5311714d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d0:ac:c7:65:01:74:5d:c1:9b:71:87:3f:1b: c2:10:0c:75:9b:66:0e:de:d6:7b:28:dd:d5:64:b8: 6d:39:5d:c6:c7:3f:d4:d1:ad:4b:93:15:fb:7d:f1: a5:e0:97:ef:4e:64:0a:f7:cb:f1:33:d7:45:c7:30: 42:fd:81:27:7f:77:d4:11:45:40:17:5d:07:f4:88: 1d:6b:53:b6:f5:94:79:4c:16:e6:69:df:5a:34:93: 1c:ff:8c:75:11:6d:24:33:b3:8f:a2:12:93:ce:d5: 0c:0c:50:c4:67:a9:17:04:38:dd:ca:ea:68:33:7a: c4:63:ca:04:7c:d5:5d:ee:80:14:2f:74:ef:75:5e: c7:7f:92:4d:30:e3:43:57:bf:17:2b:ff:2f:f0:28: 29:f7:1a:fb:47:f8:05:7a:53:c4:ae:95:10:ae:28: 5a:4c:d2:26:64:da:df:bb:4d:79:b1:16:42:e1:25: 87:2b:c1:1d:16:43:e6:ca:44:72:04:a3:e4:b5:ce: 39:8c:f4:6f:c8:63:22:05:0b:fb:0c:8d:4c:6a:e5: 9e:fd:b7:a8:57:1f:17:7e:9d:11:a9:42:7b:ac:0c: e0:ac:b6:38:c4:97:a8:2a:c2:ea:df:3b:77:f6:1f: 37:e9:46:8b:a1:d4:55:9a:a8:3d:53:96:41:05:ff: d7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:ED:6D:A7:CA:F3:46:94:A3:27:38:00:AE:E7:24:12:79:78:E6:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f490::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e4:d4:6d:1f:b0:4a:e0:c7:16:9e:ff:a9:1a:1c:6a:06:cd: b7:cd:d8:ea:2c:53:ad:b0:97:b7:cf:57:85:29:99:0a:f1:66: c1:02:f4:11:06:6c:95:04:12:a9:ec:89:35:31:85:26:bb:e8: 4d:c7:b0:c4:86:4f:38:16:2d:a9:70:e4:06:87:65:a9:81:ba: d3:cd:dd:fb:6b:2e:26:a5:ac:a9:bb:48:32:bd:46:c3:31:9a: 94:c3:16:20:d7:9a:ec:42:5f:3e:0f:c6:59:6d:f9:e8:e0:fe: d7:05:bc:cb:02:ec:e8:bb:7e:95:ab:37:4b:f2:21:43:d6:39: e3:be:08:2f:b1:23:dd:98:1f:f2:a8:8c:64:3f:5d:38:f5:7b: 8b:53:ad:df:4c:b9:22:ab:ab:3a:d9:88:57:07:2e:fb:5f:9e: d2:05:d8:6b:d1:fc:88:ef:32:ab:2b:13:f4:2d:27:d7:a9:b7: 9d:6f:7f:f1:7a:68:e8:fe:aa:0c:2b:54:89:ab:40:a5:76:fb: 1d:9f:22:07:45:6f:f0:ae:cc:e0:c0:10:b2:74:01:cb:d1:cd: 4e:a9:3a:1e:a7:eb:dd:37:f3:fc:78:69:2b:99:ea:cb:57:43: bd:42:9a:9c:05:43:47:d8:37:af:da:7c:40:ff:ac:da:68:b8: 53:b9:50:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0wCnXsYM6yY0GDpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YWE4MWZkM2QtMjllYy00NzQ4LTljN2QtMWRkNTMxMTcxNGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Csx2UBdF3Bm3GHPxvCEAx1m2YO3tZ7KN3V ZLhtOV3Gxz/U0a1LkxX7ffGl4JfvTmQK98vxM9dFxzBC/YEnf3fUEUVAF10H9Igd a1O29ZR5TBbmad9aNJMc/4x1EW0kM7OPohKTztUMDFDEZ6kXBDjdyupoM3rEY8oE fNVd7oAUL3TvdV7Hf5JNMONDV78XK/8v8Cgp9xr7R/gFelPErpUQrihaTNImZNrf u015sRZC4SWHK8EdFkPmykRyBKPktc45jPRvyGMiBQv7DI1MauWe/beoVx8Xfp0R qUJ7rAzgrLY4xJeoKsLq3zt39h836UaLodRVmqg9U5ZBBf/X0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJPtbafK80aUoyc4AK7nJBJ5eOZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjhlNjNkMmQtZDM4Yi0z ZjcwLWE3YTktMTk4NDRhNzdiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBX5NRtH7BK4McWnv+pGhxqBs23zdjqLFOtsJe3z1eFKZkK8WbBAvQR BmyVBBKp7Ik1MYUmu+hNx7DEhk84Fi2pcOQGh2WpgbrTzd37ay4mpaypu0gyvUbD MZqUwxYg15rsQl8+D8ZZbfno4P7XBbzLAuzou36VqzdL8iFD1jnjvggvsSPdmB/y qIxkP1049XuLU63fTLkiq6s62YhXBy77X57SBdhr0fyI7zKrKxP0LSfXqbedb3/x emjo/qoMK1SJq0CldvsdnyIHRW/wrszgwBCydAHL0c1OqToep+vdN/P8eGkrmerL V0O9QpqcBUNH2Dev2nxA/6zaaLhTuVCC -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:39 2026 by rpki-client