$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa File: bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa (raw, json) Hash identifier: e1RaEWtCX8K6vwkMaAPPvaB4bw3kT3QB6xF2n+9o4/I= Subject key identifier: 7E:78:C5:9A:56:A0:76:3B:61:92:96:AA:A7:44:86:39:A6:22:79:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA1475790347C49A3CC40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a1:47:57:90:34:7c:49:a3:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e1c945f8-c8ca-42b3-8e05-2b46408764e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:bc:15:dd:5a:58:db:ac:d6:f7:5c:fe:3f: de:91:eb:f9:60:c3:98:f2:bd:79:d1:1a:b5:8a:4a: 18:22:92:5f:57:6a:6d:b5:d9:32:b3:30:9e:cd:da: 14:45:87:fa:e3:96:1f:33:e8:d8:0a:f1:e5:fd:cf: 64:6e:34:c5:dd:0a:07:4d:b3:c0:69:81:a2:49:78: 6d:b0:bb:7e:75:0f:cd:1b:fe:c9:7a:cc:1c:d3:f7: c4:13:f4:3d:63:20:a2:74:3a:01:50:a3:f8:0f:a2: 1f:c0:fb:e0:ff:8d:14:ba:26:99:8a:0a:55:4a:b3: 49:4c:7e:3a:ed:a8:2c:2d:c7:b1:1a:f5:26:89:28: 97:da:f5:ee:f4:0b:61:bc:48:db:dd:9e:1c:20:e3: 74:09:1d:6d:f4:53:7b:ec:73:c9:d2:a0:69:85:f4: b3:1e:06:31:f1:2c:fd:c3:f9:57:c8:b4:69:80:72: 81:e1:ab:42:5a:e8:d9:44:9a:10:00:e3:99:d3:72: cc:5e:b9:29:9f:21:79:b9:fd:54:f0:09:03:e0:02: fd:1c:ea:0e:10:bb:b0:9f:ce:1c:4f:5c:42:da:40: d3:ec:95:14:fb:09:ef:38:e1:68:89:b7:23:be:d2: 8e:b6:b6:db:0e:af:59:03:fd:46:e6:a1:ef:7b:ca: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:78:C5:9A:56:A0:76:3B:61:92:96:AA:A7:44:86:39:A6:22:79:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:39::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:04:ad:dc:25:fc:c7:38:b1:94:c2:21:e0:09:c0:6d:2c:86: 5c:64:af:9a:10:cb:22:c0:d4:2d:70:b0:aa:99:95:e2:6c:62: af:32:10:4c:cf:f7:f3:fd:e1:51:8a:6b:c6:c3:0c:d0:fc:47: 31:84:b2:17:e2:62:fb:87:70:82:4b:73:5a:99:55:49:7d:9f: 61:49:ad:8f:b4:f2:f4:10:90:6e:8f:49:df:9e:46:e0:8f:52: da:be:ba:5e:bb:e2:54:7d:70:28:ef:01:07:3e:a1:39:c5:e3: c7:4c:42:64:c2:e7:c7:ce:13:62:be:1f:32:72:b0:35:48:2d: 28:1d:be:e5:7a:d4:d6:77:50:28:54:2d:f2:58:5b:09:83:02: 74:96:4e:9a:18:17:50:8f:52:6c:bf:3e:af:b0:ec:b2:de:b5: 3c:3b:73:37:48:18:98:cf:64:e2:da:3d:58:70:2e:50:bd:6c: 76:3a:dd:f5:85:ca:5d:26:d2:84:42:29:73:0e:27:0f:47:47: c7:8f:3f:d1:d1:74:cd:00:5c:d3:1f:46:e1:0e:52:e8:65:8b: d1:90:ac:3f:c9:89:05:29:d6:fa:bc:28:90:d8:3b:c0:cb:a7: cb:bf:92:a6:a0:fb:9e:b1:29:c1:25:9f:87:8e:99:eb:6e:3c: 63:7a:e5:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCqFHV5A0fEmjzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTFjOTQ1ZjgtYzhjYS00MmIzLThlMDUtMmI0NjQwODc2NGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmya8Fd1aWNus1vdc/j/ekev5YMOY8r150Rq1 ikoYIpJfV2pttdkyszCezdoURYf645YfM+jYCvHl/c9kbjTF3QoHTbPAaYGiSXht sLt+dQ/NG/7Jeswc0/fEE/Q9YyCidDoBUKP4D6IfwPvg/40UuiaZigpVSrNJTH46 7agsLcexGvUmiSiX2vXu9AthvEjb3Z4cION0CR1t9FN77HPJ0qBphfSzHgYx8Sz9 w/lXyLRpgHKB4atCWujZRJoQAOOZ03LMXrkpnyF5uf1U8AkD4AL9HOoOELuwn84c T1xC2kDT7JUU+wnvOOFoibcjvtKOtrbbDq9ZA/1G5qHve8qdmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH54xZpWoHY7YZKWqqdEhjmmInmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmM1YTJmNGItYTZmYS0z NzJhLWI3YjEtZTk4YjY1ZTUxMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHsErdwl/Mc4sZTCIeAJwG0shlxkr5oQyyLA1C1wsKqZleJsYq8y EEzP9/P94VGKa8bDDND8RzGEshfiYvuHcIJLc1qZVUl9n2FJrY+08vQQkG6PSd+e RuCPUtq+ul674lR9cCjvAQc+oTnF48dMQmTC58fOE2K+HzJysDVILSgdvuV61NZ3 UChULfJYWwmDAnSWTpoYF1CPUmy/Pq+w7LLetTw7czdIGJjPZOLaPVhwLlC9bHY6 3fWFyl0m0oRCKXMOJw9HR8ePP9HRdM0AXNMfRuEOUuhli9GQrD/JiQUp1vq8KJDY O8DLp8u/kqag+56xKcEln4eOmetuPGN65X0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:13 2026 by rpki-client