$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9f28c3c-81b4-3515-825b-a41239eb04c5.roa File: c9f28c3c-81b4-3515-825b-a41239eb04c5.roa (raw, json) Hash identifier: WSgP2wVPqpTD/I1dSjYYh6sP0DYNFtuKEBU8hSRwVOE= Subject key identifier: 3B:0F:A8:CB:C1:9E:54:23:61:2B:1A:59:01:3C:40:57:18:F1:97:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A74D161D91DD20BBA7140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9f28c3c-81b4-3515-825b-a41239eb04c5.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:1a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:74:d1:61:d9:1d:d2:0b:ba:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=20af2c5a-d52b-4462-a189-69a11d284c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:42:a6:42:16:bb:0b:61:97:7b:09:57:8e:2d: 5a:41:c9:9a:eb:73:70:87:63:86:ea:33:80:cf:9c: e4:9d:4e:07:4b:86:79:6a:46:82:ba:e3:36:7a:c7: f6:1c:19:9c:e7:5b:7a:3f:4a:68:e3:2d:73:15:9a: 15:37:7e:3e:cb:d1:8c:63:54:28:db:f2:6a:70:93: af:ec:23:30:47:19:4d:7f:8e:f3:5d:30:e1:aa:89: 56:7e:a5:50:b8:8e:69:3f:4d:eb:6b:af:cd:46:d0: c4:f8:b3:6a:49:86:74:64:e3:8b:84:4d:59:09:f9: fb:86:3a:b0:f4:26:b8:f5:0f:b1:1b:60:99:fa:ff: a6:8a:4d:bf:f8:20:bb:74:64:20:e4:0f:15:ed:8d: b2:0d:d3:52:18:44:39:ee:e0:76:9a:32:8b:5e:1f: 97:f3:e6:da:6d:95:82:07:f5:c8:40:29:b7:73:c9: bf:e3:22:b2:56:6c:6b:d4:27:e8:fe:80:0e:bb:7e: 21:48:76:92:27:98:7c:0b:74:4f:2c:f7:75:6d:c2: 76:ea:1d:50:35:46:4f:8d:0e:40:23:6e:31:76:85: 1b:e9:5d:49:d3:84:3f:0d:1a:54:fb:07:8d:25:8a: f7:b5:b5:6d:88:ba:f7:7b:04:83:e9:1b:3e:ac:36: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:A8:CB:C1:9E:54:23:61:2B:1A:59:01:3C:40:57:18:F1:97:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9f28c3c-81b4-3515-825b-a41239eb04c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:60:b0:fd:3c:54:87:53:0c:74:c5:a3:60:f4:51:59:ea:2c: c0:ff:33:a3:4e:89:2c:2d:1d:3f:bd:13:bb:77:b1:98:38:6b: 42:ab:34:67:22:ed:ab:ed:4b:3f:8d:29:d6:0a:0b:4e:e4:96: 8d:50:13:9c:55:c4:26:e2:f5:76:f1:ae:06:e0:e1:2a:23:04: ba:ea:b9:a8:1e:5e:90:ce:20:0b:54:30:8c:18:a9:c5:8d:fb: 60:2f:60:d6:bd:cf:34:e3:20:71:2b:e3:45:d7:6c:ec:b4:7f: 57:02:b9:fe:b0:1d:45:24:97:3d:03:cb:6e:54:92:0d:7e:84: fe:a4:57:7e:23:f7:7b:1a:ef:29:ee:bc:d8:8b:c7:20:b5:38: 4a:48:fc:40:c2:45:44:27:c1:0d:e1:7b:fd:e6:d9:4e:f3:db: a3:7a:80:0d:fd:fe:bc:ec:ae:a2:43:7e:3c:cf:da:76:09:59: 82:d6:63:9e:e5:db:b3:b1:57:11:5c:d4:ab:4c:8e:20:3d:6b: 98:43:8f:4b:09:e2:75:73:85:0f:96:e1:1b:38:81:a5:56:36: c3:ae:d5:89:e6:d5:f0:c3:b9:aa:13:1b:ca:5e:12:c4:0b:43: f8:88:f7:85:a7:18:fb:8a:3f:4f:25:65:7a:f9:9a:f3:d4:e2: ae:8e:7e:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCnTRYdkd0gu6cUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjBhZjJjNWEtZDUyYi00NDYyLWExODktNjlhMTFkMjg0YzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEKmQha7C2GXewlXji1aQcma63Nwh2OG6jOA z5zknU4HS4Z5akaCuuM2esf2HBmc51t6P0po4y1zFZoVN34+y9GMY1Qo2/JqcJOv 7CMwRxlNf47zXTDhqolWfqVQuI5pP03ra6/NRtDE+LNqSYZ0ZOOLhE1ZCfn7hjqw 9Ca49Q+xG2CZ+v+mik2/+CC7dGQg5A8V7Y2yDdNSGEQ57uB2mjKLXh+X8+babZWC B/XIQCm3c8m/4yKyVmxr1Cfo/oAOu34hSHaSJ5h8C3RPLPd1bcJ26h1QNUZPjQ5A I24xdoUb6V1J04Q/DRpU+weNJYr3tbVtiLr3ewSD6Rs+rDbDywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDsPqMvBnlQjYSsaWQE8QFcY8ZfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzlmMjhjM2MtODFiNC0z NTE1LTgyNWItYTQxMjM5ZWIwNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADmCw/TxUh1MMdMWjYPRRWeoswP8zo06JLC0dP70Tu3exmDhrQqs0 ZyLtq+1LP40p1goLTuSWjVATnFXEJuL1dvGuBuDhKiMEuuq5qB5ekM4gC1QwjBip xY37YC9g1r3PNOMgcSvjRdds7LR/VwK5/rAdRSSXPQPLblSSDX6E/qRXfiP3exrv Ke682IvHILU4Skj8QMJFRCfBDeF7/ebZTvPbo3qADf3+vOyuokN+PM/adglZgtZj nuXbs7FXEVzUq0yOID1rmEOPSwnidXOFD5bhGziBpVY2w67ViebV8MO5qhMbyl4S xAtD+Ij3hacY+4o/TyVlevma89Tiro5+AQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:35 2026 by rpki-client