$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa File: cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa (raw, json) Hash identifier: ElATQQP9iRdDcNv1GCcyRid18pzjBWRHu6+tfinCvVM= Subject key identifier: 9A:74:AB:23:60:36:98:8E:6B:EC:CF:48:A0:6A:0E:D2:33:E9:9F:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA0302D98BFDB35311B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a0:30:2d:98:bf:db:35:31:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=bfae1fd3-da7c-40e2-8515-09b8d73a0425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:cf:e9:8c:a3:6a:cf:b4:ad:9f:66:8f:9e: a3:d8:51:a7:31:19:fb:8f:7c:0b:1d:e4:21:55:34: ce:e7:e8:21:e7:18:51:40:e9:07:b3:fc:38:98:b8: ca:7f:d2:90:69:7d:e3:97:f0:17:ad:cc:9e:d2:7a: db:70:a7:4b:91:82:39:de:6b:06:50:5a:0a:f6:7c: 26:42:d4:0f:13:e6:33:19:8f:f5:2b:72:d4:e3:c8: 8d:61:f2:b1:11:4e:80:e9:23:ce:2f:ec:cf:7c:1e: a2:c8:86:ea:37:b4:6a:b0:07:c1:e9:8b:96:88:01: 77:d8:7e:2f:ff:20:c2:a1:9a:d8:0b:26:b9:66:4a: 9a:3d:e0:c4:e8:f8:74:e3:bc:a6:fd:e7:23:80:cc: 05:a5:3d:2b:88:66:f2:7e:e9:82:aa:0e:06:b7:c9: 8d:72:2e:4a:45:c7:08:2e:23:04:99:ba:08:ab:64: ad:e7:dd:6a:90:38:fa:10:61:62:cd:89:e2:6e:ca: 10:08:3b:61:df:05:10:a7:a1:9a:13:5f:ae:6e:76: 94:64:db:30:96:58:e2:80:42:8d:9b:f1:3b:96:74: f3:7e:28:61:ff:4e:20:41:db:12:44:69:cd:e0:e0: fd:57:05:87:5e:76:a4:7a:47:71:c5:94:33:a7:e8: 1f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:74:AB:23:60:36:98:8E:6B:EC:CF:48:A0:6A:0E:D2:33:E9:9F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:13::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f4:c1:ab:c7:04:f8:ad:0b:b6:0f:32:6b:4c:9b:1d:9c:26: b8:3d:7e:43:b7:0c:0b:65:58:8a:92:df:81:4c:f0:b2:04:a5: b8:49:3c:0d:7b:ee:a9:5e:8e:93:1b:34:76:68:7f:d1:ea:cb: c9:20:52:76:6a:45:c4:08:35:16:f0:94:f4:ce:3c:f0:57:be: af:fe:6b:f9:af:a8:99:d0:aa:66:bc:17:72:cd:56:59:f5:ea: 91:bf:82:a1:1e:30:4e:e8:40:b6:14:fd:dd:08:1c:ee:be:f2: 7d:f6:b6:e8:40:ad:43:5a:75:69:68:41:85:4f:fd:3e:a8:a9: 13:07:4b:c5:67:f0:ca:c0:c2:82:2a:90:f4:ed:17:10:f2:d0: 1f:76:b7:da:e3:7f:0c:d4:7a:2d:42:35:fe:52:a8:6a:ee:68: bf:4b:86:43:07:7a:2f:6f:cc:1a:1f:ee:13:fa:f0:1a:bf:a4: 0a:55:ac:e5:5a:f3:5b:63:6b:35:33:b6:da:d6:84:1a:16:da: af:7c:ea:ea:0d:5f:3f:3f:12:2e:89:2e:65:68:09:da:c0:3f: 34:f4:34:a3:90:5e:96:5f:d8:9d:34:4a:1e:2a:11:bf:60:81: b5:33:2e:c3:78:45:3e:2b:b2:0e:07:7b:fa:54:29:3f:29:9c: e3:0c:3c:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCqAwLZi/2zUxGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YmZhZTFmZDMtZGE3Yy00MGUyLTg1MTUtMDliOGQ3M2EwNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvzP6Yyjas+0rZ9mj56j2FGnMRn7j3wLHeQh VTTO5+gh5xhRQOkHs/w4mLjKf9KQaX3jl/AXrcye0nrbcKdLkYI53msGUFoK9nwm QtQPE+YzGY/1K3LU48iNYfKxEU6A6SPOL+zPfB6iyIbqN7RqsAfB6YuWiAF32H4v /yDCoZrYCya5ZkqaPeDE6Ph047ym/ecjgMwFpT0riGbyfumCqg4Gt8mNci5KRccI LiMEmboIq2St591qkDj6EGFizYnibsoQCDth3wUQp6GaE1+ubnaUZNswlljigEKN m/E7lnTzfihh/04gQdsSRGnN4OD9VwWHXnakekdxxZQzp+gfuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJp0qyNgNpiOa+zPSKBqDtIz6Z95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2YzYmMxMWQtNWY5Zi0z OGZhLTg1NjktMzdjOTZhYjc2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAET0wavHBPitC7YPMmtMmx2cJrg9fkO3DAtlWIqS34FM8LIEpbhJ PA177qlejpMbNHZof9Hqy8kgUnZqRcQINRbwlPTOPPBXvq/+a/mvqJnQqma8F3LN Vln16pG/gqEeME7oQLYU/d0IHO6+8n32tuhArUNadWloQYVP/T6oqRMHS8Vn8MrA woIqkPTtFxDy0B92t9rjfwzUei1CNf5SqGruaL9LhkMHei9vzBof7hP68Bq/pApV rOVa81tjazUzttrWhBoW2q986uoNXz8/Ei6JLmVoCdrAPzT0NKOQXpZf2J00Sh4q Eb9ggbUzLsN4RT4rsg4He/pUKT8pnOMMPFo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:36:44 2026 by rpki-client