$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa File: dfae6790-4364-3d1e-9409-6da10de1af43.roa (raw, json) Hash identifier: TQzWnLa8DlwdNllF7BLmuOouuxBXHItH5xdKqEjhxFs= Subject key identifier: 18:88:9C:8E:32:F6:85:20:26:C4:F6:4E:1A:5D:6F:D9:1E:BD:FB:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A74F1F15240CC92828980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:1c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:74:f1:f1:52:40:cc:92:82:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d9435d6c-47e5-4a6e-b6dc-e6c57c59b6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f1:69:90:00:30:71:a3:1a:f1:ae:12:4e:60: b5:8d:60:88:2e:fd:1a:69:dd:9b:a6:fe:9c:39:f2: 26:45:3a:a6:4c:e2:60:91:2a:55:d0:b8:b8:c7:e7: 97:d8:6b:1c:54:1c:23:10:a1:b9:90:33:54:98:69: 09:1d:f6:ba:32:ba:f3:37:99:8a:76:a6:d0:70:32: 46:eb:43:51:a6:7e:67:a2:f0:66:a3:cb:ae:aa:06: 7d:3c:b3:8b:a0:36:5b:e9:64:c4:b8:a0:6f:ff:bc: 65:e2:78:c1:42:55:05:dd:c0:15:74:a6:32:4e:68: b1:9a:96:f8:cb:57:6f:b6:48:93:4c:a0:f0:75:aa: fe:b3:f7:c1:63:78:8c:88:91:99:93:50:9d:c9:b1: 63:76:87:42:70:8d:ed:f1:f8:a5:35:81:18:b7:ab: 73:7a:d7:8f:9c:b7:aa:60:9c:35:b6:18:c6:0d:fc: 28:b7:9d:0e:16:4e:48:7c:fb:6e:17:aa:c8:38:62: 71:8e:ac:60:88:60:87:8b:3f:97:db:b0:5e:51:a2: aa:0a:73:b5:da:37:36:3b:35:ed:28:87:47:9f:c2: 82:2d:67:29:17:4a:40:00:eb:48:0f:7a:7b:3c:89: 94:c0:62:7f:7f:f5:e6:41:3d:16:3b:e5:8c:51:be: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:88:9C:8E:32:F6:85:20:26:C4:F6:4E:1A:5D:6F:D9:1E:BD:FB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ea:82:09:08:8e:ec:fb:43:31:ce:22:db:10:08:74:24:00: f5:ca:40:af:0e:10:ee:5c:e1:5b:ea:7d:85:86:87:ab:ca:c0: 1b:f5:bf:8d:2c:c5:0b:1e:7e:36:55:57:11:00:77:93:74:4d: 6a:d1:ab:d2:1d:e5:2c:d7:aa:44:fe:75:4d:0d:ec:0b:68:eb: 09:33:35:af:d1:10:57:96:32:00:45:39:cb:3b:f2:e4:20:00: 8a:f5:5f:30:2c:35:db:f3:61:38:2c:96:d9:f8:e3:bb:53:04: 0f:2d:7f:be:25:a6:05:c9:b9:37:75:6d:7e:21:f4:1e:c9:d3: 9e:b2:6d:64:3a:ec:ad:47:f5:e5:5d:82:29:fe:fa:cc:d2:62: e0:48:bb:e0:44:ac:b8:12:a3:21:98:bd:dc:b4:4f:51:4e:24: 63:f0:5c:1b:8d:dd:e8:2d:54:44:70:a9:32:67:05:5f:3f:7e: 5a:91:42:c1:6a:e2:d3:48:25:28:83:6b:4f:4d:b8:a3:55:e8: ab:7d:f9:ac:59:a3:00:90:40:49:f0:aa:de:93:38:55:e5:b0: d7:5c:61:81:75:cf:43:08:95:b6:28:66:92:71:83:36:57:57: 4d:d1:e4:11:0e:92:d5:e9:26:51:57:30:12:f3:2b:3c:32:df: 2b:f8:3e:3b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCnTx8VJAzJKCiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDk0MzVkNmMtNDdlNS00YTZlLWI2ZGMtZTZjNTdjNTliNmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfFpkAAwcaMa8a4STmC1jWCILv0aad2bpv6c OfImRTqmTOJgkSpV0Li4x+eX2GscVBwjEKG5kDNUmGkJHfa6MrrzN5mKdqbQcDJG 60NRpn5novBmo8uuqgZ9PLOLoDZb6WTEuKBv/7xl4njBQlUF3cAVdKYyTmixmpb4 y1dvtkiTTKDwdar+s/fBY3iMiJGZk1CdybFjdodCcI3t8filNYEYt6tzetePnLeq YJw1thjGDfwot50OFk5IfPtuF6rIOGJxjqxgiGCHiz+X27BeUaKqCnO12jc2OzXt KIdHn8KCLWcpF0pAAOtID3p7PImUwGJ/f/XmQT0WO+WMUb6wowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBiInI4y9oUgJsT2Thpdb9kevfsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZhZTY3OTAtNDM2NC0z ZDFlLTk0MDktNmRhMTBkZTFhZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcuqCCQiO7PtDMc4i2xAIdCQA9cpArw4Q7lzhW+p9hYaHq8rAG/W/ jSzFCx5+NlVXEQB3k3RNatGr0h3lLNeqRP51TQ3sC2jrCTM1r9EQV5YyAEU5yzvy 5CAAivVfMCw12/NhOCyW2fjju1MEDy1/viWmBcm5N3VtfiH0HsnTnrJtZDrsrUf1 5V2CKf76zNJi4Ei74ESsuBKjIZi93LRPUU4kY/BcG43d6C1URHCpMmcFXz9+WpFC wWri00glKINrT024o1Xoq335rFmjAJBASfCq3pM4VeWw11xhgXXPQwiVtihmknGD NldXTdHkEQ6S1ekmUVcwEvMrPDLfK/g+Ow== -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:58 2026 by rpki-client