$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa File: e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa (raw, json) Hash identifier: vbAOMzLC/yweEoLru8mQ/2jjjJ/+y7HIg7PfRL91y/4= Subject key identifier: 0D:28:52:27:4B:DC:4A:32:7A:DB:16:7E:12:F4:B3:9A:8A:53:0E:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A733BEBAC22C4798B3B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:73:3b:eb:ac:22:c4:79:8b:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ecc2db8b-29e3-48e8-8b2d-ae8003ddd44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0c:42:6b:5d:7c:4a:ac:2f:2b:ae:e0:a6:c6: 0d:ae:bf:d4:4d:fd:2a:41:4e:84:54:fb:7a:44:14: 91:27:f1:77:11:1a:f9:0c:12:bf:35:12:ee:0f:f0: f5:ae:0c:93:6b:e7:1e:9d:56:bd:ce:c4:fb:4b:de: f5:7c:ea:10:3d:24:fb:4c:7c:a3:01:cf:9f:47:da: d8:10:75:68:cb:a6:f7:97:82:95:53:06:a8:2f:5b: 77:8b:1f:42:4e:a5:bc:35:79:89:3a:66:b6:f8:b0: 98:a9:81:6f:4b:2c:90:ad:52:f8:2d:3e:04:e6:16: c7:1b:75:8d:54:92:a8:79:98:db:34:85:20:22:7e: 9a:39:37:fd:ee:da:f3:c0:28:bd:f3:44:d9:6c:68: 8a:6d:1d:03:2c:83:7a:b8:bb:77:f9:6c:4b:fa:8e: 9e:3c:17:1d:f7:78:cd:2d:f2:20:e7:56:e2:e8:0d: ae:72:37:52:7e:62:85:90:da:f7:ae:9e:6f:c9:7d: f0:c9:89:c9:0f:d6:2e:5b:f5:35:ed:72:2d:a2:64: de:4f:0c:4d:cc:97:b1:e4:e1:0a:5a:e6:e6:06:3e: 6f:88:65:f8:4d:1a:b9:f4:39:b9:a3:89:35:c7:5a: df:89:b5:cc:83:ff:21:44:45:69:a6:78:e1:b6:df: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:28:52:27:4B:DC:4A:32:7A:DB:16:7E:12:F4:B3:9A:8A:53:0E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:84:56:fe:e8:d7:2d:a2:80:48:98:27:fc:ed:5c:02:62:e8: 82:94:95:77:7d:f0:e0:fa:e3:bc:fd:48:01:72:8b:08:df:f9: 3c:d9:c8:2d:46:91:65:2e:df:44:1c:bf:45:a1:17:a6:56:02: 9c:fc:6b:e6:9a:b2:2e:79:d3:87:56:53:99:7a:a4:9d:96:23: 71:a4:7a:6d:a3:c5:80:cb:13:89:d8:b9:3e:3c:c4:88:66:2f: 9c:98:ca:55:6c:b1:14:04:4d:49:e4:b2:aa:16:af:d3:4c:9e: 8a:aa:22:c5:e9:bc:c4:0b:eb:b7:2d:18:e6:3a:89:96:4d:22: bd:35:3c:df:05:05:e4:3b:22:2d:13:5c:53:5f:49:4e:7a:01: 33:10:0b:ca:83:65:34:09:36:fb:6b:b3:6f:a5:1a:80:d0:5a: ba:77:25:4d:c4:eb:5c:9d:47:15:e9:ec:6e:aa:cd:7b:0b:c1: e0:c2:ca:c5:10:6e:28:39:76:bc:94:b3:5e:00:00:da:c8:1a: c7:aa:c7:e7:32:99:54:6d:c8:fc:8a:3a:74:3c:51:3f:51:3e: 11:ec:13:78:00:2b:87:58:24:6e:ac:bb:e1:87:ec:f8:5e:2b: 2d:e0:3a:99:0b:ef:7e:ae:1a:06:a2:0d:56:d7:46:a9:49:15: 18:4b:44:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCnM766wixHmLOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWNjMmRiOGItMjllMy00OGU4LThiMmQtYWU4MDAzZGRkNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAxCa118SqwvK67gpsYNrr/UTf0qQU6EVPt6 RBSRJ/F3ERr5DBK/NRLuD/D1rgyTa+cenVa9zsT7S971fOoQPST7THyjAc+fR9rY EHVoy6b3l4KVUwaoL1t3ix9CTqW8NXmJOma2+LCYqYFvSyyQrVL4LT4E5hbHG3WN VJKoeZjbNIUgIn6aOTf97trzwCi980TZbGiKbR0DLIN6uLt3+WxL+o6ePBcd93jN LfIg51bi6A2ucjdSfmKFkNr3rp5vyX3wyYnJD9YuW/U17XItomTeTwxNzJex5OEK WubmBj5viGX4TRq59Dm5o4k1x1rfibXMg/8hREVppnjhtt/pqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA0oUidL3EoyetsWfhL0s5qKUw6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTMwY2U0ZmItZWQyYi0z NDYyLThhNDctMWY5ZTI3ZjdlMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABuEVv7o1y2igEiYJ/ztXAJi6IKUlXd98OD647z9SAFyiwjf+TzZ yC1GkWUu30Qcv0WhF6ZWApz8a+aasi5504dWU5l6pJ2WI3Gkem2jxYDLE4nYuT48 xIhmL5yYylVssRQETUnksqoWr9NMnoqqIsXpvMQL67ctGOY6iZZNIr01PN8FBeQ7 Ii0TXFNfSU56ATMQC8qDZTQJNvtrs2+lGoDQWrp3JU3E61ydRxXp7G6qzXsLweDC ysUQbig5dryUs14AANrIGseqx+cymVRtyPyKOnQ8UT9RPhHsE3gAK4dYJG6su+GH 7PheKy3gOpkL736uGgaiDVbXRqlJFRhLRBw= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:13 2026 by rpki-client