$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa File: e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa (raw, json) Hash identifier: rBN7xL8UgUaMAUcxcgNcm4L79DnOA+1R3bsK0nsHdVw= Subject key identifier: 5E:FA:81:E7:EE:55:DB:EE:ED:7D:AA:7B:36:BB:19:3C:85:FA:81:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A732BA561DFAEBC053D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:73:2b:a5:61:df:ae:bc:05:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=69ced838-3312-41f7-95be-97ab86dc7773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4c:62:a2:e5:07:5b:50:e0:54:77:c9:42:e4: 9a:b8:71:c1:82:3a:d8:c7:bc:73:72:fc:2e:13:5f: 59:79:0b:66:54:94:9f:45:67:22:77:92:31:23:71: bc:e1:a7:70:b1:a6:83:29:89:6a:f8:73:1c:5e:56: b2:eb:b8:55:86:ca:6e:ef:da:a9:cd:6e:21:73:5b: 5d:05:43:f2:ab:1a:d8:ef:22:3f:69:0c:ee:d1:44: ca:18:f7:da:77:98:5a:15:92:c1:9f:cc:c7:43:bf: 68:7a:56:25:c8:a0:53:b6:a7:d1:40:47:00:a5:d3: c5:41:9d:b6:af:85:51:39:b1:eb:a7:4c:96:c2:7b: bf:fe:97:e1:e9:5f:b0:eb:f3:d3:f1:33:f6:6f:a0: 6c:96:0f:80:79:fe:fc:58:62:fa:d6:ba:fa:fe:35: 0b:2b:0a:4a:f7:39:a6:84:ac:39:69:ba:79:d8:80: 0f:33:32:ac:4d:c7:cf:57:2c:e2:24:0e:e7:33:ff: 67:6a:55:fc:e0:7d:4f:63:4a:bb:0f:87:1e:c3:fa: 7c:b6:bc:8e:7b:94:52:27:88:df:5a:b1:78:e9:5d: 6a:66:15:6b:8d:97:cd:8a:b1:29:95:79:65:61:cc: d4:d1:34:1d:c3:b1:7e:c9:c4:f7:d9:c4:97:f2:c0: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FA:81:E7:EE:55:DB:EE:ED:7D:AA:7B:36:BB:19:3C:85:FA:81:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b9:1f:f3:65:2c:b0:72:4f:3f:87:fc:e9:2b:ae:05:bd:f1: ec:f0:13:28:74:46:ae:10:d9:d2:7f:7e:e6:d8:30:88:20:c5: 09:4b:73:1a:92:3a:c5:b2:cd:19:f1:70:36:5f:91:9a:0d:7c: b2:3b:9f:ee:9d:ea:68:07:f1:24:e4:68:62:01:11:9a:01:b8: 11:c5:fd:d4:1a:08:cc:e2:24:a8:5e:ef:42:d9:25:d7:b6:a1: 79:3b:19:54:11:e9:d5:50:b4:5c:f3:5f:c3:fe:0a:87:c7:50: 26:aa:8f:af:23:39:36:3f:00:cc:4a:67:38:32:66:6c:61:1c: 89:20:56:ec:08:ed:0a:4b:e7:b7:33:d3:e5:fd:2c:0e:c8:85: 43:8b:3e:1d:65:7e:b8:e0:43:3f:c4:c1:b8:4d:1c:96:16:60: 84:57:07:7a:21:ef:47:cd:4a:0f:59:4a:64:c3:ca:f5:80:0f: 54:01:fc:ab:d9:eb:e6:e3:9a:00:b4:10:16:74:7d:9a:a0:ae: e8:01:e6:16:36:2b:59:91:79:96:26:e5:8b:cc:21:9b:16:6a: da:93:76:7c:65:fb:2a:9e:70:48:94:b2:8b:8f:90:b2:75:61: d4:31:e7:90:68:a7:6a:72:15:cc:cf:84:f9:c7:40:3c:c5:01: cb:0c:1f:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCnMrpWHfrrwFPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NjljZWQ4MzgtMzMxMi00MWY3LTk1YmUtOTdhYjg2ZGM3NzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0xiouUHW1DgVHfJQuSauHHBgjrYx7xzcvwu E19ZeQtmVJSfRWcid5IxI3G84adwsaaDKYlq+HMcXlay67hVhspu79qpzW4hc1td BUPyqxrY7yI/aQzu0UTKGPfad5haFZLBn8zHQ79oelYlyKBTtqfRQEcApdPFQZ22 r4VRObHrp0yWwnu//pfh6V+w6/PT8TP2b6Bslg+Aef78WGL61rr6/jULKwpK9zmm hKw5abp52IAPMzKsTcfPVyziJA7nM/9nalX84H1PY0q7D4cew/p8tryOe5RSJ4jf WrF46V1qZhVrjZfNirEplXllYczU0TQdw7F+ycT32cSX8sBvOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF76gefuVdvu7X2qeza7GTyF+oEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTcyZDU3YjUtZTlmMS0z NGZiLThhYzctZjRkMDYyOWQ3YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEG5H/NlLLByTz+H/OkrrgW98ezwEyh0Rq4Q2dJ/fubYMIggxQlL cxqSOsWyzRnxcDZfkZoNfLI7n+6d6mgH8STkaGIBEZoBuBHF/dQaCMziJKhe70LZ Jde2oXk7GVQR6dVQtFzzX8P+CofHUCaqj68jOTY/AMxKZzgyZmxhHIkgVuwI7QpL 57cz0+X9LA7IhUOLPh1lfrjgQz/EwbhNHJYWYIRXB3oh70fNSg9ZSmTDyvWAD1QB /KvZ6+bjmgC0EBZ0fZqgrugB5hY2K1mReZYm5YvMIZsWatqTdnxl+yqecEiUsouP kLJ1YdQx55Bop2pyFczPhPnHQDzFAcsMHxc= -----END CERTIFICATE-----Generated at Thu Mar 26 09:10:53 2026 by rpki-client