$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa File: e872bf65-3c44-37d5-974f-d352d3753c1e.roa (raw, json) Hash identifier: pGvQmdLThmnj2toQ0uHLadcFJ9j87ZWTdOntRTFcwL0= Subject key identifier: 14:75:97:47:68:BC:3F:30:7F:75:9A:99:C1:BD:03:7E:46:D2:85:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7566FE5A8B0842BB3450 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:2c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:75:66:fe:5a:8b:08:42:bb:34:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=b2342cb2-5ef6-4d85-89ef-8ec5ed12de62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:01:83:2c:69:99:c1:bb:8e:ef:5c:5e:be: 22:b7:fe:19:da:53:11:8f:0f:ff:a2:fb:e4:75:b9: 9e:29:60:f0:17:46:d8:40:5e:f9:b3:7e:fd:9a:0e: 4b:28:11:ed:0b:89:4a:68:e9:1f:ad:ec:45:a9:c8: d8:d1:66:3e:91:99:ff:bd:a4:5f:b8:7d:8a:ae:34: d6:08:86:6a:91:f8:d4:0c:99:41:a0:7d:a7:1e:19: a4:e4:4c:68:97:90:5d:7c:7a:3b:26:1d:24:fe:b2: 51:91:2f:12:99:f8:fc:af:de:16:11:cf:07:54:30: 65:4f:16:45:91:e7:a5:c2:5d:ed:8f:60:31:11:2d: 2c:04:18:25:35:ce:04:3f:04:3e:ef:9d:cd:04:8f: 22:d4:69:45:19:83:6e:5b:18:72:62:c4:8f:aa:fe: 02:4f:7b:56:04:94:a9:cf:32:b8:14:93:f0:35:31: c1:eb:03:37:8b:73:4f:df:0b:0e:17:3c:9d:73:32: cd:35:4f:6a:0b:3b:8c:94:5f:c7:21:1d:df:4a:29: 3a:77:ed:de:cd:87:5a:6c:14:1a:78:f0:5d:33:c8: 07:d5:ed:e2:76:ca:8f:81:05:ae:61:d5:09:c4:2a: cd:c2:e7:f5:90:b9:5d:34:ce:7a:01:3a:12:cb:e0: ea:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:75:97:47:68:BC:3F:30:7F:75:9A:99:C1:BD:03:7E:46:D2:85:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:11:7f:d3:ec:71:45:e0:9f:0a:d1:3a:34:72:c1:1f:ba:e6: 5a:43:b1:cd:67:f4:f2:3b:68:7a:13:42:be:c2:4e:48:cd:9a: 16:53:62:32:4b:a8:93:a2:52:00:7b:eb:22:3f:73:f0:d0:fb: 22:d8:12:83:25:fa:e7:57:0f:80:a6:2c:e0:0b:ab:cc:a6:3e: 8a:13:2d:0a:0f:32:b4:77:ef:db:93:fe:aa:55:4b:0d:f0:7c: f6:e5:dc:45:ff:35:3b:c2:84:4b:aa:84:fb:ee:3c:2d:a1:91: 60:42:95:ec:3e:21:bc:a9:f3:74:9a:5c:8e:7d:bf:ae:72:16: 40:e9:8d:2e:3b:c7:0a:91:c4:c6:50:cd:ed:4d:3f:4e:84:26: 62:fb:ec:ba:5b:83:c6:89:7a:46:dd:55:dc:a3:ef:f5:03:1d: 37:09:b7:1a:e5:31:ca:95:10:fc:82:d6:26:5e:4c:7a:04:82: f4:57:86:36:2d:40:eb:26:56:ad:42:14:b0:3d:03:a2:fb:80: 4e:e9:34:19:89:49:5a:6c:c6:06:8b:63:79:e0:02:5e:80:56: 3a:8b:b6:5e:33:82:88:6c:90:d8:af:5e:d2:fc:83:75:af:a9: 2d:55:f6:44:b0:5d:55:a7:80:d1:af:35:ca:f9:7f:96:23:56: f5:bc:ba:12 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCnVm/lqLCEK7NFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YjIzNDJjYjItNWVmNi00ZDg1LTg5ZWYtOGVjNWVkMTJkZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi8BgyxpmcG7ju9cXr4it/4Z2lMRjw//ovvk dbmeKWDwF0bYQF75s379mg5LKBHtC4lKaOkfrexFqcjY0WY+kZn/vaRfuH2KrjTW CIZqkfjUDJlBoH2nHhmk5Exol5BdfHo7Jh0k/rJRkS8Smfj8r94WEc8HVDBlTxZF keelwl3tj2AxES0sBBglNc4EPwQ+753NBI8i1GlFGYNuWxhyYsSPqv4CT3tWBJSp zzK4FJPwNTHB6wM3i3NP3wsOFzydczLNNU9qCzuMlF/HIR3fSik6d+3ezYdabBQa ePBdM8gH1e3idsqPgQWuYdUJxCrNwuf1kLldNM56AToSy+DqDwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBR1l0dovD8wf3WamcG9A35G0oUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTg3MmJmNjUtM2M0NC0z N2Q1LTk3NGYtZDM1MmQzNzUzYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAORF/0+xxReCfCtE6NHLBH7rmWkOxzWf08jtoehNCvsJOSM2aFlNi Mkuok6JSAHvrIj9z8ND7ItgSgyX651cPgKYs4AurzKY+ihMtCg8ytHfv25P+qlVL DfB89uXcRf81O8KES6qE++48LaGRYEKV7D4hvKnzdJpcjn2/rnIWQOmNLjvHCpHE xlDN7U0/ToQmYvvsuluDxol6Rt1V3KPv9QMdNwm3GuUxypUQ/ILWJl5MegSC9FeG Ni1A6yZWrUIUsD0DovuATuk0GYlJWmzGBotjeeACXoBWOou2XjOCiGyQ2K9e0vyD da+pLVX2RLBdVaeA0a81yvl/liNW9by6Eg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:32 2026 by rpki-client