$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/efa345d2-280a-3922-bb17-4fdd922e06cb.roa File: efa345d2-280a-3922-bb17-4fdd922e06cb.roa (raw, json) Hash identifier: ya2r2JE7WLCelIMtaNni6tA5ScLhAxN6gsvYZ6+i3C4= Subject key identifier: 66:88:18:3A:C3:C1:C1:74:48:B0:02:93:3E:92:08:4A:DC:B5:0A:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7423F20B83913C3BE700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/efa345d2-280a-3922-bb17-4fdd922e06cb.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:74:23:f2:0b:83:91:3c:3b:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d41cec14-83d8-4f2f-ae7f-712b5d969e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:f5:83:5c:82:eb:05:af:2c:1c:04:e7:16: 2a:0d:b8:df:7c:34:8d:cb:84:54:7e:6d:3d:e2:f2: 5c:6b:c1:b0:d3:07:18:65:cc:d9:27:7b:8e:1f:ee: ee:c5:b5:bd:f3:57:56:94:30:48:f1:ef:99:36:95: 1b:29:33:b9:dd:d2:dd:1a:21:72:f1:d4:46:08:39: 34:c5:6d:23:8f:ea:ef:72:bf:ab:b8:cd:0f:a3:14: 6d:5e:8e:87:25:73:31:35:cf:a8:70:c1:dd:5e:37: 40:a0:1c:5b:85:77:52:9b:52:c3:96:27:ab:3a:ed: f2:f1:7d:1b:73:b4:d4:88:17:4c:0b:6e:51:2c:3d: cc:73:73:71:fe:f8:48:34:a6:78:22:7d:d7:46:47: fb:83:d7:fc:56:dc:79:2d:7c:fe:99:86:d9:3b:24: 4b:00:51:80:13:44:a3:50:84:31:8e:e6:ca:e2:61: 66:14:7f:35:08:72:37:b3:e7:58:6e:30:78:06:17: bb:15:5a:8a:88:0f:03:83:f2:bd:ed:48:44:5f:37: ea:d7:8f:b9:b2:6d:73:93:d5:bc:23:64:52:35:14: e5:11:26:3e:54:4f:39:56:16:46:16:39:64:bc:45: d5:14:c1:c1:5c:6a:ed:f2:c2:1f:96:52:fd:f6:03: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:88:18:3A:C3:C1:C1:74:48:B0:02:93:3E:92:08:4A:DC:B5:0A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/efa345d2-280a-3922-bb17-4fdd922e06cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:1a:a9:90:67:6a:b0:51:2b:a4:9f:81:18:65:19:ee:88:2b: d0:c9:cd:e8:ac:e4:3f:e8:a7:ae:f7:65:37:61:7d:9d:f1:fd: 08:38:83:8a:68:9b:06:7b:86:6e:2e:16:c4:6b:38:28:87:90: ab:61:57:7b:6f:65:f9:df:3f:32:ac:54:62:c8:d7:2e:55:b2: 9a:a1:b1:b5:a6:dd:61:07:1a:aa:81:ef:1b:75:e7:f7:b3:f5: 56:ba:56:5a:a0:4b:50:d3:36:a4:41:b6:f2:32:74:9d:41:0f: 93:16:0a:0b:7f:c2:33:ee:e6:76:e7:7c:49:53:89:cb:b9:26: 63:3a:c4:b5:0a:49:19:21:9c:2b:7f:05:f3:0b:58:84:28:b6: 74:3f:16:79:00:9f:38:47:50:3c:12:d2:f5:95:ca:ea:eb:d1: 86:03:8f:a3:bc:d9:40:d1:85:4f:d1:ed:f1:18:cc:c5:aa:31: 74:c2:f7:65:2b:0f:61:03:6d:b0:36:1c:1d:f8:23:76:b9:6f: 1f:01:a8:26:6a:8c:32:de:6f:19:e1:b6:49:23:b0:b6:f7:f0: 2f:87:a2:42:1f:2a:6a:50:46:b2:06:91:6e:20:bf:cc:7e:d9: 07:50:11:92:73:88:c3:f6:97:ef:e3:50:98:7b:07:fe:c5:dd: e6:87:ac:48 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCnQj8guDkTw75wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDQxY2VjMTQtODNkOC00ZjJmLWFlN2YtNzEyYjVkOTY5ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6P1g1yC6wWvLBwE5xYqDbjffDSNy4RUfm09 4vJca8Gw0wcYZczZJ3uOH+7uxbW981dWlDBI8e+ZNpUbKTO53dLdGiFy8dRGCDk0 xW0jj+rvcr+ruM0PoxRtXo6HJXMxNc+ocMHdXjdAoBxbhXdSm1LDlierOu3y8X0b c7TUiBdMC25RLD3Mc3Nx/vhINKZ4In3XRkf7g9f8Vtx5LXz+mYbZOyRLAFGAE0Sj UIQxjubK4mFmFH81CHI3s+dYbjB4Bhe7FVqKiA8Dg/K97UhEXzfq14+5sm1zk9W8 I2RSNRTlESY+VE85VhZGFjlkvEXVFMHBXGrt8sIfllL99gNT9QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGaIGDrDwcF0SLACkz6SCErctQr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWZhMzQ1ZDItMjgwYS0z OTIyLWJiMTctNGZkZDkyMmUwNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAThqpkGdqsFErpJ+BGGUZ7ogr0MnN6KzkP+inrvdlN2F9nfH9CDiD imibBnuGbi4WxGs4KIeQq2FXe29l+d8/MqxUYsjXLlWymqGxtabdYQcaqoHvG3Xn 97P1VrpWWqBLUNM2pEG28jJ0nUEPkxYKC3/CM+7mdud8SVOJy7kmYzrEtQpJGSGc K38F8wtYhCi2dD8WeQCfOEdQPBLS9ZXK6uvRhgOPo7zZQNGFT9Ht8RjMxaoxdML3 ZSsPYQNtsDYcHfgjdrlvHwGoJmqMMt5vGeG2SSOwtvfwL4eiQh8qalBGsgaRbiC/ zH7ZB1ARknOIw/aX7+NQmHsH/sXd5oesSA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:24:25 2026 by rpki-client