$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa File: f56e512a-4f4f-3e4f-8537-0609c0041e23.roa (raw, json) Hash identifier: 53dYnJEL6ozj6KRhkVHeAnRyhCY1aeo4yXVK0z48z+8= Subject key identifier: 07:D8:74:1C:0B:4A:29:27:70:6A:6A:0D:4F:46:05:00:B9:0A:A7:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA3538FA30F285B30A840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2607:f690::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a3:53:8f:a3:0f:28:5b:30:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=34d86ce6-fdf2-4dc7-a73a-91d5d9c194d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:d2:97:c1:0b:9c:21:5d:33:db:af:15:f1: e5:2f:f1:3d:5b:9c:12:a6:d1:8d:06:b1:47:a4:1c: d3:be:f7:7e:6f:0c:b1:b3:bc:c9:77:fd:43:a1:f9: e7:11:10:c2:75:3b:53:79:1a:32:04:7e:1a:53:a5: dd:c6:71:6d:04:86:80:92:52:61:04:73:bc:51:dd: a0:cc:5c:f2:db:33:b5:5e:9e:ff:fb:b4:d8:6b:45: 7a:dd:dd:1e:70:cd:97:91:52:49:f4:36:50:06:a0: 98:3f:aa:d7:14:f6:25:af:36:13:3a:57:1f:94:97: de:2b:66:ac:b6:54:53:07:e1:2e:6b:72:6b:e8:6f: ce:43:e3:e2:59:35:22:36:7f:0e:89:39:c0:79:b2: 3a:ab:22:78:6e:49:9a:99:92:5b:d2:82:60:58:9e: f8:6e:d4:f0:f3:14:ef:d4:a5:3b:82:53:d7:1f:d5: 1b:93:71:0e:64:13:97:8e:89:55:ff:3c:1f:43:b2: 25:68:d9:09:31:af:d4:20:db:80:af:56:d1:8c:0a: ae:12:b4:11:5c:fa:49:4f:9d:eb:5f:cf:9b:69:97: df:44:1e:3f:dc:80:eb:da:22:69:1c:ff:e3:3d:e8: 1e:4f:78:63:22:6b:07:5d:36:01:b4:58:03:d1:91: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D8:74:1C:0B:4A:29:27:70:6A:6A:0D:4F:46:05:00:B9:0A:A7:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f690::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:bf:ce:d4:22:1e:61:6b:d0:98:f7:53:29:bb:27:9b:14:d7: b6:7c:fb:9a:cd:6c:94:85:d2:0c:a8:40:11:75:1b:01:68:25: 6c:00:c9:91:47:02:ca:38:70:28:42:23:a5:63:78:b1:b9:c2: bc:14:f1:61:6a:66:1e:ce:46:49:e9:c7:81:33:7c:61:29:74: 49:30:1c:a8:47:ea:03:f7:12:58:36:52:c4:6c:a2:50:4b:f5: 82:75:1f:4e:97:3b:a6:4a:4a:a1:6c:36:5a:4b:e0:0d:6b:95: ba:b8:22:0c:0b:12:d6:ed:93:3d:bc:51:44:85:44:86:04:9b: 58:0d:08:a3:6a:62:f8:5e:3f:43:2a:3a:67:93:e6:03:e5:8b: 92:36:9e:ab:66:bb:b2:15:6c:cd:ea:c5:cb:71:99:57:7b:c5: f6:69:a5:05:06:01:a3:c4:dd:ce:e2:86:f1:89:e6:ad:98:92: c4:a9:9d:f2:7a:31:a9:a6:40:e6:56:70:7f:43:50:43:af:fa: 99:25:9a:2a:b8:f9:41:b7:2c:93:fb:64:7f:07:2f:79:ba:30: 81:ee:b8:ee:41:8a:88:79:53:93:6b:77:24:41:18:27:ea:bd: 31:ea:ed:3c:7a:b8:64:2e:3c:09:d9:f3:f9:ce:f0:b4:19:83: b1:4e:49:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0wCqNTj6MPKFswqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzRkODZjZTYtZmRmMi00ZGM3LWE3M2EtOTFkNWQ5YzE5NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZbSl8ELnCFdM9uvFfHlL/E9W5wSptGNBrFH pBzTvvd+bwyxs7zJd/1DofnnERDCdTtTeRoyBH4aU6XdxnFtBIaAklJhBHO8Ud2g zFzy2zO1Xp7/+7TYa0V63d0ecM2XkVJJ9DZQBqCYP6rXFPYlrzYTOlcflJfeK2as tlRTB+Eua3Jr6G/OQ+PiWTUiNn8OiTnAebI6qyJ4bkmamZJb0oJgWJ74btTw8xTv 1KU7glPXH9Ubk3EOZBOXjolV/zwfQ7IlaNkJMa/UINuAr1bRjAquErQRXPpJT53r X8+baZffRB4/3IDr2iJpHP/jPegeT3hjImsHXTYBtFgD0ZE/kwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAfYdBwLSikncGpqDU9GBQC5CqdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjU2ZTUxMmEtNGY0Zi0z ZTRmLTg1MzctMDYwOWMwMDQxZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf2kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB2v87UIh5ha9CY91MpuyebFNe2fPuazWyUhdIMqEARdRsBaCVsAMmR RwLKOHAoQiOlY3ixucK8FPFhamYezkZJ6ceBM3xhKXRJMByoR+oD9xJYNlLEbKJQ S/WCdR9OlzumSkqhbDZaS+ANa5W6uCIMCxLW7ZM9vFFEhUSGBJtYDQijamL4Xj9D Kjpnk+YD5YuSNp6rZruyFWzN6sXLcZlXe8X2aaUFBgGjxN3O4obxieatmJLEqZ3y ejGppkDmVnB/Q1BDr/qZJZoquPlBtyyT+2R/By95ujCB7rjuQYqIeVOTa3ckQRgn 6r0x6u08erhkLjwJ2fP5zvC0GYOxTkkN -----END CERTIFICATE-----Generated at Thu Mar 26 07:42:53 2026 by rpki-client