$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f65324dc-ed6b-3265-a96a-9e1e83e91357.roa File: f65324dc-ed6b-3265-a96a-9e1e83e91357.roa (raw, json) Hash identifier: Acq7ACZsRnCazSpAjUbZ5EsMI/HbVZef8m90xgEs67k= Subject key identifier: 25:D9:22:4C:0A:C1:39:0A:0E:E9:36:F2:2B:1E:94:AB:1D:85:A8:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A749D5856E7F89D634E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f65324dc-ed6b-3265-a96a-9e1e83e91357.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:1600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:74:9d:58:56:e7:f8:9d:63:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=401c024b-18f4-4046-926e-d7ac46491ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:36:c7:1b:11:89:79:d2:67:db:8a:95:7f:0e: f1:27:c3:8f:6b:7a:07:ba:98:92:60:7e:16:44:86: 19:0e:14:7e:c6:b5:1e:23:91:35:84:45:9f:5f:80: 5e:63:3f:97:57:71:5c:7c:cf:50:c8:30:12:6d:96: 58:5a:ca:a9:f4:a8:c0:bd:5d:c1:db:61:74:97:7e: 63:5b:e8:02:67:82:66:f9:22:f3:55:fc:c0:4a:3e: 80:52:51:fb:de:de:a5:07:e6:84:1e:08:df:ab:8c: b7:a8:bd:f1:44:a0:33:8d:95:46:ce:71:66:e0:6f: 14:25:46:2b:19:20:9f:a8:6f:9e:ce:76:d7:3e:ec: e1:0d:a7:e7:06:4f:48:67:91:2b:6c:d9:b0:f5:9c: e9:0a:df:09:d8:fc:35:fb:74:50:83:a7:20:11:4c: 97:83:46:33:71:39:37:88:ea:5a:6d:ca:4f:8b:80: 87:b2:4f:d7:cc:cb:e1:68:2c:ac:29:d2:0a:f2:86: 8d:4d:43:79:e7:cd:ca:e0:58:6b:b0:38:34:34:14: e6:80:4b:42:34:28:fb:33:fd:39:39:5b:ff:7c:ef: 9a:2e:12:17:15:ec:b2:63:31:00:c9:a6:14:5e:a5: 0c:8d:01:5a:29:5b:9d:25:bf:f3:a9:24:c1:72:ba: d7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D9:22:4C:0A:C1:39:0A:0E:E9:36:F2:2B:1E:94:AB:1D:85:A8:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f65324dc-ed6b-3265-a96a-9e1e83e91357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:da:d2:fa:a3:d7:5d:29:2b:a7:a1:be:6a:75:02:c3:8e:07: f5:82:e3:be:5d:5d:02:ac:b6:9f:c4:19:92:ac:b7:18:82:ca: 9c:cd:e0:21:a2:c0:f1:b2:16:21:9a:07:10:c0:ef:8b:17:16: d0:d2:00:6a:61:f3:95:ad:8d:11:88:48:55:8f:12:68:90:4f: 33:aa:97:dd:08:3e:a8:3c:ed:18:a0:75:1e:58:74:08:b7:d8: 9f:6b:e3:a9:a4:32:2e:0b:b6:1f:16:c2:fb:5a:66:95:ea:d2: b3:a7:0b:f9:0f:c4:73:1c:4f:2c:a6:04:61:b3:62:fb:83:0a: 62:68:34:f3:d6:32:2b:cb:0a:f7:46:e2:2a:e3:4a:8e:7f:1b: 20:bb:6d:84:4d:98:bd:35:8f:0c:38:fa:cc:9e:fd:b3:11:34: 33:35:11:5e:78:7d:1b:34:f2:ab:6b:e4:86:da:5e:1f:44:57: c3:60:42:1b:42:21:c1:59:95:f9:ac:1a:23:87:53:b7:82:f0: a3:dd:38:31:5b:d3:56:6c:c6:2a:12:46:73:c4:0a:ec:ef:65: 81:f7:c1:7b:d6:06:82:fb:0e:ed:e6:45:08:c2:b1:ea:32:e6: 6a:e0:da:32:23:c0:9d:47:04:91:08:ee:f6:4b:0e:a4:38:ca: d2:88:58:dd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCnSdWFbn+J1jTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDAxYzAyNGItMThmNC00MDQ2LTkyNmUtZDdhYzQ2NDkxYWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzbHGxGJedJn24qVfw7xJ8OPa3oHupiSYH4W RIYZDhR+xrUeI5E1hEWfX4BeYz+XV3FcfM9QyDASbZZYWsqp9KjAvV3B22F0l35j W+gCZ4Jm+SLzVfzASj6AUlH73t6lB+aEHgjfq4y3qL3xRKAzjZVGznFm4G8UJUYr GSCfqG+eznbXPuzhDafnBk9IZ5ErbNmw9ZzpCt8J2Pw1+3RQg6cgEUyXg0YzcTk3 iOpabcpPi4CHsk/XzMvhaCysKdIK8oaNTUN5583K4FhrsDg0NBTmgEtCNCj7M/05 OVv/fO+aLhIXFeyyYzEAyaYUXqUMjQFaKVudJb/zqSTBcrrXCQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCXZIkwKwTkKDuk28iselKsdhaiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY1MzI0ZGMtZWQ2Yi0z MjY1LWE5NmEtOWUxZTgzZTkxMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEtrS+qPXXSkrp6G+anUCw44H9YLjvl1dAqy2n8QZkqy3GILKnM3g IaLA8bIWIZoHEMDvixcW0NIAamHzla2NEYhIVY8SaJBPM6qX3Qg+qDztGKB1Hlh0 CLfYn2vjqaQyLgu2HxbC+1pmlerSs6cL+Q/EcxxPLKYEYbNi+4MKYmg089YyK8sK 90biKuNKjn8bILtthE2YvTWPDDj6zJ79sxE0MzURXnh9GzTyq2vkhtpeH0RXw2BC G0IhwVmV+awaI4dTt4Lwo904MVvTVmzGKhJGc8QK7O9lgffBe9YGgvsO7eZFCMKx 6jLmauDaMiPAnUcEkQju9ksOpDjK0ohY3Q== -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:45 2026 by rpki-client