$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa File: f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa (raw, json) Hash identifier: YkhiTdMQTc86LxFA7ILGHMLYHt0aBkNA+jX4zq42Tpw= Subject key identifier: A9:B7:9C:88:37:15:32:C7:E5:29:6C:2C:42:25:1B:D4:2D:6C:3A:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A720D621108C401D2E378 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:72:0d:62:11:08:c4:01:d2:e3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=321780d6-10d9-4eef-ad43-dbac5674d2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:57:cc:4e:ef:c6:66:62:80:60:23:b0:c4:bf: 90:cf:95:f8:97:67:83:3a:d4:92:75:22:36:f1:cc: 1d:7e:bd:79:f0:b6:02:f0:81:da:69:fc:b0:41:ec: a6:14:be:6a:be:5d:e0:82:6f:c0:9e:6c:d2:d5:f8: 06:f3:1c:89:cc:b7:f3:d1:91:86:1e:41:a6:a2:94: 4e:d9:44:b0:42:50:14:3c:14:d5:53:0c:2f:12:91: 49:a8:75:41:a5:48:07:c5:78:71:85:3a:09:77:06: 1a:57:74:07:f9:4e:cc:ef:4e:de:14:89:4c:26:e3: 12:57:40:f6:87:c3:62:81:79:fe:11:23:eb:07:23: 80:9d:3b:07:29:78:6f:9c:47:2a:06:62:10:ea:7b: b2:0c:34:a9:6a:e7:ec:9d:57:52:43:7b:c7:21:82: 0c:4a:f8:26:ef:87:34:43:a1:9b:34:c5:b6:ad:55: 5d:fa:31:a0:7d:2e:e9:0e:c1:8d:21:79:4d:8d:4b: e3:33:59:89:de:40:8f:93:b3:34:c3:a4:39:7b:86: 99:76:95:ac:46:7a:93:66:d9:3c:2b:37:51:e9:47: 82:43:4b:6a:7e:a5:f8:c4:78:bf:43:1d:9a:db:46: ad:a4:58:d4:f7:d9:3d:fc:d3:45:d3:f8:5f:42:4a: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B7:9C:88:37:15:32:C7:E5:29:6C:2C:42:25:1B:D4:2D:6C:3A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:96:92:18:4d:ea:b6:13:11:1e:09:c6:31:25:9a:4f:30:21: bc:71:8a:3d:d5:a6:14:25:14:16:31:d9:c9:8e:3f:e4:be:b4: 5a:cc:59:9a:c9:ea:16:1e:a5:7f:2f:c6:9e:0e:9d:a1:bd:92: 27:3d:cb:b8:71:62:3a:da:09:2f:59:cc:af:e0:11:81:15:ee: 7f:50:4e:38:3f:f4:f0:23:43:53:f8:74:9a:8e:44:93:1c:e1: 38:3e:55:38:5c:81:ab:ea:c2:77:f0:ce:6f:55:11:90:a8:37: df:f9:ef:a0:10:66:42:af:5b:c0:b2:11:b3:6b:13:e4:86:d2: f3:3f:a4:da:34:d6:04:dd:df:b4:bb:8e:94:99:aa:8d:f6:5c: cf:58:00:64:6b:08:59:63:df:4a:55:ab:01:bb:a9:a0:71:5f: 07:fb:66:93:2b:fe:7c:3a:11:9c:d7:e2:92:23:21:ec:54:38: 32:0e:c0:ac:3d:f3:2f:72:fa:07:4e:a1:28:78:d8:8c:1d:ad: 73:e7:b9:83:4f:ad:4b:67:8d:e1:9d:34:0c:df:a4:1b:87:9c: a9:9f:6f:aa:64:94:a4:20:94:68:d2:f7:91:94:3b:38:71:c7: 12:a6:bc:2c:49:1a:74:f1:7b:38:93:1d:a1:58:51:4c:dc:83: f7:0a:44:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCnINYhEIxAHS43gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzIxNzgwZDYtMTBkOS00ZWVmLWFkNDMtZGJhYzU2NzRkMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VfMTu/GZmKAYCOwxL+Qz5X4l2eDOtSSdSI2 8cwdfr158LYC8IHaafywQeymFL5qvl3ggm/AnmzS1fgG8xyJzLfz0ZGGHkGmopRO 2USwQlAUPBTVUwwvEpFJqHVBpUgHxXhxhToJdwYaV3QH+U7M707eFIlMJuMSV0D2 h8NigXn+ESPrByOAnTsHKXhvnEcqBmIQ6nuyDDSpaufsnVdSQ3vHIYIMSvgm74c0 Q6GbNMW2rVVd+jGgfS7pDsGNIXlNjUvjM1mJ3kCPk7M0w6Q5e4aZdpWsRnqTZtk8 KzdR6UeCQ0tqfqX4xHi/Qx2a20atpFjU99k9/NNF0/hfQkqTPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKm3nIg3FTLH5SlsLEIlG9QtbDppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjhlYjRlYTMtNGJkMi0z MGYxLWE1OGEtMjI3NGM5NTFhNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACWWkhhN6rYTER4JxjElmk8wIbxxij3VphQlFBYx2cmOP+S+tFrM WZrJ6hYepX8vxp4OnaG9kic9y7hxYjraCS9ZzK/gEYEV7n9QTjg/9PAjQ1P4dJqO RJMc4Tg+VThcgavqwnfwzm9VEZCoN9/576AQZkKvW8CyEbNrE+SG0vM/pNo01gTd 37S7jpSZqo32XM9YAGRrCFlj30pVqwG7qaBxXwf7ZpMr/nw6EZzX4pIjIexUODIO wKw98y9y+gdOoSh42IwdrXPnuYNPrUtnjeGdNAzfpBuHnKmfb6pklKQglGjS95GU OzhxxxKmvCxJGnTxeziTHaFYUUzcg/cKRMs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:04:33 2026 by rpki-client