$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb51557-45e4-39cc-bb83-55f34037e45c.roa File: feb51557-45e4-39cc-bb83-55f34037e45c.roa (raw, json) Hash identifier: I7DOL6bEPFps/feHL/DpkHscepNwYXAMtP58+kFXZiM= Subject key identifier: DC:97:9B:1E:5E:BC:79:A2:43:9E:24:7E:51:A7:64:35:80:58:46:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6F0C3007B5426E18A680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb51557-45e4-39cc-bb83-55f34037e45c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 2001:4840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6f:0c:30:07:b5:42:6e:18:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=96e92bb5-43a2-4230-8435-f6e0e5f7db73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:92:6f:40:e9:86:f6:fb:2a:3a:98:ba:30:31: 37:33:36:bd:90:6f:54:9e:73:cd:bd:9e:c5:a3:e2: 03:b2:1d:ae:8c:93:7a:f9:83:0e:63:c9:5e:c7:88: 2c:67:ac:e6:43:e4:e5:c9:0b:69:0e:d6:ae:83:12: ca:8b:15:32:4d:8c:9f:2d:20:f2:d2:7f:92:bf:21: a5:5c:6b:fc:0f:81:cc:74:31:f5:53:cf:70:62:f7: fd:45:9c:87:69:5c:79:a9:83:0d:5b:e2:58:fa:91: a3:bc:3d:77:6e:bf:e6:03:b5:d0:16:8b:4f:6c:fd: b6:55:80:0c:78:da:84:2b:48:01:f6:08:bc:1c:9c: 92:a8:ba:db:f5:e1:6a:d1:32:b9:c7:7f:4a:4e:e9: 19:37:8c:64:33:9c:b8:a7:e6:5b:ab:5e:ac:96:94: c6:08:d5:a1:82:9d:b3:4b:d7:43:92:b4:f3:f3:78: f3:50:d0:eb:8f:bc:72:6c:d7:46:fc:ea:ce:ac:7e: 54:95:ca:f4:15:27:0f:cb:32:f0:11:51:91:31:23: d9:76:93:e2:f5:37:bf:c0:b6:7a:8b:01:87:ec:6d: c5:72:b2:e5:70:78:18:92:9f:e7:0e:7c:ae:e0:c3: 08:f1:61:e6:fb:ab:85:cf:77:37:48:2d:c2:55:6e: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:97:9B:1E:5E:BC:79:A2:43:9E:24:7E:51:A7:64:35:80:58:46:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb51557-45e4-39cc-bb83-55f34037e45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b5:a0:f5:c2:8b:04:bc:a3:f0:5d:34:d7:22:05:6e:f6:2b: 0d:e1:7c:91:39:1f:df:e4:3c:6b:79:e3:dc:1f:ed:27:67:73: 2d:24:62:f6:f8:e1:78:d7:ee:59:e6:a0:21:a8:31:d5:ac:5f: 69:48:04:6e:7f:1f:6a:54:1d:b9:10:83:93:21:22:5c:d1:30: 55:8e:bb:d9:c0:78:54:f7:77:3f:cd:a5:d1:13:04:70:af:e6: 2d:3c:80:02:af:de:cb:46:a5:3f:72:25:96:98:d5:61:f7:b2: bf:50:f9:6d:9f:29:32:d9:21:4c:42:c9:0f:04:70:cb:42:46: 62:e0:d2:9f:83:ff:50:95:fb:8a:cc:3e:f3:34:0e:0f:ae:32: a4:ab:90:cf:d8:d1:29:81:dc:22:30:c4:e9:98:71:3e:2e:a6: d2:41:1e:a3:e6:c0:ac:44:83:df:8d:33:81:e9:6a:0f:82:cf: 28:37:a8:af:38:2d:aa:df:8e:ac:f6:7d:56:68:d6:0d:78:86: b7:e2:d8:ca:50:c6:88:86:88:d6:c0:47:95:87:54:c6:7f:e1: c4:6b:7a:86:d1:53:2f:b6:07:ee:0d:ee:52:33:e3:aa:49:5d: 9f:7b:20:58:f2:66:13:68:6b:65:43:fb:f2:46:db:dd:26:e0: eb:36:18:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0wCm8MMAe1Qm4YpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTZlOTJiYjUtNDNhMi00MjMwLTg0MzUtZjZlMGU1ZjdkYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JJvQOmG9vsqOpi6MDE3Mza9kG9UnnPNvZ7F o+IDsh2ujJN6+YMOY8lex4gsZ6zmQ+TlyQtpDtaugxLKixUyTYyfLSDy0n+SvyGl XGv8D4HMdDH1U89wYvf9RZyHaVx5qYMNW+JY+pGjvD13br/mA7XQFotPbP22VYAM eNqEK0gB9gi8HJySqLrb9eFq0TK5x39KTukZN4xkM5y4p+Zbq16slpTGCNWhgp2z S9dDkrTz83jzUNDrj7xybNdG/OrOrH5Ulcr0FScPyzLwEVGRMSPZdpPi9Te/wLZ6 iwGH7G3FcrLlcHgYkp/nDnyu4MMI8WHm+6uFz3c3SC3CVW5RzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNyXmx5evHmiQ54kflGnZDWAWEaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmViNTE1NTctNDVlNC0z OWNjLWJiODMtNTVmMzQwMzdlNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARtaD1wosEvKPwXTTXIgVu9isN4XyROR/f5DxreePcH+0nZ3MtJGL2 +OF41+5Z5qAhqDHVrF9pSARufx9qVB25EIOTISJc0TBVjrvZwHhU93c/zaXREwRw r+YtPIACr97LRqU/ciWWmNVh97K/UPltnyky2SFMQskPBHDLQkZi4NKfg/9QlfuK zD7zNA4PrjKkq5DP2NEpgdwiMMTpmHE+LqbSQR6j5sCsRIPfjTOB6WoPgs8oN6iv OC2q346s9n1WaNYNeIa34tjKUMaIhojWwEeVh1TGf+HEa3qG0VMvtgfuDe5SM+Oq SV2feyBY8mYTaGtlQ/vyRtvdJuDrNhi5 -----END CERTIFICATE-----Generated at Thu Mar 26 07:03:57 2026 by rpki-client