$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa File: 2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa (raw, json) Hash identifier: E/Gz65vctxc56J3bCc+ijwNlt0Stl3MFQILJ27dRiFk= Subject key identifier: F4:2D:F8:23:90:12:6C:27:91:D1:C4:E7:A5:DF:24:F6:55:A3:3D:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C50D184CDD11FC814EE9BAD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:84:cd:d1:1f:c8:14:ee:9b:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=abe8fe76-6681-430a-b835-cbf878d1865f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:b0:e7:65:74:3b:0c:33:b2:00:53:01:6b: 8c:32:bb:b8:6e:e8:b7:9a:43:1d:cf:51:3d:a2:9a: 23:c9:df:d4:b5:d8:d0:ee:87:47:2e:d4:27:bd:b4: 7e:58:da:66:43:8d:df:e5:16:a9:7b:f4:af:41:1c: cd:54:93:9f:f0:19:34:b0:56:1c:68:e0:17:9e:79: 90:a9:73:60:48:bb:d3:c0:6c:28:65:d7:29:2c:72: 1b:15:21:20:87:43:90:c1:4d:38:e5:96:ba:df:85: be:b8:61:34:09:04:01:7f:aa:ed:b0:31:26:26:9b: c5:85:77:88:7d:1a:ed:b0:77:5c:cd:95:6f:f6:7d: 08:2a:23:be:d7:3f:82:34:90:f3:f9:76:18:10:d6: 92:e3:1d:fc:43:6b:64:2b:41:86:1d:ba:64:64:1e: ec:ed:b0:52:9f:82:e8:d4:c4:44:e7:c0:ee:66:6e: 87:c9:11:1b:78:d7:66:90:59:71:7a:9b:c9:ff:09: 13:71:48:5c:bc:c1:a3:1a:c6:6f:ce:37:0b:39:3b: 86:b4:93:71:1e:80:7f:00:b3:76:b3:1e:e1:94:fe: ac:8f:af:36:2c:35:d5:59:42:30:6d:6a:10:e0:46: 4e:01:65:14:0d:11:18:42:f7:4f:2c:f8:b9:df:5a: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:F8:23:90:12:6C:27:91:D1:C4:E7:A5:DF:24:F6:55:A3:3D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:04:00:3a:a5:2b:15:66:ff:e2:70:b5:e1:5f:b6:c4:4b:98: 1a:7a:64:91:61:39:f6:fd:dd:d0:00:c5:7e:62:83:93:42:5a: 6c:93:db:b9:1f:e5:5f:bd:a8:80:19:66:69:ed:8d:6a:8d:dd: 5e:d7:af:0e:f4:df:65:2c:b5:3c:85:37:6f:fc:5b:ea:2b:33: f9:3a:e4:59:47:9b:c8:8f:c7:42:df:5e:b4:f6:5f:0f:f0:44: 2c:3f:d4:7d:ba:27:b7:34:da:51:ed:8d:25:2b:05:c1:7e:f7: 34:9c:82:46:7e:b9:9d:65:16:13:8d:ae:c8:f9:6a:0b:c8:77: 26:78:26:d9:9a:f2:87:4a:d1:68:59:da:d1:63:20:43:53:c8: b2:1e:b5:4a:fc:d8:ed:24:37:75:12:a5:2c:de:63:02:10:02: 21:c1:03:88:71:8f:17:f0:6d:36:2b:6a:ba:0d:e2:2d:80:26: d3:3a:d0:3a:4a:42:85:e4:56:61:f5:2f:0a:f7:6b:e2:cb:c5: eb:a3:e7:1b:74:76:3c:c0:65:74:45:a4:1c:89:27:e9:9d:5f: 0e:58:ef:ff:59:5e:f6:9b:51:6b:ce:fc:43:1f:71:90:77:07: 24:7d:e5:ec:cd:1b:98:20:ba:a2:6c:83:4f:15:b6:c1:d8:86: ee:53:07:d5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExQ0YTN0R/IFO6brYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YWJlOGZlNzYtNjY4MS00MzBhLWI4MzUtY2JmODc4ZDE4NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9iw52V0OwwzsgBTAWuMMru4bui3mkMdz1E9 opojyd/UtdjQ7odHLtQnvbR+WNpmQ43f5Rape/SvQRzNVJOf8Bk0sFYcaOAXnnmQ qXNgSLvTwGwoZdcpLHIbFSEgh0OQwU045Za634W+uGE0CQQBf6rtsDEmJpvFhXeI fRrtsHdczZVv9n0IKiO+1z+CNJDz+XYYENaS4x38Q2tkK0GGHbpkZB7s7bBSn4Lo 1MRE58DuZm6HyREbeNdmkFlxepvJ/wkTcUhcvMGjGsZvzjcLOTuGtJNxHoB/ALN2 sx7hlP6sj682LDXVWUIwbWoQ4EZOAWUUDREYQvdPLPi531qvgwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPQt+COQEmwnkdHE56XfJPZVoz2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmU5MGUwOWYtZjQ4Ny0z Y2UzLWI5YmQtNTI2M2M5MzhlMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjQQAOqUrFWb/4nC14V+2xEuYGnpkkWE59v3d0ADFfmKDk0JabJPb uR/lX72ogBlmae2Nao3dXtevDvTfZSy1PIU3b/xb6isz+TrkWUebyI/HQt9etPZf D/BELD/UfbontzTaUe2NJSsFwX73NJyCRn65nWUWE42uyPlqC8h3Jngm2Zryh0rR aFna0WMgQ1PIsh61SvzY7SQ3dRKlLN5jAhACIcEDiHGPF/BtNitqug3iLYAm0zrQ OkpCheRWYfUvCvdr4svF66PnG3R2PMBldEWkHIkn6Z1fDljv/1le9ptRa878Qx9x kHcHJH3l7M0bmCC6omyDTxW2wdiG7lMH1Q== -----END CERTIFICATE-----Generated at Thu Feb 26 06:33:25 2026 by rpki-client