$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa File: 3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa (raw, json) Hash identifier: DK0OUrL0aYpYOHc7UBl8PfoHEGXIv310ZHHucpoAPjI= Subject key identifier: 6B:1B:A6:47:7F:51:36:6E:3F:2D:6D:51:CE:F6:82:D8:20:3A:61:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7A053E17756BA5CA639304C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 2604:cb00:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:3e:17:75:6b:a5:ca:63:93:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=0e660c55-c08c-4f14-9568-b1c85851c257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:d7:0c:92:bf:3e:60:75:c1:cc:0c:03:a1: 4d:5f:f1:f9:56:63:fd:e2:c6:f4:bb:a2:29:2b:cc: 62:2f:07:c3:b9:8b:30:62:93:94:ea:ff:23:39:b0: 0b:42:8e:dc:1f:80:38:73:21:cd:0f:41:02:05:4a: e6:ed:ac:9d:3d:e1:73:11:04:61:8d:48:65:cf:f8: 27:98:99:36:4c:97:c9:b2:2a:3c:39:7a:3e:2c:81: 4c:56:02:a6:08:5a:6b:b8:92:46:e7:38:58:94:c2: f6:57:0d:1e:15:d0:75:27:a9:a0:b8:d1:26:62:31: 68:0c:5e:b9:e0:cb:6c:67:26:e5:55:0f:9f:e2:55: b0:19:e2:65:f0:4d:2a:33:74:59:bf:58:a4:bd:e9: 21:d0:47:3f:77:5d:8a:f6:d3:62:ce:f1:ef:31:db: d6:1a:1e:c2:cd:30:6a:0e:5a:97:2b:fa:35:a5:39: 0b:b5:fb:85:90:c5:ab:a6:b6:3e:50:8b:23:e6:75: 57:12:73:39:f1:1c:58:2d:78:97:e7:be:d8:d7:1b: 6b:84:21:29:90:70:3e:69:e5:2c:8c:82:74:29:68: 29:8d:9e:2b:ea:5f:de:a7:03:09:56:5c:4f:36:0a: 7e:5a:5b:b8:f1:b1:6d:7c:a5:1d:19:05:bf:79:04: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1B:A6:47:7F:51:36:6E:3F:2D:6D:51:CE:F6:82:D8:20:3A:61:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8f:f6:45:f6:9a:fc:ee:5a:67:1b:76:d9:b2:78:ca:90:3e: e4:6d:8d:f4:e5:34:75:b8:70:f3:97:c7:63:5d:99:57:da:d4: 60:e5:8b:6d:5b:26:e1:be:8c:6b:0b:f1:c1:a8:39:fc:bc:e6: 54:fb:e7:c4:6a:f0:cc:13:17:f3:2a:eb:12:7f:a1:42:13:18: 59:ed:ff:54:c5:34:b8:e5:2c:e1:1a:4d:38:e5:e0:db:1c:b7: f3:2a:8b:df:94:26:f5:6a:67:ab:45:48:1d:da:7c:bc:25:a8: 12:7f:e2:1a:41:2e:ad:a3:b7:ce:cc:69:6a:d6:12:5b:77:65: bd:25:4a:c2:26:3a:0c:fc:3d:00:41:f9:07:d9:4b:33:89:0d: d7:a9:0b:68:e6:cc:cc:95:41:92:7a:24:16:3a:f3:68:71:5f: 0f:51:62:13:67:c1:c4:c9:79:8a:75:6a:e3:28:fc:59:a5:c3: 90:cd:50:4c:83:bf:2c:6c:31:a0:40:13:28:e4:3e:19:52:cb: 6b:e2:85:7f:dc:14:11:35:4f:f2:1b:f6:58:7b:67:f9:e5:c3: f3:02:48:ca:44:ff:b8:c4:ea:6c:50:60:40:f3:a0:2c:11:f5: b5:80:a4:e4:86:04:aa:dd:af:eb:fe:5b:36:e2:a6:9e:3d:f3: 57:0c:62:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE16BT4XdWulymOTBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MGU2NjBjNTUtYzA4Yy00ZjE0LTk1NjgtYjFjODU4NTFjMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiarXDJK/PmB1wcwMA6FNX/H5VmP94sb0u6Ip K8xiLwfDuYswYpOU6v8jObALQo7cH4A4cyHND0ECBUrm7aydPeFzEQRhjUhlz/gn mJk2TJfJsio8OXo+LIFMVgKmCFpruJJG5zhYlML2Vw0eFdB1J6mguNEmYjFoDF65 4MtsZyblVQ+f4lWwGeJl8E0qM3RZv1ikvekh0Ec/d12K9tNizvHvMdvWGh7CzTBq DlqXK/o1pTkLtfuFkMWrprY+UIsj5nVXEnM58RxYLXiX577Y1xtrhCEpkHA+aeUs jIJ0KWgpjZ4r6l/epwMJVlxPNgp+Wlu48bFtfKUdGQW/eQR/FwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGsbpkd/UTZuPy1tUc72gtggOmHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2I3NWQ5YzEtNTUzZi0z MTliLWJhNGEtZjE1MzY4YmFjYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6P9kX2mvzuWmcbdtmyeMqQPuRtjfTlNHW4cPOXx2NdmVfa1GDl i21bJuG+jGsL8cGoOfy85lT758Rq8MwTF/Mq6xJ/oUITGFnt/1TFNLjlLOEaTTjl 4Nsct/Mqi9+UJvVqZ6tFSB3afLwlqBJ/4hpBLq2jt87MaWrWElt3Zb0lSsImOgz8 PQBB+QfZSzOJDdepC2jmzMyVQZJ6JBY682hxXw9RYhNnwcTJeYp1auMo/Fmlw5DN UEyDvyxsMaBAEyjkPhlSy2vihX/cFBE1T/Ib9lh7Z/nlw/MCSMpE/7jE6mxQYEDz oCwR9bWApOSGBKrdr+v+Wzbipp4981cMYlU= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:22 2026 by rpki-client