$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa File: 8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa (raw, json) Hash identifier: lpCRGTJHETPy81FxVFzeywhpAXWTgwXncdVPwoFMYMw= Subject key identifier: FC:BE:CA:42:0B:2D:36:48:6E:01:74:D3:64:77:A6:ED:C9:11:60:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D67DFD23F79737CDF7FA42000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 7029 IP address blocks: 2604:cb00:3b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d2:3f:79:73:7c:df:7f:a4:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=1737db7d-da08-4880-b683-e666b05d4ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:eb:7b:cb:90:46:0e:dd:0a:80:f7:5b:bb: 1c:45:c2:44:fa:1f:88:5c:97:3e:6e:6b:87:a6:88: 08:24:b0:f4:85:55:f3:83:ef:91:bf:cc:bc:5e:32: 75:84:ad:5c:c3:91:d4:11:76:00:ef:05:2e:19:84: e4:e2:3f:bb:af:40:77:33:21:5f:88:13:a1:4b:1d: ed:ca:62:d1:05:a4:c2:8f:68:ae:5c:07:fd:01:46: 9f:1b:15:a7:3e:6d:ad:53:54:fa:21:a0:cd:31:8f: 04:09:57:2f:35:f1:97:39:b0:1b:e6:40:77:cb:c0: b0:f2:03:be:c3:e8:43:61:bf:44:3c:e3:fa:0a:2c: 18:09:8f:c2:1e:86:d0:ad:2e:9b:d4:84:16:73:05: 11:7a:c8:7f:96:59:29:ef:8f:85:44:4f:d4:fa:70: d2:e5:83:a1:d5:3b:b5:99:49:12:b3:02:56:6c:d2: 94:35:6f:c0:bb:23:30:a5:7d:3b:08:2d:91:e2:07: 38:d4:30:04:08:cc:9d:3d:07:80:45:1e:70:30:cc: 91:4d:3f:d2:5a:3e:c9:fa:5d:ef:35:db:b3:c9:0d: 4d:e9:a2:bb:0a:90:2d:dc:5c:fc:33:b8:cd:a6:c2: d1:1e:c0:0c:40:a4:9f:db:07:47:4e:32:ef:d4:89: 7e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BE:CA:42:0B:2D:36:48:6E:01:74:D3:64:77:A6:ED:C9:11:60:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:30:66:5a:44:bc:a0:e5:2a:b8:9e:00:a0:36:c7:5c:0b:e9: 74:4b:b4:e4:4e:9f:b3:32:ea:9b:37:11:34:0a:54:d0:ec:28: 5f:5e:63:22:5a:2b:cf:29:eb:80:2a:9f:94:b0:d8:42:66:ea: c9:fb:06:7a:7b:e2:6a:26:b2:f1:62:90:02:8f:7a:13:be:c0: 61:0a:c5:fd:e1:c6:a1:5b:99:34:01:e9:18:73:fb:a2:00:31: 68:f6:a7:22:ea:7d:92:c4:72:2e:a3:e0:d5:a1:7e:83:3f:a3: 25:4a:ac:82:ac:b0:f1:2b:1c:b9:d3:9e:6c:5d:44:5d:9d:f4: d3:1d:5c:7c:39:07:b4:e6:7f:66:95:a5:bf:d1:ef:7a:0a:8a: d9:e2:f4:2f:95:3f:23:dd:18:de:4e:2f:15:6e:ae:61:a5:4a: 4c:b1:05:b5:94:c0:c8:62:55:93:2f:c4:a9:22:4d:0e:8d:4c: 1c:a0:19:26:3c:97:96:50:b3:98:98:9a:cf:b5:6f:62:ff:30: 30:25:f4:33:49:99:68:46:29:3b:13:05:34:6d:a1:14:bf:b5: 59:ea:36:d5:35:45:4a:36:96:02:22:e2:ff:a2:45:9f:32:53: 79:95:6b:04:ce:a6:7b:43:fe:9d:31:cd:84:9d:70:4a:f3:ea: 1f:0f:6c:28 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1n39I/eXN833+kIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk MTczN2RiN2QtZGEwOC00ODgwLWI2ODMtZTY2NmIwNWQ0ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXLre8uQRg7dCoD3W7scRcJE+h+IXJc+bmuH pogIJLD0hVXzg++Rv8y8XjJ1hK1cw5HUEXYA7wUuGYTk4j+7r0B3MyFfiBOhSx3t ymLRBaTCj2iuXAf9AUafGxWnPm2tU1T6IaDNMY8ECVcvNfGXObAb5kB3y8Cw8gO+ w+hDYb9EPOP6CiwYCY/CHobQrS6b1IQWcwUResh/llkp74+FRE/U+nDS5YOh1Tu1 mUkSswJWbNKUNW/AuyMwpX07CC2R4gc41DAECMydPQeARR5wMMyRTT/SWj7J+l3v NduzyQ1N6aK7CpAt3Fz8M7jNpsLRHsAMQKSf2wdHTjLv1Il+eQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPy+ykILLTZIbgF002R3pu3JEWBMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGY2ZTJkMzAtZWFiNC0z Y2RkLTlkZTktYWJmOGM4MzY1NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARjBmWkS8oOUquJ4AoDbHXAvpdEu05E6fszLqmzcRNApU0OwoX15j IlorzynrgCqflLDYQmbqyfsGenviaiay8WKQAo96E77AYQrF/eHGoVuZNAHpGHP7 ogAxaPanIup9ksRyLqPg1aF+gz+jJUqsgqyw8SscudOebF1EXZ300x1cfDkHtOZ/ ZpWlv9HvegqK2eL0L5U/I90Y3k4vFW6uYaVKTLEFtZTAyGJVky/EqSJNDo1MHKAZ JjyXllCzmJiaz7VvYv8wMCX0M0mZaEYpOxMFNG2hFL+1Weo21TVFSjaWAiLi/6JF nzJTeZVrBM6me0P+nTHNhJ1wSvPqHw9sKA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:38:42 2026 by rpki-client