$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd96c382-f39e-3426-83df-3f48d6bbc201.roa File: cd96c382-f39e-3426-83df-3f48d6bbc201.roa (raw, json) Hash identifier: 8RATGF+fmYFUX8SNx6VLoKJWFQJK9sDsCf8DJ2Qgdcg= Subject key identifier: C8:AE:53:F2:70:DF:05:65:22:7C:DE:31:E0:32:00:26:2B:D9:1D:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CA5F750F6D9D8C119F71A9680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd96c382-f39e-3426-83df-3f48d6bbc201.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 7029 IP address blocks: 2604:cb00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:50:f6:d9:d8:c1:19:f7:1a:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=7c7587c4-4ee3-43de-8eaa-fa40dbcdb784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c4:3a:98:f1:7d:d4:b1:e7:b0:53:5c:99:54: a9:3d:a4:8f:76:0b:c0:fd:23:4b:02:7f:da:e3:01: 04:1c:c7:13:de:44:22:90:1d:83:3f:c4:c4:cf:a8: 6c:ce:38:59:3a:ab:8d:70:73:aa:df:8c:7e:6e:90: 0c:33:7c:6e:c6:53:20:df:1d:14:02:da:2f:8e:6e: 2f:8e:2c:ec:b1:74:0e:b0:29:e1:0f:2c:fb:54:bc: e6:25:3e:4a:81:60:1d:8e:6a:96:a3:d0:c1:58:6d: 85:2f:7c:2d:5b:89:b0:f9:3f:c2:00:b3:0a:95:10: fc:e2:26:96:7d:fa:33:ea:13:ab:c4:4a:d2:0c:5b: 0c:44:e1:a0:a0:df:ea:07:f7:22:33:ce:fc:05:f9: a9:6f:f2:c0:42:78:3f:c2:e3:d4:c6:e9:ac:65:e1: 70:2c:93:cf:15:11:2e:bb:43:72:63:f1:15:84:fe: f4:34:44:b7:13:72:9f:e8:ad:4d:90:5b:f9:af:3c: d9:22:5d:b9:73:01:08:e0:7c:41:8b:cc:87:79:ad: 0a:66:74:9e:73:01:e2:37:43:aa:c4:a8:81:21:aa: 56:8d:b1:4c:49:35:4a:33:e2:6b:31:68:fd:19:d8: 40:18:04:e7:11:2c:36:03:aa:a0:ec:72:c0:b3:e1: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AE:53:F2:70:DF:05:65:22:7C:DE:31:E0:32:00:26:2B:D9:1D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd96c382-f39e-3426-83df-3f48d6bbc201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c7:a5:90:d8:03:2f:c3:2e:ed:d2:e6:6d:ac:ba:58:4b:8e: 57:19:52:b9:96:82:e4:ae:7f:50:01:3b:64:a1:3e:33:7e:40: e3:58:8b:98:fb:2a:48:4d:c4:86:50:4a:c1:64:99:72:c1:25: 6b:b3:6d:6f:a7:c1:62:85:89:6c:26:c8:02:7d:64:8c:3e:ca: b4:72:f5:ce:58:e5:d3:6f:30:74:26:ee:e2:52:93:bb:d7:16: bd:7a:d5:73:dc:c2:77:2e:5c:79:3c:b0:4c:72:13:17:28:79: 76:57:54:b9:4e:eb:5a:d2:e3:ad:c5:16:6f:74:36:62:14:15: 5f:8b:53:2e:43:b7:e9:41:13:a9:cb:e4:92:16:ea:2c:ff:d7: 45:8f:ea:32:90:fc:e7:90:80:c1:23:e9:ce:dd:7f:3e:e2:6d: 47:58:21:34:04:c9:21:84:c9:fa:02:70:bf:79:2f:df:bd:d5: 13:3a:b4:55:d5:c8:d4:11:82:e4:78:ea:c3:91:ac:7b:8d:44: a5:2a:37:d4:db:64:b5:59:27:28:f8:e8:b3:4d:9d:e5:ad:ae: 6f:13:71:3c:d9:9f:cd:22:cf:fe:86:a6:01:c2:b3:4c:0a:4c: 07:51:97:0c:65:ce:64:78:20:1b:d1:71:7a:c3:32:28:e9:ae: c2:00:f3:bb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyl91D22djBGfcaloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk N2M3NTg3YzQtNGVlMy00M2RlLThlYWEtZmE0MGRiY2RiNzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcQ6mPF91LHnsFNcmVSpPaSPdgvA/SNLAn/a 4wEEHMcT3kQikB2DP8TEz6hszjhZOquNcHOq34x+bpAMM3xuxlMg3x0UAtovjm4v jizssXQOsCnhDyz7VLzmJT5KgWAdjmqWo9DBWG2FL3wtW4mw+T/CALMKlRD84iaW ffoz6hOrxErSDFsMROGgoN/qB/ciM878Bfmpb/LAQng/wuPUxumsZeFwLJPPFREu u0NyY/EVhP70NES3E3Kf6K1NkFv5rzzZIl25cwEI4HxBi8yHea0KZnSecwHiN0Oq xKiBIapWjbFMSTVKM+JrMWj9GdhAGATnESw2A6qg7HLAs+FTHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMiuU/Jw3wVlInzeMeAyACYr2R0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Q5NmMzODItZjM5ZS0z NDI2LTgzZGYtM2Y0OGQ2YmJjMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTLADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUx6WQ2AMvwy7t0uZtrLpYS45XGVK5loLkrn9QATtkoT4zfkDjWIuY +ypITcSGUErBZJlywSVrs21vp8FihYlsJsgCfWSMPsq0cvXOWOXTbzB0Ju7iUpO7 1xa9etVz3MJ3Llx5PLBMchMXKHl2V1S5Tuta0uOtxRZvdDZiFBVfi1MuQ7fpQROp y+SSFuos/9dFj+oykPznkIDBI+nO3X8+4m1HWCE0BMkhhMn6AnC/eS/fvdUTOrRV 1cjUEYLkeOrDkax7jUSlKjfU22S1WSco+OizTZ3lra5vE3E82Z/NIs/+hqYBwrNM CkwHUZcMZc5keCAb0XF6wzIo6a7CAPO7 -----END CERTIFICATE-----Generated at Thu Feb 26 06:33:24 2026 by rpki-client