$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa File: f9f48e7f-17f5-303e-8734-cee27411d59a.roa (raw, json) Hash identifier: AjcXhFb2j90C6zowgfaF+f9Qa0Cr8O6+lNZOk4KlFaY= Subject key identifier: 77:23:21:B2:10:4D:CA:3D:2D:A0:18:A5:3E:9E:6C:EA:C5:80:BA:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7A0534BA4350FCE0E8A5A768 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 2604:cb00:4200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:34:ba:43:50:fc:e0:e8:a5:a7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=ba8f44e8-0c07-453c-9d7e-b299995fcc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:23:d4:26:88:92:75:db:af:36:1a:75:fa:fe: 51:66:23:32:87:6e:de:d9:32:e4:57:ee:4d:86:b5: 2b:3d:51:88:a7:ec:c9:50:8c:ab:f7:07:91:bf:86: 2e:30:0d:4d:6b:88:00:a3:48:f2:62:5d:31:39:ac: ed:e3:d9:a0:d2:5a:cc:9d:e8:76:b9:72:68:60:aa: 3b:28:c0:36:c8:a1:f0:45:e0:68:d3:e3:5d:76:82: 81:01:71:da:cf:33:27:f6:c3:a1:95:85:3c:b5:10: 28:fe:76:44:e8:48:55:37:b9:8e:3a:16:0e:2c:b1: 69:da:dc:f2:6b:28:c6:7b:81:bb:aa:23:a1:0a:77: 0e:f6:16:c4:c3:06:50:46:4f:25:9b:20:3f:88:d3: c3:f6:96:a4:03:34:60:9d:a7:0e:0c:ae:56:16:8b: 59:72:60:c8:95:06:9c:8e:62:b0:29:4a:da:31:f2: c3:88:98:66:79:78:34:ed:17:50:ca:18:22:8a:a8: 9c:8c:39:ac:af:04:96:9a:9d:82:00:de:ff:ea:de: f1:2d:29:3b:bc:c1:ea:29:5f:c6:60:d8:01:fc:93: 52:29:5c:99:bf:e2:57:f6:eb:7e:fa:2e:fa:44:4a: 5d:db:5b:9c:23:54:fe:02:d6:0f:4e:c2:7a:0f:60: 37:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:23:21:B2:10:4D:CA:3D:2D:A0:18:A5:3E:9E:6C:EA:C5:80:BA:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:4200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:70:0e:05:0c:67:fd:fc:2c:73:c0:55:fe:43:24:8b:9f:13: 14:fd:0f:86:1c:f1:86:27:1f:e1:00:ad:5b:6e:13:9a:a2:32: 09:bf:91:a5:e5:da:0d:f0:28:20:1a:b0:e7:d0:f7:50:9f:1d: 49:a3:eb:a8:13:86:6a:17:18:5f:c7:7d:f4:db:d9:c8:79:98: bd:9a:78:61:c0:b6:21:72:69:59:4c:c8:1d:12:6d:38:a4:41: e5:1f:96:fc:ac:0d:ba:2d:6b:ef:ab:f5:02:a7:9f:b7:28:9c: 80:51:44:50:85:96:2b:9c:28:04:0b:2b:83:60:43:f6:6b:2c: 9d:ef:c5:c5:40:cb:bc:1e:c6:bf:72:c3:bf:a0:e8:6a:2d:e7: 07:09:7b:d6:db:ba:2e:6d:ae:61:02:0c:97:da:80:bd:15:c4: ad:bf:43:6c:ee:bb:d3:a4:eb:02:9f:06:2d:a2:22:ea:81:ac: 63:9f:c4:38:24:19:ee:b7:65:2c:6d:37:bb:aa:07:4e:c0:22: 28:a0:dc:d1:18:96:5f:47:bc:eb:5b:2e:e3:33:e3:b9:56:5c: d6:5f:a1:db:84:56:fe:e6:a4:90:ed:20:bb:c8:cf:ec:5e:b7: 08:a3:28:75:a7:e6:0f:43:43:04:7b:79:9e:ea:57:16:9c:90: ea:34:11:fb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE16BTS6Q1D84Oilp2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YmE4ZjQ0ZTgtMGMwNy00NTNjLTlkN2UtYjI5OTk5NWZjYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSPUJoiSdduvNhp1+v5RZiMyh27e2TLkV+5N hrUrPVGIp+zJUIyr9weRv4YuMA1Na4gAo0jyYl0xOazt49mg0lrMneh2uXJoYKo7 KMA2yKHwReBo0+NddoKBAXHazzMn9sOhlYU8tRAo/nZE6EhVN7mOOhYOLLFp2tzy ayjGe4G7qiOhCncO9hbEwwZQRk8lmyA/iNPD9pakAzRgnacODK5WFotZcmDIlQac jmKwKUraMfLDiJhmeXg07RdQyhgiiqicjDmsrwSWmp2CAN7/6t7xLSk7vMHqKV/G YNgB/JNSKVyZv+JX9ut++i76REpd21ucI1T+AtYPTsJ6D2A3tQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHcjIbIQTco9LaAYpT6ebOrFgLoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjlmNDhlN2YtMTdmNS0z MDNlLTg3MzQtY2VlMjc0MTFkNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAEIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAk3AOBQxn/fwsc8BV/kMki58TFP0Phhzxhicf4QCtW24TmqIyCb+R peXaDfAoIBqw59D3UJ8dSaPrqBOGahcYX8d99NvZyHmYvZp4YcC2IXJpWUzIHRJt OKRB5R+W/KwNui1r76v1AqeftyicgFFEUIWWK5woBAsrg2BD9mssne/FxUDLvB7G v3LDv6Doai3nBwl71tu6Lm2uYQIMl9qAvRXErb9DbO6706TrAp8GLaIi6oGsY5/E OCQZ7rdlLG03u6oHTsAiKKDc0RiWX0e861su4zPjuVZc1l+h24RW/uakkO0gu8jP 7F63CKModafmD0NDBHt5nupXFpyQ6jQR+w== -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:25 2026 by rpki-client