$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd96c382-f39e-3426-83df-3f48d6bbc201.roa File: cd96c382-f39e-3426-83df-3f48d6bbc201.roa (raw, json) Hash identifier: hDTjYCxJgEr1aRDOS4N9+7WIs8gnB/uq4uVYJQRhX3A= Subject key identifier: 8D:F3:28:5A:9A:9C:AF:53:3C:18:7C:A9:62:0A:46:27:6E:B1:FE:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D86957EDF9E6FFC06B37BC420 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd96c382-f39e-3426-83df-3f48d6bbc201.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 7029 IP address blocks: 2604:cb00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:7e:df:9e:6f:fc:06:b3:7b:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=dcf61ab4-dd59-4f8c-a906-4071d0a212ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:1e:1a:a6:79:e5:ac:49:eb:82:a6:8d:20: b0:99:88:d3:a2:57:df:a6:a2:45:19:f8:6f:38:4d: 52:fb:b1:37:3e:54:8e:4b:2e:be:3f:04:2d:f9:88: 65:9f:c0:3b:a6:1d:35:bd:79:b3:28:bc:38:a8:7a: ab:a3:ca:6f:f8:27:68:f9:49:16:1e:ca:e7:55:10: 83:80:6a:b6:fb:67:71:2e:f6:b2:f8:e2:c2:33:32: 17:c3:e0:54:d1:c7:e6:e2:3c:cb:97:fe:13:5d:ab: 99:ed:bb:3f:c0:c5:eb:64:8c:e8:67:55:b2:73:32: 6a:4e:fb:1f:45:56:12:8e:d3:49:a4:40:2f:9f:7c: d9:e4:10:9e:eb:fe:a5:a8:51:f0:50:1f:03:6f:4a: 54:a8:81:bc:41:b4:bd:b8:3b:f6:8b:10:a1:a2:b4: 93:28:cd:fb:91:5e:d8:22:14:45:86:f8:b7:a1:0a: 69:aa:26:79:86:c9:c7:c3:54:df:14:2a:3b:0c:1f: 62:78:a0:05:af:52:1c:d8:b3:be:82:89:2f:96:96: c3:86:89:50:b9:e4:dd:94:89:8d:e8:e0:7b:aa:6c: 35:4d:a8:16:18:03:5a:f2:ea:16:03:9d:86:48:20: ed:36:e8:f2:1b:49:c7:e9:73:ee:d8:46:65:9f:84: 25:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:28:5A:9A:9C:AF:53:3C:18:7C:A9:62:0A:46:27:6E:B1:FE:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd96c382-f39e-3426-83df-3f48d6bbc201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:77:82:d4:48:9f:9c:8f:9d:11:8b:22:43:68:ab:64:f4:3b: f9:84:bd:5a:5e:b1:7d:d7:67:0f:d4:e7:38:b9:55:6a:55:d8: 1d:e5:69:a9:20:bb:40:c4:a7:d0:ae:f8:d6:da:aa:ca:51:bc: da:e0:fc:de:aa:30:9b:83:61:18:c2:8f:b8:8f:8e:27:cb:08: 12:5e:0b:23:0b:b7:06:fc:a3:c5:fc:f0:5c:37:b2:52:03:4a: 7d:22:3f:75:f7:7b:3e:e0:75:d6:41:98:38:c0:88:3d:29:7f: 55:06:46:fa:72:98:c5:bb:eb:94:48:4c:0a:95:54:35:d8:0b: 31:49:06:68:87:d4:fc:6a:3a:21:38:f8:09:1c:8c:db:e8:5e: 27:07:da:77:bf:39:dc:64:35:8f:d3:e9:22:bc:6d:36:f2:15: 14:1b:7e:d3:24:8e:85:47:a1:2d:5f:e5:b3:73:cb:d4:eb:64: 14:c9:20:a1:2a:d9:7a:87:0c:2c:1f:8d:34:7a:44:d9:0f:23: 70:cb:f2:59:ec:67:49:7c:b6:08:c4:d9:d8:39:95:2b:dd:49: 68:9b:40:0f:27:35:44:1d:59:76:bf:60:9f:37:3a:c8:4b:81: 61:58:c9:bb:74:d3:8c:b7:d9:64:77:0c:8d:88:19:49:c6:7b: 2f:4f:89:b3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2GlX7fnm/8BrN7xCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZGNmNjFhYjQtZGQ1OS00ZjhjLWE5MDYtNDA3MWQwYTIxMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgweGqZ55axJ64KmjSCwmYjTolffpqJFGfhv OE1S+7E3PlSOSy6+PwQt+Yhln8A7ph01vXmzKLw4qHqro8pv+Cdo+UkWHsrnVRCD gGq2+2dxLvay+OLCMzIXw+BU0cfm4jzLl/4TXauZ7bs/wMXrZIzoZ1WyczJqTvsf RVYSjtNJpEAvn3zZ5BCe6/6lqFHwUB8Db0pUqIG8QbS9uDv2ixChorSTKM37kV7Y IhRFhvi3oQppqiZ5hsnHw1TfFCo7DB9ieKAFr1Ic2LO+gokvlpbDholQueTdlImN 6OB7qmw1TagWGANa8uoWA52GSCDtNujyG0nH6XPu2EZln4QlXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI3zKFqanK9TPBh8qWIKRidusf4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Q5NmMzODItZjM5ZS0z NDI2LTgzZGYtM2Y0OGQ2YmJjMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTLADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/d4LUSJ+cj50RiyJDaKtk9Dv5hL1aXrF912cP1Oc4uVVqVdgd5Wmp ILtAxKfQrvjW2qrKUbza4PzeqjCbg2EYwo+4j44nywgSXgsjC7cG/KPF/PBcN7JS A0p9Ij9193s+4HXWQZg4wIg9KX9VBkb6cpjFu+uUSEwKlVQ12AsxSQZoh9T8ajoh OPgJHIzb6F4nB9p3vzncZDWP0+kivG028hUUG37TJI6FR6EtX+Wzc8vU62QUySCh Ktl6hwwsH400ekTZDyNwy/JZ7GdJfLYIxNnYOZUr3Ulom0APJzVEHVl2v2CfNzrI S4FhWMm7dNOMt9lkdwyNiBlJxnsvT4mz -----END CERTIFICATE-----Generated at Fri Apr 17 14:42:25 2026 by rpki-client