$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa File: 1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa (raw, json) Hash identifier: TsAv0zxlN5g3Ns0cqPdbwtDydmaFYfXY0u87KXbPqEY= Subject key identifier: 27:B8:F7:3E:E7:EA:03:E8:7F:42:28:7D:E0:26:CC:F2:74:BB:06:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1CE7FCE0DECEE2873F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1c:e7:fc:e0:de:ce:e2:87:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=c33202ab-f418-4b36-b4f9-1ccdb0299b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:75:2b:5c:77:05:53:99:0a:70:a3:5f:ed: 94:20:86:9e:e4:2a:35:b6:43:db:69:23:b7:4e:dd: e1:17:33:db:f9:db:0e:11:94:f1:ed:97:bc:bb:06: 2d:44:21:11:00:1b:b7:b1:e8:f3:29:86:a8:9f:c8: 23:81:50:99:c0:f9:e8:c1:47:31:5c:f6:34:82:f3: 66:a4:2b:89:e3:df:82:cf:23:f6:13:16:68:04:a7: ae:eb:10:2e:01:7b:33:d0:44:55:27:96:cb:fe:4e: 18:6e:29:50:e2:2e:c9:2a:f8:8e:54:cc:84:8c:b4: 0d:74:58:9a:ab:7f:9f:b3:8c:65:06:c0:5c:1e:a5: 81:f2:c8:f6:20:63:75:7f:f8:6c:36:5b:34:a7:2a: 82:c6:96:b3:b2:96:64:da:82:e7:22:9e:13:61:81: 80:4c:42:41:c0:53:ac:3b:4c:e9:9a:0f:32:64:6b: b7:f2:45:4b:4d:a4:72:c0:93:33:a5:ce:cc:4e:b1: 4b:d9:b5:fe:00:cb:c9:d0:8b:a6:cb:02:05:a6:b0: c3:a0:c7:b0:6d:7f:d5:57:70:89:23:7c:db:e0:d3: 16:8a:c0:69:22:4b:06:f7:21:ac:44:3c:d4:33:8e: f1:65:d5:5a:5a:61:ea:6d:11:b7:8d:55:e8:64:90: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:F7:3E:E7:EA:03:E8:7F:42:28:7D:E0:26:CC:F2:74:BB:06:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:35::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6b:3f:23:b1:79:33:34:98:93:20:d8:aa:49:e0:83:79:ca: 2e:41:8c:49:f8:61:f3:62:71:85:b9:93:e4:0a:90:7c:91:11: 05:59:cb:aa:f6:e6:1a:8c:c6:91:d2:6b:ba:30:bf:38:e2:d6: f3:7a:fd:dc:b2:66:c1:cd:8b:21:ed:da:b9:01:61:91:8c:c7: d3:df:a7:94:86:b1:31:92:27:7d:86:b9:c2:26:39:42:dc:81: 52:40:d7:b7:70:09:eb:46:bd:be:d2:01:75:65:e3:f1:22:e4: 1f:6a:70:6d:85:93:34:22:fe:50:9d:97:29:c2:66:0b:66:9c: e3:93:65:9b:56:78:6f:84:12:0d:ee:ce:7a:52:c9:89:42:26: 2e:a3:b6:f1:f8:a2:53:82:b2:6e:3f:2d:dd:60:86:b7:c3:2f: c6:fc:ce:37:d0:4b:b0:36:fd:ac:90:fc:55:e8:46:91:b5:b7: 63:d6:4d:41:71:ef:73:4f:b2:da:23:b6:12:23:13:db:69:7e: 57:eb:c7:9d:38:bf:f0:91:24:d2:69:33:9c:5d:29:03:f8:24: 05:f8:2b:08:5f:70:a1:a4:92:93:40:56:64:8c:f2:91:78:5b: 90:43:12:ab:08:c7:1e:34:3e:28:0d:35:76:85:62:df:70:14: 2f:4b:d4:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTxzn/ODezuKHP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YzMzMjAyYWItZjQxOC00YjM2LWI0ZjktMWNjZGIwMjk5YjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBx1K1x3BVOZCnCjX+2UIIae5Co1tkPbaSO3 Tt3hFzPb+dsOEZTx7Ze8uwYtRCERABu3sejzKYaon8gjgVCZwPnowUcxXPY0gvNm pCuJ49+CzyP2ExZoBKeu6xAuAXsz0ERVJ5bL/k4YbilQ4i7JKviOVMyEjLQNdFia q3+fs4xlBsBcHqWB8sj2IGN1f/hsNls0pyqCxpazspZk2oLnIp4TYYGATEJBwFOs O0zpmg8yZGu38kVLTaRywJMzpc7MTrFL2bX+AMvJ0IumywIFprDDoMewbX/VV3CJ I3zb4NMWisBpIksG9yGsRDzUM47xZdVaWmHqbRG3jVXoZJAoEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCe49z7n6gPof0IofeAmzPJ0uwYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEzOGQ2NzUtNTNhYS0z Y2VkLThhNWUtY2E0ZGUxZTM5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFlrPyOxeTM0mJMg2KpJ4IN5yi5BjEn4YfNicYW5k+QKkHyREQVZ y6r25hqMxpHSa7owvzji1vN6/dyyZsHNiyHt2rkBYZGMx9Pfp5SGsTGSJ32GucIm OULcgVJA17dwCetGvb7SAXVl4/Ei5B9qcG2FkzQi/lCdlynCZgtmnOOTZZtWeG+E Eg3uznpSyYlCJi6jtvH4olOCsm4/Ld1ghrfDL8b8zjfQS7A2/ayQ/FXoRpG1t2PW TUFx73NPstojthIjE9tpflfrx504v/CRJNJpM5xdKQP4JAX4KwhfcKGkkpNAVmSM 8pF4W5BDEqsIxx40PigNNXaFYt9wFC9L1DA= -----END CERTIFICATE-----Generated at Sat Jun 13 07:17:33 2026 by rpki-client