$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa File: 1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa (raw, json) Hash identifier: RdQJ3rx6rrQkpXYxKBM6KjtFVcipEPJ5l8YWnM43ZiA= Subject key identifier: E4:07:14:F5:99:D1:94:E3:B0:20:3A:F5:0A:5A:D6:3C:03:49:6C:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1DB34AF31F058E49E500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:2200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1d:b3:4a:f3:1f:05:8e:49:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=cd5a650a-03b6-441b-87de-8f2e9b917f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:c2:81:77:ee:af:d3:c7:c0:e0:2b:b4:e7: 64:07:af:a4:68:dd:47:8b:3a:21:e9:e6:ed:32:12: 1b:f0:5f:84:99:74:14:d8:e1:21:47:1a:63:58:51: e0:b4:fd:2e:c9:f5:24:7d:69:cf:e6:51:dd:2d:49: 73:e0:7b:9f:7c:60:50:b0:e1:86:5f:d1:a2:e5:5f: b1:92:9b:3d:c0:f7:e5:b9:9a:95:1b:88:27:14:4c: c9:75:6a:27:60:33:00:fc:10:8d:7d:18:f6:f3:1a: 77:f7:7a:4e:fa:c4:d8:60:17:26:df:3c:31:eb:68: 56:f4:73:e9:db:dc:35:78:79:02:a3:c0:fd:00:ff: ca:41:54:d0:37:2c:ba:24:5b:5a:62:b0:71:3c:5e: 97:c5:30:c9:00:f0:e1:d3:c9:5b:18:fd:44:dc:52: 44:87:ec:5f:7b:2f:2a:92:3f:21:74:58:96:9c:42: ba:29:b2:fc:b9:7f:86:04:c2:2e:36:07:00:75:ed: ca:8b:bc:f9:d6:e3:5d:85:b6:20:0a:3a:fd:b3:14: 87:5e:d1:f7:91:8f:af:ef:41:30:b7:2e:11:d3:40: 8d:32:85:c8:f3:1d:f2:a0:ad:e6:ec:ba:cd:d8:b1: 90:42:a2:0f:2b:4c:68:1e:b6:26:aa:8e:f4:37:7e: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:07:14:F5:99:D1:94:E3:B0:20:3A:F5:0A:5A:D6:3C:03:49:6C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c1:ec:4a:ba:44:ee:39:e1:be:cd:0b:fe:15:f8:cd:fe:48: a5:50:7a:81:5f:91:f1:39:a0:06:8f:fb:fe:78:07:5d:56:55: 8c:c1:9b:2a:81:21:c0:0e:1f:a7:f7:ab:05:f1:94:5d:0c:c3: d5:97:4d:8b:14:91:11:79:40:7c:59:0c:70:02:70:be:82:fe: fa:54:1d:bd:29:d0:56:85:d2:7b:ad:b4:cc:4a:a0:2d:bc:f3: 70:98:ed:04:ac:10:71:9c:16:bd:df:a6:07:48:91:f1:be:44: 79:99:96:d8:fc:00:1d:6f:55:eb:67:d9:0d:bf:65:0d:75:7b: 62:56:02:2d:af:a0:f6:30:15:09:04:df:ef:06:6b:ea:f2:41: 7c:44:00:15:13:d9:7d:7a:58:b4:09:63:0d:1c:63:08:24:90: da:cf:ad:4f:81:60:a7:6d:e5:b4:b3:58:a3:4d:a2:4b:7b:8f: 14:8e:45:c1:2c:02:21:83:f9:3f:6d:c2:fc:39:64:37:bc:c5: 6a:83:3d:8f:d7:5a:19:95:12:e4:05:cb:46:2a:59:ec:81:12: 8d:c5:88:5f:23:71:db:60:0b:12:3d:6b:d8:5e:8a:6b:a0:79: 18:96:1e:38:ed:ca:e6:39:06:73:8e:37:22:be:32:99:28:21: 2c:19:37:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4QTx2zSvMfBY5J5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk Y2Q1YTY1MGEtMDNiNi00NDFiLTg3ZGUtOGYyZTliOTE3Zjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2HCgXfur9PHwOArtOdkB6+kaN1Hizoh6ebt MhIb8F+EmXQU2OEhRxpjWFHgtP0uyfUkfWnP5lHdLUlz4HuffGBQsOGGX9Gi5V+x kps9wPfluZqVG4gnFEzJdWonYDMA/BCNfRj28xp393pO+sTYYBcm3zwx62hW9HPp 29w1eHkCo8D9AP/KQVTQNyy6JFtaYrBxPF6XxTDJAPDh08lbGP1E3FJEh+xfey8q kj8hdFiWnEK6KbL8uX+GBMIuNgcAde3Ki7z51uNdhbYgCjr9sxSHXtH3kY+v70Ew ty4R00CNMoXI8x3yoK3m7LrN2LGQQqIPK0xoHrYmqo70N37g7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOQHFPWZ0ZTjsCA69Qpa1jwDSWw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjZGNiMTgtOWRiNC0z OTM5LWJjMzMtZmMzMzdkODBiZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAG8HsSrpE7jnhvs0L/hX4zf5IpVB6gV+R8TmgBo/7/ngHXVZVjMGb KoEhwA4fp/erBfGUXQzD1ZdNixSREXlAfFkMcAJwvoL++lQdvSnQVoXSe620zEqg LbzzcJjtBKwQcZwWvd+mB0iR8b5EeZmW2PwAHW9V62fZDb9lDXV7YlYCLa+g9jAV CQTf7wZr6vJBfEQAFRPZfXpYtAljDRxjCCSQ2s+tT4Fgp23ltLNYo02iS3uPFI5F wSwCIYP5P23C/DlkN7zFaoM9j9daGZUS5AXLRipZ7IESjcWIXyNx22ALEj1r2F6K a6B5GJYeOO3K5jkGc443Ir4ymSghLBk3cg== -----END CERTIFICATE-----Generated at Sun Jun 14 05:10:17 2026 by rpki-client