$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa File: 2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa (raw, json) Hash identifier: PUmv6Ju/QLo3+JYrfwPfNwdq1xf5ZBv+VnOEvP9addY= Subject key identifier: EC:93:F7:EE:F3:EC:14:D7:E0:60:6A:A5:4A:95:7E:08:0B:18:0C:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1C3148716DAAEE7788E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1c:31:48:71:6d:aa:ee:77:88:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=5d940b18-3131-4b5a-b03d-9b8394522681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:78:92:cc:97:7a:46:7d:cb:47:10:17:de:ff: 64:6d:ab:a2:61:b1:55:b4:4a:12:d0:59:68:4d:e5: 78:87:67:f0:ff:3e:13:1f:8e:b1:5d:cc:e3:12:43: f1:3f:dd:04:99:bd:a5:66:10:ce:c7:7f:a1:2c:ce: 98:a5:f4:33:f9:a3:6c:60:98:6b:ee:ca:66:34:c0: 63:34:5a:98:92:b8:02:36:a0:6d:bc:2e:98:c6:ca: 07:35:81:9a:21:36:08:45:28:d4:f8:92:95:5c:c6: e6:01:99:bd:3c:56:4f:00:37:82:35:8a:1b:42:f3: c0:ac:4d:7d:3b:03:67:e3:4a:c4:16:46:df:c6:75: c2:ac:dc:21:9b:af:30:21:93:0f:e5:d5:cc:ee:25: b9:c8:7e:42:45:0f:73:c4:e2:54:b6:94:de:96:bd: c0:47:7f:69:4e:ec:6e:eb:4b:b8:cc:62:f2:f8:50: 35:32:ea:dc:b4:22:0e:e3:2e:e9:bb:e9:a7:f4:6b: 71:37:30:c6:df:bd:3c:ea:6d:b4:e5:a8:7e:89:f0: ff:0a:92:00:e8:d5:71:c7:ff:1f:4e:e9:93:5f:12: 02:9f:ca:81:f6:59:bf:55:ae:9d:d4:a2:b8:69:94: 6c:b7:fe:79:fa:c1:35:d2:c3:d7:70:aa:70:69:d1: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:93:F7:EE:F3:EC:14:D7:E0:60:6A:A5:4A:95:7E:08:0B:18:0C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:63:7f:3a:1f:a4:30:eb:3f:d0:c5:d3:40:09:63:63:b0:8a: d1:f2:13:12:91:55:b1:d1:1d:7b:70:8c:df:8e:83:98:03:d8: 4f:e0:c2:0f:c1:2c:f3:1a:ff:5e:e8:b4:74:4c:88:3c:eb:8d: 1e:da:5d:f2:c0:d7:2a:80:8e:91:74:bb:b2:9c:f3:c2:cf:fa: 83:cd:7f:29:5f:ec:6e:c5:51:ca:d7:34:ec:d7:08:63:f4:69: bf:41:64:b1:b9:b4:b0:ae:93:10:15:b7:f2:d2:9d:e4:fa:90: ce:b5:f6:bd:ec:bc:14:15:37:a3:68:9d:07:56:11:ae:25:14: 01:eb:62:47:f5:4f:3a:f4:5a:0d:97:f2:b9:c3:2a:43:d9:ab: 7c:0e:18:a8:e1:bf:75:bf:ee:1d:1a:2a:62:bf:fa:ca:5b:49: e4:fe:94:da:8a:19:5d:cd:e0:fa:58:ec:4a:47:e7:38:da:80: dd:86:9d:c3:37:80:84:b6:6d:28:2f:66:41:e1:70:58:e2:27: a0:c5:b9:29:d7:14:96:f0:60:1e:52:20:1a:76:62:90:c7:05: 35:48:5b:1e:bf:79:c5:36:a0:0b:b5:ef:3d:a6:0d:28:44:cf: 76:4c:5b:87:80:6c:4b:dc:b7:f6:9c:62:c9:8b:2c:2c:99:af: 9d:20:3b:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTxwxSHFtqu53iOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NWQ5NDBiMTgtMzEzMS00YjVhLWIwM2QtOWI4Mzk0NTIyNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXiSzJd6Rn3LRxAX3v9kbauiYbFVtEoS0Flo TeV4h2fw/z4TH46xXczjEkPxP90Emb2lZhDOx3+hLM6YpfQz+aNsYJhr7spmNMBj NFqYkrgCNqBtvC6YxsoHNYGaITYIRSjU+JKVXMbmAZm9PFZPADeCNYobQvPArE19 OwNn40rEFkbfxnXCrNwhm68wIZMP5dXM7iW5yH5CRQ9zxOJUtpTelr3AR39pTuxu 60u4zGLy+FA1MurctCIO4y7pu+mn9GtxNzDG37086m205ah+ifD/CpIA6NVxx/8f TumTXxICn8qB9lm/Va6d1KK4aZRst/55+sE10sPXcKpwadGGQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOyT9+7z7BTX4GBqpUqVfggLGAy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmJmMGM0YzYtYjgwYy0z YzQwLWI4YzgtMmE0ZDBlZjljM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9jfzofpDDrP9DF00AJY2OwitHyExKRVbHRHXtwjN+Og5gD2E/g wg/BLPMa/17otHRMiDzrjR7aXfLA1yqAjpF0u7Kc88LP+oPNfylf7G7FUcrXNOzX CGP0ab9BZLG5tLCukxAVt/LSneT6kM619r3svBQVN6NonQdWEa4lFAHrYkf1Tzr0 Wg2X8rnDKkPZq3wOGKjhv3W/7h0aKmK/+spbSeT+lNqKGV3N4PpY7EpH5zjagN2G ncM3gIS2bSgvZkHhcFjiJ6DFuSnXFJbwYB5SIBp2YpDHBTVIWx6/ecU2oAu17z2m DShEz3ZMW4eAbEvct/acYsmLLCyZr50gO7Y= -----END CERTIFICATE-----Generated at Sat Jun 13 08:38:51 2026 by rpki-client