$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa File: 3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa (raw, json) Hash identifier: XgsUzg+mKuy93Pbg0lHU51WR78yloQwZ6AJaWADcShI= Subject key identifier: A3:8B:E2:58:D7:8D:30:24:70:C9:5C:76:45:99:7F:34:CE:B6:00:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFEC0703AD55FF6B1462C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:3500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:fe:c0:70:3a:d5:5f:f6:b1:46:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=aa1e8fdf-e49e-4ffa-8f4d-93b04f7325f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:c4:3b:54:af:3d:96:0d:c7:17:f7:90:7e: 68:5b:87:39:8c:e9:1c:ce:a1:55:ae:36:30:86:13: e1:99:40:96:14:75:82:bb:d2:c3:e1:cc:3f:34:ef: 36:e0:9c:6f:75:f6:f8:4d:41:e6:39:1b:d8:fb:60: f2:c7:4c:95:08:ca:1d:be:83:37:c4:99:e5:e4:79: aa:36:9c:e9:bc:93:05:5d:f8:b7:5c:ae:d2:17:c8: 7d:54:0d:ed:3f:48:41:90:00:fc:92:dd:b4:89:64: 45:7a:ed:70:d5:a9:5c:9b:8d:d7:1e:c1:ec:b5:df: 57:77:a8:77:f4:a5:96:fa:fc:bf:fc:d6:67:a6:4a: ee:95:53:55:e8:21:b8:61:b9:11:29:33:e5:32:4d: 5d:71:10:79:5f:85:4b:32:25:97:f6:df:26:c9:ea: d1:a2:08:bd:6e:00:24:66:54:5d:21:91:48:d0:8d: 5a:8e:10:20:e9:df:0d:33:bf:7a:b8:4e:c5:46:f0: 68:21:ae:3a:4d:06:4e:37:69:a0:3c:3f:94:dd:7e: 3b:43:83:59:14:af:1c:10:42:0e:04:6c:30:cc:03: d6:0d:4d:e6:0d:fa:a7:c8:54:74:88:6f:5b:0c:c3: 05:16:2c:e2:f4:79:4c:81:2d:c6:74:24:de:a9:9a: 67:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8B:E2:58:D7:8D:30:24:70:C9:5C:76:45:99:7F:34:CE:B6:00:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:94:f0:0c:a1:1a:20:85:26:4f:16:5b:5d:20:e6:9e:c0:04: fe:af:b7:5b:ec:2b:6b:52:36:69:60:25:67:09:eb:ea:d1:93: 7c:60:fc:dd:37:5a:dd:c6:15:7f:0f:8c:8b:4a:bc:41:e3:b9: 05:1c:33:d8:29:19:17:cc:41:7b:ff:85:06:71:2f:dc:fe:90: d5:56:26:61:90:4f:dc:08:dc:47:95:eb:a3:c0:bd:78:38:ea: 14:7b:30:3b:fb:60:a4:fb:51:56:b1:7c:54:5c:d9:d4:ee:97: 41:a6:da:47:6e:ed:6c:cf:af:b7:07:e1:28:d4:88:c6:c6:eb: 4b:d6:87:8d:ae:a9:9d:b9:d4:96:bd:a5:1f:2a:42:91:62:12: 0f:00:11:7a:53:b8:32:38:5b:62:d0:21:c5:83:62:17:b1:92: 26:43:f6:7d:85:a0:ef:78:2e:00:8d:cb:db:91:04:09:83:59: 88:0c:bf:20:c3:5f:69:86:5d:31:e8:c0:f5:00:7f:10:2f:8b: 9e:88:ac:ce:ae:32:c7:3d:9b:1d:dd:d7:54:ef:1c:20:bd:ee: 2c:19:c5:b6:97:65:d1:a9:58:3d:09:77:a0:d3:f4:8f:1d:6d: 1a:1e:81:c2:cb:f2:bd:2d:9c:56:bd:9c:0d:05:04:72:81:58: 25:56:12:96 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4QTv7AcDrVX/axRiwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YWExZThmZGYtZTQ5ZS00ZmZhLThmNGQtOTNiMDRmNzMyNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq97EO1SvPZYNxxf3kH5oW4c5jOkczqFVrjYw hhPhmUCWFHWCu9LD4cw/NO824Jxvdfb4TUHmORvY+2Dyx0yVCModvoM3xJnl5Hmq NpzpvJMFXfi3XK7SF8h9VA3tP0hBkAD8kt20iWRFeu1w1alcm43XHsHstd9Xd6h3 9KWW+vy//NZnpkrulVNV6CG4YbkRKTPlMk1dcRB5X4VLMiWX9t8myerRogi9bgAk ZlRdIZFI0I1ajhAg6d8NM796uE7FRvBoIa46TQZON2mgPD+U3X47Q4NZFK8cEEIO BGwwzAPWDU3mDfqnyFR0iG9bDMMFFizi9HlMgS3GdCTeqZpn/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKOL4ljXjTAkcMlcdkWZfzTOtgB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2ZjNjg1ODktNmNiOC0z NTEyLTlkMzgtNWM5MzI0YzQxYzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW5TwDKEaIIUmTxZbXSDmnsAE/q+3W+wra1I2aWAlZwnr6tGTfGD8 3Tda3cYVfw+Mi0q8QeO5BRwz2CkZF8xBe/+FBnEv3P6Q1VYmYZBP3AjcR5Xro8C9 eDjqFHswO/tgpPtRVrF8VFzZ1O6XQabaR27tbM+vtwfhKNSIxsbrS9aHja6pnbnU lr2lHypCkWISDwARelO4MjhbYtAhxYNiF7GSJkP2fYWg73guAI3L25EECYNZiAy/ IMNfaYZdMejA9QB/EC+Lnoiszq4yxz2bHd3XVO8cIL3uLBnFtpdl0alYPQl3oNP0 jx1tGh6BwsvyvS2cVr2cDQUEcoFYJVYSlg== -----END CERTIFICATE-----Generated at Sat Jun 13 21:41:03 2026 by rpki-client