$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa File: 47a38678-065d-3329-a105-fa94cfdcfee1.roa (raw, json) Hash identifier: QYOkVch09xsDqCtpPubyWkFXMpAPVKKgVPbIyfQyfUo= Subject key identifier: EB:C7:90:66:C5:89:C7:33:5C:0A:FB:C7:57:0C:FF:5A:50:79:0A:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1BE22480BD47AB70BEC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2600:5000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1b:e2:24:80:bd:47:ab:70:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=85fadf82-3da7-4828-9642-9dfcb4caf9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d8:93:7b:04:c6:a1:31:ab:bc:f6:16:79:4d: 2f:96:c7:a3:a5:64:8f:1e:3a:b4:d7:47:bc:40:88: c7:5f:ad:1c:2b:b4:8d:9f:8b:b7:95:e1:a4:53:ad: 49:36:87:1b:9f:28:28:41:51:1d:1e:6c:9e:26:58: 9b:1a:c0:1d:67:e2:ff:95:09:c6:1d:a9:e0:71:3f: e1:07:e0:77:37:7e:0b:c7:ac:aa:87:1e:7e:58:97: d4:6a:f6:4c:1b:45:9f:0c:49:61:44:70:25:15:50: 09:b3:5b:d2:02:9c:05:58:bb:47:fb:55:31:c6:84: 36:72:20:ec:29:3e:fa:e4:87:76:ad:cf:c6:7e:f7: 65:f0:3a:b5:c5:a2:30:bd:fa:90:ba:2c:c8:8c:c3: a1:8b:bb:a0:b7:1b:5a:1e:66:d4:ef:f0:09:4a:84: 4c:a5:df:a1:e2:c5:16:32:f7:a7:ec:6a:57:43:1b: 35:f1:7d:f7:48:97:4c:f6:05:d5:34:60:c9:b2:3e: aa:e9:be:1e:0c:3e:6f:ff:17:f5:6f:ed:79:a9:9b: 1a:bc:7d:34:bd:1b:2c:86:7a:31:ca:d2:4b:8e:79: 1f:05:90:44:4f:cd:71:e0:47:2d:ac:ba:1b:c1:c0: b4:31:ac:67:b3:5e:14:bc:48:fa:34:1e:8b:1d:43: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C7:90:66:C5:89:C7:33:5C:0A:FB:C7:57:0C:FF:5A:50:79:0A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2600:5000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:34:28:4d:88:9a:99:32:70:ec:32:cd:e8:67:d6:6a:d3:bd: 86:60:15:58:87:d6:55:86:2e:98:8a:8a:3d:ff:aa:10:ed:91: be:f8:a4:75:55:2d:f6:2f:1e:da:c0:21:52:ea:43:b7:10:82: 1a:0d:fd:b9:f6:85:f5:d5:d1:3d:28:80:5f:d4:8d:d0:fd:96: 0c:59:0d:c6:89:fe:4d:8d:b1:04:71:c6:d5:46:fd:4b:b8:60: dc:05:82:38:65:0b:74:81:ce:4e:61:52:13:58:bb:82:5b:20: c2:08:c0:ff:18:3e:27:87:11:1c:1d:96:0b:12:53:89:79:28: 31:08:ce:9a:77:b5:c3:6b:25:3d:83:af:34:8c:0e:55:5c:a9: b8:0c:55:1b:05:9a:10:bd:46:06:ae:ed:90:a5:7d:88:c4:62: 8c:9b:79:91:b5:16:b9:10:cf:53:96:8b:22:b6:b6:eb:de:30: dc:40:95:50:b5:48:16:b7:92:67:f2:f0:54:2f:f5:1d:26:9b: 3b:c5:fd:52:2e:a6:11:23:e0:91:e3:4f:13:7b:06:88:86:ff: 52:4e:f7:4e:51:f0:4d:a5:b4:79:3a:08:ec:7e:66:2d:77:e4: 4a:d2:58:2f:00:e8:d5:0c:5b:e2:7e:c2:70:44:a0:cd:99:cd: b0:62:99:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4QTxviJIC9R6twvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ODVmYWRmODItM2RhNy00ODI4LTk2NDItOWRmY2I0Y2FmOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtiTewTGoTGrvPYWeU0vlsejpWSPHjq010e8 QIjHX60cK7SNn4u3leGkU61JNocbnygoQVEdHmyeJlibGsAdZ+L/lQnGHangcT/h B+B3N34Lx6yqhx5+WJfUavZMG0WfDElhRHAlFVAJs1vSApwFWLtH+1UxxoQ2ciDs KT765Id2rc/Gfvdl8Dq1xaIwvfqQuizIjMOhi7ugtxtaHmbU7/AJSoRMpd+h4sUW Mven7GpXQxs18X33SJdM9gXVNGDJsj6q6b4eDD5v/xf1b+15qZsavH00vRsshnox ytJLjnkfBZBET81x4EctrLobwcC0Maxns14UvEj6NB6LHUNk3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOvHkGbFicczXAr7x1cM/1pQeQogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDdhMzg2NzgtMDY1ZC0z MzI5LWExMDUtZmE5NGNmZGNmZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgBQADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCINChNiJqZMnDsMs3oZ9Zq072GYBVYh9ZVhi6Yioo9/6oQ7ZG++KR1 VS32Lx7awCFS6kO3EIIaDf259oX11dE9KIBf1I3Q/ZYMWQ3Gif5NjbEEccbVRv1L uGDcBYI4ZQt0gc5OYVITWLuCWyDCCMD/GD4nhxEcHZYLElOJeSgxCM6ad7XDayU9 g680jA5VXKm4DFUbBZoQvUYGru2QpX2IxGKMm3mRtRa5EM9Tlositrbr3jDcQJVQ tUgWt5Jn8vBUL/UdJps7xf1SLqYRI+CR408TewaIhv9STvdOUfBNpbR5OgjsfmYt d+RK0lgvAOjVDFvifsJwRKDNmc2wYplE -----END CERTIFICATE-----Generated at Sat Jun 13 08:59:55 2026 by rpki-client