$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa File: 5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa (raw, json) Hash identifier: chrJMj3hwYLqmnxVDY6zp3VNsY5kecvUP72IDjZmZOE= Subject key identifier: 52:CE:87:DC:92:EA:39:2F:87:B5:34:C1:2C:D9:70:6C:22:76:40:4B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1C8B4C78FF7862BDCB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1c:8b:4c:78:ff:78:62:bd:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=a0870700-7d16-4203-8af4-c57d2566beb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:f6:cf:5d:7e:43:ce:6a:5c:2f:e7:98:6c: 0b:7d:36:79:e1:64:a9:98:dd:62:61:2c:f4:e5:44: 3e:2e:14:f2:36:2f:84:82:d2:31:43:96:43:ec:3e: fe:52:50:22:44:57:3b:bf:1d:9b:02:35:ec:b6:74: 45:54:9a:a3:97:0a:67:71:2b:47:ff:a7:9a:76:eb: 66:61:20:7e:34:ab:ed:95:13:c9:04:58:74:82:46: cb:49:4d:79:c1:44:ab:cb:17:e8:ed:54:ab:b0:56: 25:40:2f:10:5b:ae:43:5c:3c:e0:c0:9f:f4:4d:16: a8:6c:99:d6:05:db:75:39:2d:4e:2b:8c:df:3d:79: 50:63:fe:2d:e6:3e:5a:0f:9b:e1:f4:de:1b:d8:a8: f5:b8:de:d9:bf:44:35:e0:3d:f4:69:84:4a:6c:5e: c3:e5:b0:b8:59:e0:66:9b:0d:16:7f:f9:ea:38:f0: 05:fd:96:37:2a:f6:5c:47:fe:94:7e:8f:a8:50:7c: 50:6b:1c:43:d5:f6:f9:6a:30:97:d6:d4:b4:c7:0a: 18:5c:52:a2:e6:9e:98:87:8b:78:1b:2a:af:0e:bc: 97:a5:a0:3a:5b:cd:3c:4c:ec:13:90:ea:31:ad:00: 5f:72:a7:f4:2a:9f:ff:1e:3f:c1:9e:78:6c:80:8d: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CE:87:DC:92:EA:39:2F:87:B5:34:C1:2C:D9:70:6C:22:76:40:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:41:53:ca:00:79:4b:7b:16:5f:98:16:67:41:4c:b2:23:c0: 32:8d:5a:c4:61:20:a6:bf:38:02:3d:a7:82:3b:4f:7b:e9:ed: 94:84:fc:2a:f6:e3:42:99:a6:ee:ca:03:27:f5:d0:c0:5d:de: 5d:07:3f:b6:dd:17:bb:8a:5a:df:99:47:97:4b:72:56:bb:74: 8d:00:88:44:c3:d6:d3:31:2c:dc:51:7c:cc:1b:1e:31:a7:bf: 0c:ea:83:67:a1:6c:1b:04:14:74:07:21:6c:24:8b:05:15:5c: 12:30:71:94:7b:c2:b6:bd:56:2a:ba:83:32:6f:16:4d:05:bf: 15:e2:75:8d:c8:65:3d:c3:c7:43:c1:e0:e4:23:ac:f3:54:5a: 6e:d4:5b:01:70:3d:75:04:77:7a:f8:fd:74:07:cd:a4:ec:cf: e6:8d:70:5f:47:2d:22:f0:16:fa:53:e8:52:a0:69:f8:62:e0: 8b:da:4b:e8:0f:33:60:74:b0:b6:36:66:e2:4d:6d:e9:db:fc: de:2b:a3:2b:b6:9c:d2:88:19:13:84:3a:dd:62:f2:15:9d:6c: aa:ec:17:a8:ac:b0:5b:78:5a:74:da:1e:55:32:25:4c:c0:6c: 3d:c4:65:2e:3d:6f:17:8f:2c:c8:b5:ea:88:68:61:dc:27:f6: 6a:3a:7b:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTxyLTHj/eGK9y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YTA4NzA3MDAtN2QxNi00MjAzLThhZjQtYzU3ZDI1NjZiZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSD2z11+Q85qXC/nmGwLfTZ54WSpmN1iYSz0 5UQ+LhTyNi+EgtIxQ5ZD7D7+UlAiRFc7vx2bAjXstnRFVJqjlwpncStH/6eadutm YSB+NKvtlRPJBFh0gkbLSU15wUSryxfo7VSrsFYlQC8QW65DXDzgwJ/0TRaobJnW Bdt1OS1OK4zfPXlQY/4t5j5aD5vh9N4b2Kj1uN7Zv0Q14D30aYRKbF7D5bC4WeBm mw0Wf/nqOPAF/ZY3KvZcR/6Ufo+oUHxQaxxD1fb5ajCX1tS0xwoYXFKi5p6Yh4t4 GyqvDryXpaA6W808TOwTkOoxrQBfcqf0Kp//Hj/BnnhsgI3sswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFLOh9yS6jkvh7U0wSzZcGwidkBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWVhNjMwOGEtNGViNy0z ZDkzLWI4M2EtYTgyODkwMWI1YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNBU8oAeUt7Fl+YFmdBTLIjwDKNWsRhIKa/OAI9p4I7T3vp7ZSE /Cr240KZpu7KAyf10MBd3l0HP7bdF7uKWt+ZR5dLcla7dI0AiETD1tMxLNxRfMwb HjGnvwzqg2ehbBsEFHQHIWwkiwUVXBIwcZR7wra9Viq6gzJvFk0FvxXidY3IZT3D x0PB4OQjrPNUWm7UWwFwPXUEd3r4/XQHzaTsz+aNcF9HLSLwFvpT6FKgafhi4Iva S+gPM2B0sLY2ZuJNbenb/N4royu2nNKIGROEOt1i8hWdbKrsF6issFt4WnTaHlUy JUzAbD3EZS49bxePLMi16ohoYdwn9mo6e3c= -----END CERTIFICATE-----Generated at Sat Jun 13 07:24:54 2026 by rpki-client