$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89cdf212-8681-3edc-9906-86e614e29de0.roa File: 89cdf212-8681-3edc-9906-86e614e29de0.roa (raw, json) Hash identifier: mqEQ4QNQd1a4ATkTHodPY6iql8S3/0sd9GiwsrjK5dg= Subject key identifier: 3B:0C:23:1E:FE:9A:F0:F3:B1:90:57:AD:1C:09:F1:AA:54:F8:A0:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1C750D157521D6CCF980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89cdf212-8681-3edc-9906-86e614e29de0.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1c:75:0d:15:75:21:d6:cc:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=dcf3e674-d459-425d-bdeb-982a3f324a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:03:7e:6c:eb:f8:76:0d:84:9f:cc:e9:ce: 45:bd:3c:7a:51:73:f5:a0:d5:57:cc:0e:8e:97:8a: 28:8c:82:34:c3:c2:91:e1:0e:79:ce:52:05:6c:a5: f6:18:9b:c6:59:c2:d7:3f:c2:0b:82:e3:85:eb:3a: 7d:27:41:d9:2d:29:4d:9f:b1:47:00:01:8f:d0:79: b8:f3:ec:64:74:9e:7d:3d:1a:c0:09:00:42:38:ec: a1:a3:6d:88:dc:8d:2f:72:5b:c7:f5:58:af:6f:4e: 72:47:4c:cc:fd:a7:97:31:aa:00:c3:51:75:76:59: 47:be:ae:f5:e5:8e:ce:35:61:03:10:32:f9:8a:86: 98:b7:8a:64:55:05:f6:b2:21:75:1d:7e:f9:f9:3c: ea:ac:19:5b:96:76:52:9d:14:b1:79:21:bd:7b:5c: a5:eb:9d:d8:b7:11:80:18:9a:0a:f7:93:9f:f3:83: 49:b0:99:49:da:f8:dc:14:a7:bd:c0:bd:b3:a7:ad: cb:81:93:b3:e9:d6:94:28:4a:43:1f:8d:fd:7d:bb: 8e:ca:f6:2f:65:1a:2b:cd:83:56:c8:fd:73:30:59: 2a:99:60:80:fa:98:db:f6:66:a5:d0:6b:a4:b7:36: 8a:32:40:58:cb:3f:e5:c8:3b:6a:b1:8b:19:a8:e7: 06:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0C:23:1E:FE:9A:F0:F3:B1:90:57:AD:1C:09:F1:AA:54:F8:A0:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89cdf212-8681-3edc-9906-86e614e29de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e9:1e:83:69:74:68:f7:af:7c:04:47:14:2f:11:bb:87:3d: a1:6d:66:3d:45:7c:77:2c:36:89:fd:69:32:ae:92:57:36:91: 74:78:fd:ab:4c:22:68:02:d6:a3:d1:1c:1b:1d:75:a4:6a:fe: 72:c1:70:3a:ae:9b:db:3e:3f:ab:2e:f5:98:d0:90:c7:77:49: 20:73:e9:cf:f0:03:a3:df:a0:39:46:26:11:d6:36:c7:e2:b4: 4b:de:8d:92:c5:30:00:a3:48:6b:a5:91:56:03:1a:59:07:fe: fa:25:9e:94:f5:50:61:32:d4:10:09:83:35:9f:04:3b:9e:8d: b9:c6:23:9d:f7:25:4f:9a:5d:72:5c:11:fd:5f:11:93:54:be: 1e:ee:ac:f8:21:96:2a:a8:7a:2f:75:32:c5:90:8f:d0:dc:b3: f4:c9:de:75:c7:8e:28:0d:23:4b:5c:c4:e9:c9:4e:09:06:21: 54:24:0d:5f:e8:d3:07:84:c9:48:9c:60:90:a0:9e:42:d3:78: bf:49:cf:d3:11:32:54:f3:2c:78:f6:02:d4:be:c5:c7:3c:3d: 0d:70:9c:c2:21:79:03:cb:7b:da:db:98:5b:1b:a1:9b:80:b4: 43:72:9d:96:8a:60:66:c4:cf:14:51:df:a5:f7:ca:d9:b4:26: bf:0f:43:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTxx1DRV1IdbM+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZGNmM2U2NzQtZDQ1OS00MjVkLWJkZWItOTgyYTNmMzI0YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTsDfmzr+HYNhJ/M6c5FvTx6UXP1oNVXzA6O l4oojII0w8KR4Q55zlIFbKX2GJvGWcLXP8ILguOF6zp9J0HZLSlNn7FHAAGP0Hm4 8+xkdJ59PRrACQBCOOyho22I3I0vclvH9Vivb05yR0zM/aeXMaoAw1F1dllHvq71 5Y7ONWEDEDL5ioaYt4pkVQX2siF1HX75+TzqrBlblnZSnRSxeSG9e1yl653YtxGA GJoK95Of84NJsJlJ2vjcFKe9wL2zp63LgZOz6daUKEpDH439fbuOyvYvZRorzYNW yP1zMFkqmWCA+pjb9mal0GuktzaKMkBYyz/lyDtqsYsZqOcG6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDsMIx7+mvDzsZBXrRwJ8apU+KA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODljZGYyMTItODY4MS0z ZWRjLTk5MDYtODZlNjE0ZTI5ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFLpHoNpdGj3r3wERxQvEbuHPaFtZj1FfHcsNon9aTKuklc2kXR4 /atMImgC1qPRHBsddaRq/nLBcDqum9s+P6su9ZjQkMd3SSBz6c/wA6PfoDlGJhHW NsfitEvejZLFMACjSGulkVYDGlkH/volnpT1UGEy1BAJgzWfBDuejbnGI533JU+a XXJcEf1fEZNUvh7urPghliqoei91MsWQj9Dcs/TJ3nXHjigNI0tcxOnJTgkGIVQk DV/o0weEyUicYJCgnkLTeL9Jz9MRMlTzLHj2AtS+xcc8PQ1wnMIheQPLe9rbmFsb oZuAtENynZaKYGbEzxRR36X3ytm0Jr8PQ2Y= -----END CERTIFICATE-----Generated at Sat Jun 13 19:15:08 2026 by rpki-client