$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa File: 9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa (raw, json) Hash identifier: dHx+m3FFvgC62+i/tKsDJ1P6DQaor9ZHok1aF6jGPqk= Subject key identifier: 52:8B:F5:1E:B5:09:56:21:E7:C7:13:DE:14:CD:69:20:1B:22:AC:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFD846F9769DDAB7E0880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:fd:84:6f:97:69:dd:ab:7e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=80c88ead-ec17-4bc4-bcd0-297c5bfef1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:78:83:b2:9b:af:f6:bf:59:f2:f3:5c:47:f6: 04:ec:7e:85:df:77:1b:f6:82:db:d1:2a:48:8a:a6: 3e:bf:40:a5:e1:90:6e:37:96:90:08:a1:73:db:34: 23:25:ed:44:ef:91:ba:3d:31:ee:fa:82:a2:02:43: ef:06:8c:2a:20:e8:81:32:75:b0:d5:13:5a:72:1a: cb:c5:bd:38:6f:1e:01:bd:e8:b7:aa:5f:f0:36:7d: 66:01:16:48:12:2e:76:c3:aa:8e:15:5a:e8:49:65: ea:ed:a9:ce:15:ed:af:95:c7:31:74:4e:01:91:0e: 0f:7f:ec:73:b3:17:17:49:eb:0e:da:bf:c4:b0:b9: 44:9f:75:b1:ce:43:90:7b:c3:4b:f5:85:97:f1:d9: f9:f3:8a:75:e4:2a:c0:5d:a7:b0:1c:d2:22:5d:80: 38:88:d3:52:8e:19:b0:d8:a5:a8:44:a8:ed:1c:eb: a4:07:4f:cd:92:81:6b:77:8d:3f:2e:9f:cd:66:0d: ee:2d:35:24:44:ab:e0:86:e9:fa:16:a0:b6:56:9b: ec:15:6a:ff:2c:f3:7b:af:f7:17:5a:8e:51:01:9b: 92:28:80:ef:93:38:10:c8:2e:0f:cd:0e:68:43:09: a3:da:c9:f7:6f:c7:13:b3:56:cf:39:ef:cd:bc:a7: f2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8B:F5:1E:B5:09:56:21:E7:C7:13:DE:14:CD:69:20:1B:22:AC:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ce:bb:14:02:ff:97:b3:d5:59:33:ae:bb:9f:be:a8:7a:0b: 98:b7:f6:c2:bf:a6:72:ef:ef:a5:02:84:e0:4e:e6:59:6b:cc: dd:05:a6:d0:ec:56:bf:88:fb:c0:d8:b1:d4:b4:3e:dd:b2:50: 6c:e6:f2:20:6d:55:21:b4:a0:a5:ed:b1:9e:32:49:5c:d0:e6: 5b:04:ff:51:bf:5d:1e:f3:b5:cc:39:28:94:84:e7:01:1b:7e: 43:8f:1c:c0:65:f0:96:2f:94:9a:c5:22:53:46:68:be:80:65: 0b:29:d8:5a:7c:78:de:f9:ab:e8:89:83:72:53:de:ff:05:5d: 83:96:31:66:18:84:43:62:7b:88:c4:ce:b7:02:a9:9a:f6:22: c6:87:5f:8a:fc:a5:e5:b9:23:9e:70:c0:6c:dc:49:55:47:71: 6a:4a:91:a6:49:5c:2f:26:e4:eb:85:16:af:30:3f:60:87:f2: 09:c3:02:10:b9:d5:f1:f8:2f:8a:1a:8c:4b:11:7d:ab:40:d6: 23:38:d9:e9:d0:3f:34:a9:81:75:20:59:5b:97:15:9c:fb:76: 9c:59:30:75:bb:10:e1:a6:85:91:29:74:4d:c7:59:1e:be:ec: 49:80:ad:a9:df:e7:5b:4d:b6:67:0c:e4:da:5f:51:05:4a:3b: 5a:7d:e6:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTv2Eb5dp3at+CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ODBjODhlYWQtZWMxNy00YmM0LWJjZDAtMjk3YzViZmVmMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXiDspuv9r9Z8vNcR/YE7H6F33cb9oLb0SpI iqY+v0Cl4ZBuN5aQCKFz2zQjJe1E75G6PTHu+oKiAkPvBowqIOiBMnWw1RNachrL xb04bx4Bvei3ql/wNn1mARZIEi52w6qOFVroSWXq7anOFe2vlccxdE4BkQ4Pf+xz sxcXSesO2r/EsLlEn3WxzkOQe8NL9YWX8dn584p15CrAXaewHNIiXYA4iNNSjhmw 2KWoRKjtHOukB0/NkoFrd40/Lp/NZg3uLTUkRKvghun6FqC2VpvsFWr/LPN7r/cX Wo5RAZuSKIDvkzgQyC4PzQ5oQwmj2sn3b8cTs1bPOe/NvKfy4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFKL9R61CVYh58cT3hTNaSAbIqy+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTAyMTE3NWQtZTk5ZC0z M2I2LTgwYmYtMWIyMmFjNGQyZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnOuxQC/5ez1Vkzrrufvqh6C5i39sK/pnLv76UChOBO5llrzN0F ptDsVr+I+8DYsdS0Pt2yUGzm8iBtVSG0oKXtsZ4ySVzQ5lsE/1G/XR7ztcw5KJSE 5wEbfkOPHMBl8JYvlJrFIlNGaL6AZQsp2Fp8eN75q+iJg3JT3v8FXYOWMWYYhENi e4jEzrcCqZr2IsaHX4r8peW5I55wwGzcSVVHcWpKkaZJXC8m5OuFFq8wP2CH8gnD AhC51fH4L4oajEsRfatA1iM42enQPzSpgXUgWVuXFZz7dpxZMHW7EOGmhZEpdE3H WR6+7EmAranf51tNtmcM5NpfUQVKO1p95vU= -----END CERTIFICATE-----Generated at Sat Jun 13 06:03:49 2026 by rpki-client