$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cf93025-4317-36ae-8a0b-2747749b1f8c.roa File: 9cf93025-4317-36ae-8a0b-2747749b1f8c.roa (raw, json) Hash identifier: cknvp80kSYujRTa2k0ZZvarZcAmycYmzBSXsu+DDVOE= Subject key identifier: 4F:31:EE:7B:91:CB:4C:52:5B:3A:86:82:DE:43:09:F5:47:54:CB:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFC2DCE78B7425AE7D400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cf93025-4317-36ae-8a0b-2747749b1f8c.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:fc:2d:ce:78:b7:42:5a:e7:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=0d216012-0f9f-47ac-82be-0f9908b274f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7e:ff:60:0f:ea:88:a8:9c:6b:70:bd:98:24: 02:4a:ed:4a:27:f1:2a:14:25:a1:74:9a:82:4c:1a: b4:18:4e:e4:6f:ee:31:12:6d:69:25:d7:89:e3:d3: ae:79:8e:f5:2c:2a:ec:fb:55:56:6f:db:20:3d:25: 31:d9:70:f6:af:45:94:dd:4a:67:40:b9:78:2b:2f: b7:de:a6:19:1e:a8:b9:ea:cc:b0:bb:a0:fa:7b:61: af:1f:3d:47:9e:45:a9:63:8f:e9:f3:75:0e:c1:fd: f3:63:d4:79:57:31:e7:b4:36:92:16:74:df:2c:69: 53:0a:89:99:67:4e:0f:67:d9:23:48:e6:94:65:61: 16:6d:a1:75:79:00:28:ad:15:99:9d:47:c4:63:d0: a3:21:96:79:a5:86:b2:30:9b:c6:99:fe:84:47:4f: 09:cc:24:b4:08:2b:8f:6e:ff:11:a6:43:89:e7:3a: 03:05:29:73:75:dd:0a:d6:0b:f3:19:38:bf:c5:5a: 35:52:3f:42:21:ab:ff:a8:0d:88:10:be:e1:db:41: 81:7b:53:06:cf:f0:94:74:59:74:db:14:c5:d1:45: 29:47:1f:3d:eb:82:45:9f:32:09:33:a2:b9:4e:ec: 25:f5:25:4d:2e:1c:0c:1d:dc:48:fa:53:03:28:05: 52:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:31:EE:7B:91:CB:4C:52:5B:3A:86:82:DE:43:09:F5:47:54:CB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cf93025-4317-36ae-8a0b-2747749b1f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b3:d5:a5:24:73:70:23:40:4f:f9:e2:65:7e:70:ec:7f:08: 70:05:8b:aa:db:93:45:cc:89:3a:4c:d7:4a:c5:20:3b:fc:74: 47:51:66:ca:e1:60:d9:6b:03:e6:81:90:e3:f3:38:fc:04:b4: cd:67:6a:59:78:55:07:e3:84:65:66:70:c0:14:35:ae:6f:48: f0:ae:9c:c1:0a:20:30:dc:87:28:7a:bf:4c:7d:d2:8a:12:9d: 3b:ea:59:33:34:f8:6e:3c:f7:18:7f:02:1f:55:45:24:5d:17: ee:d7:c0:6d:29:54:e9:47:23:a2:68:08:06:b7:eb:d7:55:e5: 64:b2:27:51:9a:6b:69:5b:93:21:78:ee:8f:57:d1:9a:ac:bf: 1f:d5:e0:7c:9b:83:34:40:89:e3:28:22:40:e7:82:8f:8d:d2: 4f:a0:9d:ee:ac:ce:2d:15:18:51:d9:1a:fd:18:5c:7c:e1:f0: e9:bb:39:98:bd:bb:e7:66:df:c5:f7:27:a0:25:60:75:55:0a: d4:0d:84:02:00:8e:35:19:12:cf:b4:ca:74:69:01:10:7f:71: d8:09:e3:d2:e6:46:01:56:f6:41:53:c7:db:35:e9:56:df:6b: 7e:c0:98:a8:d2:0b:21:ad:ce:74:3a:9d:72:51:3f:72:6a:7a: 41:9c:0d:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTvwtzni3Qlrn1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MGQyMTYwMTItMGY5Zi00N2FjLTgyYmUtMGY5OTA4YjI3NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm37/YA/qiKica3C9mCQCSu1KJ/EqFCWhdJqC TBq0GE7kb+4xEm1pJdeJ49OueY71LCrs+1VWb9sgPSUx2XD2r0WU3UpnQLl4Ky+3 3qYZHqi56sywu6D6e2GvHz1HnkWpY4/p83UOwf3zY9R5VzHntDaSFnTfLGlTComZ Z04PZ9kjSOaUZWEWbaF1eQAorRWZnUfEY9CjIZZ5pYayMJvGmf6ER08JzCS0CCuP bv8RpkOJ5zoDBSlzdd0K1gvzGTi/xVo1Uj9CIav/qA2IEL7h20GBe1MGz/CUdFl0 2xTF0UUpRx8964JFnzIJM6K5Tuwl9SVNLhwMHdxI+lMDKAVSBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE8x7nuRy0xSWzqGgt5DCfVHVMtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNmOTMwMjUtNDMxNy0z NmFlLThhMGItMjc0Nzc0OWIxZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiz1aUkc3AjQE/54mV+cOx/CHAFi6rbk0XMiTpM10rFIDv8dEdR ZsrhYNlrA+aBkOPzOPwEtM1nall4VQfjhGVmcMAUNa5vSPCunMEKIDDchyh6v0x9 0ooSnTvqWTM0+G489xh/Ah9VRSRdF+7XwG0pVOlHI6JoCAa369dV5WSyJ1Gaa2lb kyF47o9X0Zqsvx/V4HybgzRAieMoIkDngo+N0k+gne6szi0VGFHZGv0YXHzh8Om7 OZi9u+dm38X3J6AlYHVVCtQNhAIAjjUZEs+0ynRpARB/cdgJ49LmRgFW9kFTx9s1 6Vbfa37AmKjSCyGtznQ6nXJRP3JqekGcDYI= -----END CERTIFICATE-----Generated at Sat Jun 13 06:05:25 2026 by rpki-client