$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa File: a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa (raw, json) Hash identifier: GSqVxevOELFM5ySmycPdeCaRpoDNc/cmR8tk4yIu8q8= Subject key identifier: D3:CE:33:93:EB:BC:C6:7C:65:C2:F3:59:FD:A9:96:92:76:4F:35:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1CA20A37596A38B93A60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1c:a2:0a:37:59:6a:38:b9:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=f1118d0a-18b9-472a-a703-169cad152fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:4f:b4:34:45:c9:2a:f4:15:b5:e5:f0:53: ec:f9:1d:d5:c1:6f:98:52:b9:19:8f:f6:ed:59:40: 53:f0:c6:2f:3b:2d:78:f5:e2:d1:8e:35:14:72:e8: e0:43:ab:0e:00:5b:bc:28:15:f4:5d:92:9c:b8:dc: 28:79:b5:00:e7:24:09:d9:a9:ae:f6:fc:5e:7c:18: d2:b1:40:38:f0:c7:e4:ca:06:b6:a8:37:03:5f:cc: 57:f1:9e:15:65:2d:b6:60:1b:91:ff:d1:03:41:fd: 9a:c9:bb:f8:89:e4:7b:30:15:9c:14:6a:fe:ed:bc: de:1d:85:aa:eb:99:2c:25:8b:21:2e:fd:31:54:4a: ca:7a:cf:7d:b5:2d:4f:63:a7:d8:57:09:f6:34:85: a3:87:9a:99:0f:89:b4:3f:b2:8f:3f:30:d1:01:65: af:19:83:50:93:93:cf:1a:44:ae:84:85:5e:0e:a8: 0e:ae:c3:17:66:c8:d9:c9:5a:d4:6e:47:06:6c:ad: ae:63:c7:23:f0:c1:90:52:a4:a1:c4:ae:d4:7b:bf: d4:61:ba:0c:7c:76:01:4e:7a:67:ed:69:f3:97:e1: 42:0c:a6:8f:7d:8d:fd:61:45:22:ac:db:bb:df:e3: ca:e7:01:55:11:0c:81:71:57:f0:fe:b3:5f:f1:66: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CE:33:93:EB:BC:C6:7C:65:C2:F3:59:FD:A9:96:92:76:4F:35:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:46:c7:d3:33:a3:85:4c:b6:c5:e9:89:74:cd:50:b1:ab:17: 7a:ed:83:52:02:e6:3e:60:2f:1a:02:91:65:16:47:a9:5d:9c: 36:a2:4e:e5:26:05:ea:cd:a3:31:bf:dd:1c:c9:5f:dd:6f:db: 90:6c:0c:54:e4:cb:1d:75:38:f3:21:c8:5c:7d:1d:75:71:ed: 3f:15:f2:30:9b:76:dd:cf:ea:3b:bd:82:9b:b4:c1:30:40:1b: 3e:54:9f:98:14:e4:19:18:b3:40:3f:9a:ba:d8:43:16:26:11: 3b:6e:a4:8b:f4:cf:bc:74:a8:6a:f6:4e:1b:cc:9b:f2:a4:6f: a1:e6:48:48:e5:89:b0:ed:fc:64:66:67:a0:17:d5:b9:d2:1e: 1c:26:d8:d3:a1:aa:66:f8:32:1f:0a:65:0b:a4:e5:3b:d9:d7: 76:14:17:d1:01:d5:48:13:5f:de:9e:c3:8a:17:07:55:a5:dc: 6a:2a:76:53:50:72:5f:00:0a:e4:d6:a6:3f:d7:7e:29:15:a8: d6:55:6e:64:ca:88:ea:78:07:85:d2:f1:23:34:4e:b0:fb:3f: 10:eb:c7:68:cd:4d:05:22:dd:4c:70:f0:9c:e6:b5:98:d3:68: 7e:e0:b7:03:ca:e5:50:1d:ec:02:5e:2f:19:1d:c4:e6:38:62: 88:36:99:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTxyiCjdZaji5OmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZjExMThkMGEtMThiOS00NzJhLWE3MDMtMTY5Y2FkMTUyZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRlPtDRFySr0FbXl8FPs+R3VwW+YUrkZj/bt WUBT8MYvOy149eLRjjUUcujgQ6sOAFu8KBX0XZKcuNwoebUA5yQJ2amu9vxefBjS sUA48Mfkyga2qDcDX8xX8Z4VZS22YBuR/9EDQf2aybv4ieR7MBWcFGr+7bzeHYWq 65ksJYshLv0xVErKes99tS1PY6fYVwn2NIWjh5qZD4m0P7KPPzDRAWWvGYNQk5PP GkSuhIVeDqgOrsMXZsjZyVrUbkcGbK2uY8cj8MGQUqShxK7Ue7/UYboMfHYBTnpn 7Wnzl+FCDKaPfY39YUUirNu73+PK5wFVEQyBcVfw/rNf8Wag6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPOM5PrvMZ8ZcLzWf2plpJ2TzWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNjNzlmMjgtZmE4YS0z MjY3LWE2ZjAtZDEwOTlkNjA0YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAxGx9Mzo4VMtsXpiXTNULGrF3rtg1IC5j5gLxoCkWUWR6ldnDai TuUmBerNozG/3RzJX91v25BsDFTkyx11OPMhyFx9HXVx7T8V8jCbdt3P6ju9gpu0 wTBAGz5Un5gU5BkYs0A/mrrYQxYmETtupIv0z7x0qGr2ThvMm/Kkb6HmSEjlibDt /GRmZ6AX1bnSHhwm2NOhqmb4Mh8KZQuk5TvZ13YUF9EB1UgTX96ew4oXB1Wl3Goq dlNQcl8ACuTWpj/XfikVqNZVbmTKiOp4B4XS8SM0TrD7PxDrx2jNTQUi3Uxw8Jzm tZjTaH7gtwPK5VAd7AJeLxkdxOY4Yog2mRk= -----END CERTIFICATE-----Generated at Sat Jun 13 06:00:50 2026 by rpki-client