$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a64161b8-d518-3362-a517-e8a1b3c85e63.roa File: a64161b8-d518-3362-a517-e8a1b3c85e63.roa (raw, json) Hash identifier: YepW1gqodsNlTupBpOGsMcAPkaPxxNf0NJBQFdg1P+4= Subject key identifier: 11:C0:B6:36:67:88:8B:35:50:5F:01:8D:E4:7B:D5:F2:49:E8:3B:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFD376B6B72B47404C8F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a64161b8-d518-3362-a517-e8a1b3c85e63.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:fd:37:6b:6b:72:b4:74:04:c8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=7a2acb30-cf70-4433-9154-8d5761a33f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c2:52:eb:81:9f:70:5d:57:48:60:7f:97:10: 31:5d:84:dd:d6:3a:42:7d:af:cf:70:05:d8:a7:1e: ef:c7:9b:38:30:db:49:55:12:29:fc:b1:a4:da:a7: 24:f3:c0:bd:4c:cb:8e:07:66:74:78:96:cf:54:6a: 7d:8b:48:3f:49:84:f0:ee:73:b4:44:40:c6:ec:fc: 3b:88:63:ce:84:d7:84:a4:cd:61:c3:af:b4:07:8c: a0:6d:67:31:6a:54:44:b6:c7:bf:6a:75:f6:ee:bd: 10:66:92:54:79:37:89:0b:41:a2:a3:f8:cc:a0:d3: 38:b9:41:6b:7e:3b:b2:e6:55:a2:68:a5:fe:9b:52: 60:d8:5d:3c:2b:1f:95:1c:2f:26:8b:68:80:4a:29: 91:9f:04:7d:01:4c:0a:a5:00:ea:d5:d9:74:4e:ea: bb:5f:bb:b2:46:36:31:7b:7a:25:bc:1d:41:19:38: 7d:43:3c:d3:57:4e:50:d3:9b:64:ae:61:6c:1e:1b: 81:6b:49:ac:ff:b4:63:3d:6c:46:c8:24:e9:d7:38: b5:9d:93:38:34:71:24:39:4e:66:05:2e:bb:7c:3f: 2a:bc:21:07:62:65:9a:13:3d:0d:70:77:b1:23:cd: 5d:a5:5e:97:dd:86:da:3f:2b:86:6f:2d:eb:01:c1: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:B6:36:67:88:8B:35:50:5F:01:8D:E4:7B:D5:F2:49:E8:3B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a64161b8-d518-3362-a517-e8a1b3c85e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c5:45:da:8d:31:0e:a2:74:e3:ab:83:71:04:1a:cf:fa:44: 88:89:34:2a:ec:3a:e9:fd:70:7d:c1:ec:5f:33:bd:92:3e:56: 07:49:75:dc:e9:f4:c9:5a:a8:d0:01:78:51:39:cd:86:07:bb: 34:ed:a1:82:4f:f2:d7:51:11:cd:2c:c7:fa:20:e1:20:de:4a: d5:31:e0:f1:b7:b5:d8:cf:02:97:df:d4:cd:e7:a7:e7:23:7f: 05:e4:4a:9d:ef:b7:df:f0:95:d9:56:5e:fe:c5:0a:f1:00:71: 12:f8:a4:f8:80:7e:36:61:45:1f:8e:59:d6:2a:ad:27:2a:9d: d7:30:10:38:8f:cf:3c:6c:84:5d:cf:ea:2c:4b:4f:5c:ea:83: b8:17:e4:fa:02:fc:12:c3:2b:6b:9b:9a:5c:30:d0:fd:07:88: 8d:f9:8f:0d:6e:b9:2b:d1:3e:d3:f9:0c:04:25:78:85:4f:72: 04:90:9a:2a:76:fe:21:12:1c:0d:22:f1:dc:63:a0:af:45:c5: d0:d1:bc:cc:9c:b0:68:99:9e:38:cb:23:5e:0d:09:61:b8:bb: 1e:7b:06:14:de:de:94:96:66:f4:bf:1c:9b:44:7e:ff:fa:74: 4d:26:03:c9:1a:59:81:35:5f:88:a1:c4:c5:77:ab:9e:ed:f1: 9d:f7:ff:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTv03a2tytHQEyPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk N2EyYWNiMzAtY2Y3MC00NDMzLTkxNTQtOGQ1NzYxYTMzZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcJS64GfcF1XSGB/lxAxXYTd1jpCfa/PcAXY px7vx5s4MNtJVRIp/LGk2qck88C9TMuOB2Z0eJbPVGp9i0g/SYTw7nO0REDG7Pw7 iGPOhNeEpM1hw6+0B4ygbWcxalREtse/anX27r0QZpJUeTeJC0Gio/jMoNM4uUFr fjuy5lWiaKX+m1Jg2F08Kx+VHC8mi2iASimRnwR9AUwKpQDq1dl0Tuq7X7uyRjYx e3olvB1BGTh9QzzTV05Q05tkrmFsHhuBa0ms/7RjPWxGyCTp1zi1nZM4NHEkOU5m BS67fD8qvCEHYmWaEz0NcHexI81dpV6X3YbaPyuGby3rAcGuOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBHAtjZniIs1UF8BjeR71fJJ6Dt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY0MTYxYjgtZDUxOC0z MzYyLWE1MTctZThhMWIzYzg1ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABrFRdqNMQ6idOOrg3EEGs/6RIiJNCrsOun9cH3B7F8zvZI+VgdJ ddzp9MlaqNABeFE5zYYHuzTtoYJP8tdREc0sx/og4SDeStUx4PG3tdjPApff1M3n p+cjfwXkSp3vt9/wldlWXv7FCvEAcRL4pPiAfjZhRR+OWdYqrScqndcwEDiPzzxs hF3P6ixLT1zqg7gX5PoC/BLDK2ubmlww0P0HiI35jw1uuSvRPtP5DAQleIVPcgSQ mip2/iESHA0i8dxjoK9FxdDRvMycsGiZnjjLI14NCWG4ux57BhTe3pSWZvS/HJtE fv/6dE0mA8kaWYE1X4ihxMV3q57t8Z33/2g= -----END CERTIFICATE-----Generated at Sat Jun 13 06:03:07 2026 by rpki-client