$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/add55bdb-6ba7-3da3-ac0a-b35270aad630.roa File: add55bdb-6ba7-3da3-ac0a-b35270aad630.roa (raw, json) Hash identifier: a5tifyD1cjjmQqPKmvVySH4iFjvS9Ae0Tp198DM1KCo= Subject key identifier: 4F:99:4C:8F:3F:0A:C4:0D:0F:D2:00:D6:FB:EE:0E:4D:A7:8B:BA:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7A0F3CF240257A1C9880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/add55bdb-6ba7-3da3-ac0a-b35270aad630.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 2607:fd68::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7a:0f:3c:f2:40:25:7a:1c:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=a3060e5e-e858-4ec3-b2ce-36a778662001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:e0:97:a8:b6:1c:c0:ec:2f:90:1c:54:49: 39:a0:ba:dc:59:5b:4c:e2:b8:86:d7:65:57:95:3b: 7d:93:ba:7e:06:8d:0f:88:da:19:2e:72:be:75:cb: 6f:e6:1a:7b:a1:6b:4d:9c:9e:e7:ee:6c:ee:61:3d: 1d:08:e6:12:77:45:99:85:ff:71:54:f5:e6:b6:d6: eb:62:34:4d:9b:9c:3f:a6:bb:08:1a:3c:01:0c:ce: 90:2e:cd:f8:e0:38:28:53:85:73:c4:7c:2d:b9:9a: 61:99:38:65:23:4b:fd:d9:d6:dc:48:04:bb:03:d1: f4:c2:8d:51:2e:b9:68:b1:16:4b:fd:fd:81:16:af: 07:b0:01:58:4d:1f:bc:80:c3:5a:e3:ac:9f:fd:d0: df:38:f0:33:fe:99:09:7b:91:5b:93:a6:7f:53:95: 3b:22:fa:ec:b4:bc:28:f4:3f:0e:68:87:f6:de:c9: ce:ed:0e:c2:67:58:ec:98:29:1e:e4:fd:64:d7:bd: ce:d2:9b:17:9b:83:64:1b:1d:65:aa:b1:f9:ed:e6: 52:64:e3:85:90:d5:a3:10:7d:79:b2:e1:d9:d0:e0: e5:5f:34:bf:6e:ef:83:1b:61:5a:77:69:cd:25:60: 2c:f9:2e:da:62:22:36:b7:09:cc:2f:40:6a:45:86: e0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:99:4C:8F:3F:0A:C4:0D:0F:D2:00:D6:FB:EE:0E:4D:A7:8B:BA:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/add55bdb-6ba7-3da3-ac0a-b35270aad630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fd68::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d7:2c:0d:52:90:5e:a0:94:43:71:2d:14:d2:3c:f4:83:11: 1c:d2:f1:1a:e1:e6:39:41:ff:36:2b:7f:ca:fe:5e:c5:9e:3e: 25:09:37:40:82:13:df:f4:ad:01:63:21:aa:02:85:d3:c9:7b: 26:86:88:ba:27:98:14:13:28:d0:e6:8d:b5:1c:36:89:2c:4c: 27:ba:f5:08:fd:2c:44:be:48:87:cc:fb:0a:9a:05:c6:81:ee: 56:df:2b:15:03:02:30:f3:c8:3b:21:50:75:68:85:8d:c2:97: f9:f7:1e:08:5c:07:71:28:79:a7:5a:62:2b:3e:8c:57:af:24: 2a:66:67:89:57:30:d9:68:dc:48:a3:6a:17:2b:4a:2c:b6:0a: 5c:9d:ba:f2:4f:bc:62:fe:98:84:59:f4:bb:2d:b5:8e:a5:77: b6:99:00:07:7e:60:5e:4b:dd:ed:4a:eb:ee:20:65:24:40:b5: b7:02:fa:98:f3:7f:c1:61:5b:a9:ed:a1:a8:ab:93:d5:d5:87: fc:04:5f:b8:59:98:e7:28:68:a4:39:7b:fd:7f:95:74:3a:7c: 11:4c:a1:42:49:16:f2:7a:56:d6:9d:8b:47:62:f0:96:46:7e: b0:41:58:92:e0:6c:d8:c1:6c:3e:91:00:64:76:c1:16:51:90: 67:78:7c:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9UnXoPPPJAJXocmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YTMwNjBlNWUtZTg1OC00ZWMzLWIyY2UtMzZhNzc4NjYyMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg3gl6i2HMDsL5AcVEk5oLrcWVtM4riG12VX lTt9k7p+Bo0PiNoZLnK+dctv5hp7oWtNnJ7n7mzuYT0dCOYSd0WZhf9xVPXmttbr YjRNm5w/prsIGjwBDM6QLs344DgoU4VzxHwtuZphmThlI0v92dbcSAS7A9H0wo1R LrlosRZL/f2BFq8HsAFYTR+8gMNa46yf/dDfOPAz/pkJe5Fbk6Z/U5U7IvrstLwo 9D8OaIf23snO7Q7CZ1jsmCke5P1k173O0psXm4NkGx1lqrH57eZSZOOFkNWjEH15 suHZ0ODlXzS/bu+DG2Fad2nNJWAs+S7aYiI2twnML0BqRYbgKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE+ZTI8/CsQND9IA1vvuDk2ni7rCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWRkNTViZGItNmJhNy0z ZGEzLWFjMGEtYjM1MjcwYWFkNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9aDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAB1ywNUpBeoJRDcS0U0jz0gxEc0vEa4eY5Qf82K3/K/l7Fnj4lCTdA ghPf9K0BYyGqAoXTyXsmhoi6J5gUEyjQ5o21HDaJLEwnuvUI/SxEvkiHzPsKmgXG ge5W3ysVAwIw88g7IVB1aIWNwpf59x4IXAdxKHmnWmIrPoxXryQqZmeJVzDZaNxI o2oXK0ostgpcnbryT7xi/piEWfS7LbWOpXe2mQAHfmBeS93tSuvuIGUkQLW3AvqY 83/BYVup7aGoq5PV1Yf8BF+4WZjnKGikOXv9f5V0OnwRTKFCSRbyelbWnYtHYvCW Rn6wQViS4GzYwWw+kQBkdsEWUZBneHzx -----END CERTIFICATE-----Generated at Sun Oct 4 10:30:38 2026 by rpki-client