$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa File: ae55df24-7c19-3bfc-87d0-5689589fa0de.roa (raw, json) Hash identifier: CM5hNEF67SquMWQO0+SJCdPeb4yl4lpC8EkML6Qg+p8= Subject key identifier: 6D:5C:93:4D:A1:D2:45:6D:71:DE:4F:DA:50:55:2C:E7:DE:35:BB:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1C477F8F184D1E243360 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1c:47:7f:8f:18:4d:1e:24:33:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=2b6220af-62a2-4f23-8fb5-856a72cd7323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:e9:a7:ac:19:d8:5c:02:86:77:42:6c:7d: d0:07:28:5b:4f:a3:cd:fc:37:e5:25:28:a6:b5:f2: fa:4e:95:57:97:58:52:67:e4:ea:ef:ae:cc:41:e0: f8:c0:15:98:5b:45:d5:50:7f:ab:a3:ec:61:92:77: a4:02:e5:0d:10:c1:f4:66:d0:ef:1d:2d:e5:d7:93: 16:e7:2c:3f:6e:e2:33:70:14:f2:dc:12:80:ac:4b: a9:ba:88:99:02:a8:5e:ac:eb:ac:7a:c3:13:a8:64: 68:a6:4a:1c:fe:b0:6a:47:5e:a3:af:3d:7b:3d:0a: ee:56:82:26:ae:fb:2f:81:d4:09:bd:60:a9:61:cb: 8e:82:bc:0a:f8:0a:31:2e:04:fc:67:0b:df:5b:86: 1d:e0:6a:3f:6a:54:39:99:ff:1b:15:32:fb:f9:3a: af:e6:32:03:d1:93:df:52:c4:00:81:c8:0d:40:0a: d7:fb:e2:78:62:00:11:1f:ad:37:22:33:68:65:88: d7:b5:0d:da:41:df:52:ac:08:5a:89:f6:50:5b:5d: f0:5a:8a:1f:04:d2:5a:b4:20:2e:a5:be:cb:93:45: ec:d4:e1:3a:33:bb:a4:31:b1:fe:a2:60:c0:37:5b: f4:da:4d:31:3d:77:fc:8f:3f:6c:47:6d:2f:77:6c: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5C:93:4D:A1:D2:45:6D:71:DE:4F:DA:50:55:2C:E7:DE:35:BB:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:39:68:31:05:9f:f7:a6:98:c9:ea:8d:43:98:6a:21:a5:23: 93:d3:37:ef:8b:d4:44:59:66:99:c7:33:b3:84:04:e7:a5:09: af:a5:00:38:31:0c:93:df:bc:5a:3d:c1:9e:4f:38:7a:2c:27: 08:11:47:26:f5:4f:62:64:da:fc:6c:0a:09:96:0a:a3:f3:29: 1f:e4:7b:de:1a:9b:b6:af:51:11:70:45:fe:42:17:a8:da:b3: 95:b3:02:2f:de:80:44:af:ef:0f:2b:53:ae:ec:d1:ac:64:93: e4:f8:4e:cc:c1:1a:95:32:fe:3b:3b:f4:ed:65:6e:2d:f4:ee: 18:b7:e6:84:d2:f3:08:ca:b2:e5:68:87:e0:02:5c:e9:b6:83: f2:4d:d7:7e:1a:f5:bf:97:82:6b:36:d9:48:4c:6b:94:0c:d8: ff:ac:a1:b5:84:06:9c:5c:0e:e9:9d:f5:50:d8:46:72:0e:5f: d4:2d:b5:14:fa:fd:ef:f0:ee:fa:4c:8f:1e:97:e0:dd:b0:33: 7e:16:22:2d:78:81:2c:36:c1:11:82:b2:68:ef:d9:a6:87:a3: 39:ba:52:47:26:35:ef:fe:4d:cf:7e:21:9a:ec:eb:84:de:07: ac:5d:20:c8:29:02:8a:7c:5e:52:6c:dc:02:f8:e1:6c:e8:5c: 83:2c:8f:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTxxHf48YTR4kM2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MmI2MjIwYWYtNjJhMi00ZjIzLThmYjUtODU2YTcyY2Q3MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nbpp6wZ2FwChndCbH3QByhbT6PN/DflJSim tfL6TpVXl1hSZ+Tq767MQeD4wBWYW0XVUH+ro+xhknekAuUNEMH0ZtDvHS3l15MW 5yw/buIzcBTy3BKArEupuoiZAqherOusesMTqGRopkoc/rBqR16jrz17PQruVoIm rvsvgdQJvWCpYcuOgrwK+AoxLgT8ZwvfW4Yd4Go/alQ5mf8bFTL7+Tqv5jID0ZPf UsQAgcgNQArX++J4YgARH603IjNoZYjXtQ3aQd9SrAhaifZQW13wWoofBNJatCAu pb7Lk0Xs1OE6M7ukMbH+omDAN1v02k0xPXf8jz9sR20vd2y/UwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG1ck02h0kVtcd5P2lBVLOfeNbvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWU1NWRmMjQtN2MxOS0z YmZjLTg3ZDAtNTY4OTU4OWZhMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADw5aDEFn/emmMnqjUOYaiGlI5PTN++L1ERZZpnHM7OEBOelCa+l ADgxDJPfvFo9wZ5POHosJwgRRyb1T2Jk2vxsCgmWCqPzKR/ke94am7avURFwRf5C F6jas5WzAi/egESv7w8rU67s0axkk+T4TszBGpUy/js79O1lbi307hi35oTS8wjK suVoh+ACXOm2g/JN134a9b+Xgms22UhMa5QM2P+sobWEBpxcDumd9VDYRnIOX9Qt tRT6/e/w7vpMjx6X4N2wM34WIi14gSw2wRGCsmjv2aaHozm6UkcmNe/+Tc9+IZrs 64TeB6xdIMgpAop8XlJs3AL44WzoXIMsj28= -----END CERTIFICATE-----Generated at Sat Jun 13 07:17:00 2026 by rpki-client