$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa File: b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa (raw, json) Hash identifier: ZYTmirKtlRsekxXt7QmGoNruKz+Z9xHK+EhpxHLtgA0= Subject key identifier: 7A:DA:C7:0A:3C:6A:5C:77:DF:28:D1:77:BC:03:D6:01:7A:B7:3E:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFEF13A433877128F8F58 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2607:f490::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:fe:f1:3a:43:38:77:12:8f:8f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=cefc0ae4-c6ee-4aeb-ae3d-48bb2a087f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a8:a9:d3:ac:0b:d0:8f:91:bc:7c:98:c7:61: b8:18:90:7b:1d:e3:f1:b9:61:b2:39:2b:29:6c:a2: 08:16:74:71:3b:c6:4a:0c:2e:72:3d:40:a5:7d:18: cf:18:cd:22:88:c9:85:d7:6c:b7:a4:97:3c:78:7c: 0b:4f:84:ef:a5:2a:12:8d:5e:57:2e:4f:43:01:7b: 8f:b9:bb:c5:a7:72:20:96:54:1d:e7:06:ac:67:88: 04:4d:6a:3c:ca:b8:e7:55:7c:dd:a3:de:11:e9:f8: 97:16:01:a7:60:01:e5:2c:0c:ae:10:f7:8c:18:8b: 32:e8:db:37:b9:b0:2e:3e:4d:c8:1c:c7:5f:e3:99: f7:f1:9d:f8:a8:6e:0e:35:75:aa:b9:22:74:83:a3: 70:c3:5b:65:59:c7:70:36:70:94:aa:06:81:ee:b0: dd:57:07:5e:39:1f:ec:4b:d6:6b:cf:8d:41:44:37: bc:1a:6a:63:c4:56:4f:3b:7c:0f:d7:20:c9:9f:c6: 0d:97:e6:8c:43:8a:bb:10:46:3d:81:e7:31:6e:72: 64:25:12:ad:4f:41:77:a6:2a:bd:96:9e:37:2d:48: 6e:7e:03:49:eb:7e:8c:91:ff:ad:41:51:ff:ba:ab: 2a:d9:df:9a:18:fe:a2:7b:08:77:38:84:61:b3:c8: 20:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DA:C7:0A:3C:6A:5C:77:DF:28:D1:77:BC:03:D6:01:7A:B7:3E:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f490::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4a:e6:17:3e:38:ae:e2:1c:3d:41:85:e9:e6:b5:f8:c8:7c: e8:9a:cd:28:9e:c9:66:3e:01:03:82:9a:31:47:fc:c5:b5:c4: ec:47:c4:98:45:91:8f:38:df:60:0e:26:64:e2:b0:a8:2b:06: ff:44:25:99:ab:ce:91:07:93:7b:04:ca:84:6f:01:ba:a8:29: 3d:1c:d0:d2:d5:ba:bd:61:c0:e2:76:1f:f8:b9:ad:e9:50:ba: 06:54:98:84:1e:97:01:bf:19:91:83:6e:75:6d:24:6b:f9:c3: 0c:79:df:d7:59:50:e0:33:5e:7c:3c:1c:42:a0:90:c4:f0:15: 80:e6:a3:ae:81:07:da:b0:37:0f:67:07:e6:13:e7:0d:3d:58: 51:04:10:c8:53:0f:eb:16:49:f1:7a:45:a8:3e:61:d9:2f:95: b9:e9:47:6e:36:ab:ea:bd:3b:7a:35:6f:ed:89:9b:03:09:d2: 3e:5a:bd:f5:bc:71:6c:71:41:dd:3f:6e:5a:1d:3f:bf:82:80: 3f:e5:3a:1c:83:56:6b:eb:86:75:f5:29:eb:99:9b:80:c8:cd: 8d:f3:6f:d1:c3:63:8c:67:85:d4:36:c0:a9:c1:93:f0:a3:2a: f9:8f:b8:98:91:73:d2:88:dc:3e:9f:52:fd:26:ee:1f:5b:33: e1:5b:79:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4QTv7xOkM4dxKPj1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk Y2VmYzBhZTQtYzZlZS00YWViLWFlM2QtNDhiYjJhMDg3ZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqip06wL0I+RvHyYx2G4GJB7HePxuWGyOSsp bKIIFnRxO8ZKDC5yPUClfRjPGM0iiMmF12y3pJc8eHwLT4TvpSoSjV5XLk9DAXuP ubvFp3IgllQd5wasZ4gETWo8yrjnVXzdo94R6fiXFgGnYAHlLAyuEPeMGIsy6Ns3 ubAuPk3IHMdf45n38Z34qG4ONXWquSJ0g6Nww1tlWcdwNnCUqgaB7rDdVwdeOR/s S9Zrz41BRDe8GmpjxFZPO3wP1yDJn8YNl+aMQ4q7EEY9gecxbnJkJRKtT0F3piq9 lp43LUhufgNJ636Mkf+tQVH/uqsq2d+aGP6iewh3OIRhs8ggXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHraxwo8alx33yjRd7wD1gF6tz4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjhlNjNkMmQtZDM4Yi0z ZjcwLWE3YTktMTk4NDRhNzdiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1SuYXPjiu4hw9QYXp5rX4yHzoms0onslmPgEDgpoxR/zFtcTsR8SY RZGPON9gDiZk4rCoKwb/RCWZq86RB5N7BMqEbwG6qCk9HNDS1bq9YcDidh/4ua3p ULoGVJiEHpcBvxmRg251bSRr+cMMed/XWVDgM158PBxCoJDE8BWA5qOugQfasDcP ZwfmE+cNPVhRBBDIUw/rFknxekWoPmHZL5W56UduNqvqvTt6NW/tiZsDCdI+Wr31 vHFscUHdP25aHT+/goA/5Tocg1Zr64Z19SnrmZuAyM2N82/Rw2OMZ4XUNsCpwZPw oyr5j7iYkXPSiNw+n1L9Ju4fWzPhW3ky -----END CERTIFICATE-----Generated at Sat Jun 13 09:01:28 2026 by rpki-client