$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa File: b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa (raw, json) Hash identifier: dIfseXhxfkgiLUA4nnDH9ew9r80xnnrNvKp93Vt9o3s= Subject key identifier: 36:2E:0F:CE:50:9F:4D:F9:50:CF:CF:AD:08:B4:04:87:2A:69:C0:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFECE0112A97650735B20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:3900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:fe:ce:01:12:a9:76:50:73:5b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=83b4f336-3051-42f6-8eff-f6c2df3474f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:d9:42:7b:13:8e:58:41:84:ae:b5:c4:ab: 81:4f:71:5c:81:cc:c9:3c:f1:aa:63:17:fb:b0:21: ef:6c:e4:a3:97:9c:e4:34:09:8a:75:a9:dd:26:3e: e2:4d:d5:be:d4:36:06:da:a3:9b:d7:30:37:3b:50: e3:75:e6:78:52:0e:21:1a:bb:73:d8:23:d9:7e:2a: e8:c1:53:47:51:0f:40:44:72:69:44:19:d4:f4:c9: 6e:d0:52:c2:36:3a:86:50:ee:9e:2b:cc:75:7b:0b: 0b:4c:a7:d0:1c:f8:ab:67:97:c6:fe:b1:bc:47:36: ed:75:89:99:d1:b5:3d:8c:85:27:11:f1:d7:45:53: 9d:51:fc:38:e1:f3:74:b3:04:a7:ea:d6:ac:b5:1e: f1:dc:92:ca:bf:fe:f9:7e:ef:e1:70:c3:51:0c:44: e4:fb:4f:d7:e5:01:46:60:86:4c:7d:46:5e:97:df: 39:48:6c:f7:01:ac:7f:52:cc:21:db:7f:2a:29:a7: 5f:78:99:f6:86:59:ac:fe:0a:9f:9a:c7:23:0a:15: c3:ea:b4:0d:4e:f3:52:57:5f:28:a3:2e:4f:11:86: 2e:96:72:4a:c7:ff:ec:10:e6:47:08:71:58:03:d2: 65:aa:bb:bb:cf:98:69:26:4e:8c:93:04:f7:65:10: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2E:0F:CE:50:9F:4D:F9:50:CF:CF:AD:08:B4:04:87:2A:69:C0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:14:db:d5:33:cb:61:4e:48:b0:3f:73:e9:45:08:88:25:f7: 0f:fb:40:69:e5:fa:47:9f:a2:bd:be:22:25:e0:9e:ab:bd:cd: 1d:b3:16:c8:80:f3:0b:ad:93:d6:5a:26:46:b4:03:11:ab:c4: 1e:91:f8:35:81:d7:04:3c:ea:3a:df:59:78:1d:36:4d:8f:a2: c8:c6:4e:ad:67:20:96:dd:97:c4:4c:cd:c7:42:7d:0b:a7:3a: a3:7f:4c:e9:90:cf:65:a7:e3:bd:44:b7:da:7d:45:f6:44:80: 30:3e:2e:c3:2d:11:6c:70:59:ed:6c:e3:35:9e:8a:15:d0:26: b9:2a:21:7d:3c:b3:5c:21:df:51:2c:2e:e1:4c:b3:65:fd:70: 2a:24:c4:2e:88:18:fb:71:4a:e8:4f:ea:ee:11:f6:9b:1a:95: bc:02:92:da:cb:39:79:5d:c6:38:79:65:41:f5:fd:69:9f:36: e5:a4:66:14:33:64:cf:da:64:2d:24:b7:a6:03:90:47:60:cd: 56:32:2a:bf:16:b3:be:90:ea:6a:26:f7:cc:cf:f7:bd:32:c5: 00:41:b4:48:1d:d5:a8:d6:a1:12:22:98:2e:11:49:10:8c:b0: 1a:ca:fc:6a:b6:37:9e:f9:fa:e8:c4:15:f8:fd:7e:31:2d:fe: 73:05:a8:f2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4QTv7OARKpdlBzWyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ODNiNGYzMzYtMzA1MS00MmY2LThlZmYtZjZjMmRmMzQ3NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVnZQnsTjlhBhK61xKuBT3FcgczJPPGqYxf7 sCHvbOSjl5zkNAmKdandJj7iTdW+1DYG2qOb1zA3O1DjdeZ4Ug4hGrtz2CPZfiro wVNHUQ9ARHJpRBnU9Mlu0FLCNjqGUO6eK8x1ewsLTKfQHPirZ5fG/rG8RzbtdYmZ 0bU9jIUnEfHXRVOdUfw44fN0swSn6tastR7x3JLKv/75fu/hcMNRDETk+0/X5QFG YIZMfUZel985SGz3Aax/Uswh238qKadfeJn2hlms/gqfmscjChXD6rQNTvNSV18o oy5PEYYulnJKx//sEOZHCHFYA9Jlqru7z5hpJk6MkwT3ZRCvXwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDYuD85Qn035UM/PrQi0BIcqacBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjlkYWFkNGEtMjUzNi0z ZDFlLWI2ZjMtN2UyNWQyOGNiODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlhTb1TPLYU5IsD9z6UUIiCX3D/tAaeX6R5+ivb4iJeCeq73NHbMW yIDzC62T1lomRrQDEavEHpH4NYHXBDzqOt9ZeB02TY+iyMZOrWcglt2XxEzNx0J9 C6c6o39M6ZDPZafjvUS32n1F9kSAMD4uwy0RbHBZ7WzjNZ6KFdAmuSohfTyzXCHf USwu4UyzZf1wKiTELogY+3FK6E/q7hH2mxqVvAKS2ss5eV3GOHllQfX9aZ825aRm FDNkz9pkLSS3pgOQR2DNVjIqvxazvpDqaib3zM/3vTLFAEG0SB3VqNahEiKYLhFJ EIywGsr8arY3nvn66MQV+P1+MS3+cwWo8g== -----END CERTIFICATE-----Generated at Sat Jun 13 06:01:19 2026 by rpki-client