$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa File: bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa (raw, json) Hash identifier: EvA7ddme5elxmC0y8kayTWFFJFFn1w00X3mGx/lFKnw= Subject key identifier: 27:AD:05:C6:F9:92:6D:D1:62:A6:65:AA:B6:F8:D9:FC:0C:EF:04:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1CFE3B75949DC8433300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1c:fe:3b:75:94:9d:c8:43:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=24e56c39-f84e-49ee-937a-42b164bceb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:76:85:38:d6:1d:fb:bc:c9:30:50:6c:47: 45:e9:e4:b2:4e:a1:ec:08:40:c8:a4:5f:c9:ab:37: 51:d1:fd:4e:a4:10:a7:d4:03:41:7f:52:b0:f9:40: f9:77:ac:80:37:9e:12:1f:0a:3f:4e:08:42:fd:f1: 1e:73:d1:ea:53:f5:84:91:f2:c8:a6:1b:71:f9:6c: 33:96:7b:2c:6f:5d:16:14:c3:2f:0a:39:3c:e2:c4: e4:6b:37:3a:c2:cb:6d:d3:7c:fc:cc:45:8b:78:ce: 22:16:30:c1:ca:96:99:71:04:64:f3:0a:21:7f:a3: bf:6f:6c:c4:d7:4a:bf:b7:e9:7c:47:4e:0b:43:00: f8:4b:04:52:d6:6c:26:36:46:d3:27:c7:18:b2:0d: 2c:63:4e:b3:c0:c4:60:a8:bc:24:d8:ff:3b:ed:78: 0f:9f:99:dc:a1:37:1b:38:84:cc:0d:ca:5f:a5:fc: 94:b7:dc:e8:41:27:dd:c3:0d:c3:d1:3a:e9:82:65: 4d:f1:87:48:c0:f3:ff:7d:3c:dd:64:72:44:f0:13: 10:53:7c:dc:9a:e9:5c:35:cf:91:84:c4:c3:13:ca: b8:4f:a7:58:0a:11:20:70:66:2f:0c:14:c9:3e:82: 5e:70:ef:fb:65:cd:cf:a7:74:69:b5:64:f3:01:3e: e8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AD:05:C6:F9:92:6D:D1:62:A6:65:AA:B6:F8:D9:FC:0C:EF:04:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:39::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:45:50:31:2d:84:39:ef:0c:b4:59:16:1c:6c:76:79:b7:3e: ee:1d:46:8a:b3:ae:9d:2b:83:5e:e3:1f:eb:8c:8d:e1:95:d5: d7:f9:43:35:47:d5:37:df:98:ef:d0:5a:f5:ff:d7:fa:24:6e: 70:4b:68:d6:93:6d:b3:1e:27:5d:eb:05:f5:fd:d0:2e:5a:32: 04:88:cd:df:a1:8f:19:51:86:c6:39:d3:d0:c2:0c:88:4c:ca: ff:6a:70:d3:77:2d:98:ea:8e:25:92:f4:f1:83:1d:9d:3a:b9: 82:b0:3b:30:70:b0:f7:54:7c:43:52:63:af:f8:63:39:f6:c1: 4d:90:90:f1:74:28:2a:c9:c1:9b:11:2b:d6:70:29:4b:5e:8e: 1e:ed:71:d3:76:99:9f:ca:85:09:67:24:13:bb:fa:5e:bf:70: 54:3d:1c:01:97:3b:e5:47:2f:a8:64:63:84:6d:d9:03:c1:29: 9b:02:36:f3:8d:a5:9b:42:e4:7a:33:c6:0d:fb:b6:01:c5:aa: 12:23:12:42:33:41:db:c6:94:52:1f:ce:31:de:13:51:1e:33: 16:fa:67:58:90:f0:05:00:b5:75:aa:56:c9:72:cf:21:ea:e9: cb:a5:b2:9e:9a:cf:9c:eb:d0:cb:e5:8c:16:59:ab:45:cc:9b: 28:4e:e7:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTxz+O3WUnchDMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MjRlNTZjMzktZjg0ZS00OWVlLTkzN2EtNDJiMTY0YmNlYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyh2hTjWHfu8yTBQbEdF6eSyTqHsCEDIpF/J qzdR0f1OpBCn1ANBf1Kw+UD5d6yAN54SHwo/TghC/fEec9HqU/WEkfLIphtx+Wwz lnssb10WFMMvCjk84sTkazc6wstt03z8zEWLeM4iFjDBypaZcQRk8wohf6O/b2zE 10q/t+l8R04LQwD4SwRS1mwmNkbTJ8cYsg0sY06zwMRgqLwk2P877XgPn5ncoTcb OITMDcpfpfyUt9zoQSfdww3D0TrpgmVN8YdIwPP/fTzdZHJE8BMQU3zcmulcNc+R hMTDE8q4T6dYChEgcGYvDBTJPoJecO/7Zc3Pp3RptWTzAT7o2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCetBcb5km3RYqZlqrb42fwM7wSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmM1YTJmNGItYTZmYS0z NzJhLWI3YjEtZTk4YjY1ZTUxMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH5FUDEthDnvDLRZFhxsdnm3Pu4dRoqzrp0rg17jH+uMjeGV1df5 QzVH1TffmO/QWvX/1/okbnBLaNaTbbMeJ13rBfX90C5aMgSIzd+hjxlRhsY509DC DIhMyv9qcNN3LZjqjiWS9PGDHZ06uYKwOzBwsPdUfENSY6/4Yzn2wU2QkPF0KCrJ wZsRK9ZwKUtejh7tcdN2mZ/KhQlnJBO7+l6/cFQ9HAGXO+VHL6hkY4Rt2QPBKZsC NvONpZtC5Hozxg37tgHFqhIjEkIzQdvGlFIfzjHeE1EeMxb6Z1iQ8AUAtXWqVsly zyHq6culsp6az5zr0MvljBZZq0XMmyhO52A= -----END CERTIFICATE-----Generated at Sat Jun 13 07:15:15 2026 by rpki-client