$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa File: dfae6790-4364-3d1e-9409-6da10de1af43.roa (raw, json) Hash identifier: HfGdQg+U2c1ZxzCLN2+0iCVH8+Mxm+4iCKEvcFN5Rs4= Subject key identifier: 0C:C5:FD:8A:DD:9F:5B:D0:64:82:6D:43:4C:5B:98:4A:51:5A:AD:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFE3DD6371E58658B2980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:1c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:fe:3d:d6:37:1e:58:65:8b:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=629b63d6-22ca-4015-8998-5b76377a786f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:96:d5:f9:40:a6:11:80:10:32:c9:68:55: 39:3c:ac:79:36:97:0a:33:9f:97:e5:8b:85:26:d5: 4e:61:f7:b8:04:22:28:3c:dd:c6:1f:88:00:11:c3: a0:63:08:19:a9:c8:02:b1:4c:e7:56:b3:c0:10:66: 4c:68:2e:f5:fe:7c:f2:79:73:d2:a6:ca:c7:4d:a3: 8f:5f:33:f9:4b:e9:58:a4:b8:f2:66:e9:78:57:44: ec:5b:e2:a6:73:06:73:7a:3b:1d:3d:4e:4d:13:e8: 66:f3:f6:50:47:b7:26:82:d1:f5:e1:d7:32:83:00: 32:28:73:4d:d1:50:bb:85:57:e2:71:16:68:0b:cf: c1:03:0b:8c:c0:d1:90:73:ea:e0:13:b9:a7:5e:77: 12:aa:79:f6:50:76:bd:e9:f6:c6:bc:c6:40:cd:81: ab:0d:54:ff:e4:04:5f:3d:ab:de:8e:5b:1a:b7:e9: 89:14:55:0e:91:07:bb:bc:e7:af:e1:aa:6a:1c:71: be:ca:c6:6a:8c:db:e6:d4:7a:1d:10:67:58:66:be: 66:e4:b9:ee:bc:b7:95:25:d2:34:a9:f9:5b:c3:ca: e6:54:0b:b6:c4:05:ee:9e:7e:6d:c5:f0:cb:c5:1b: 53:be:67:7d:af:4d:84:43:f3:d4:11:a5:a1:c1:56: 7f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C5:FD:8A:DD:9F:5B:D0:64:82:6D:43:4C:5B:98:4A:51:5A:AD:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:22:2f:56:fd:4c:66:74:80:77:7d:60:3f:10:a4:de:56:da: fe:c0:a5:63:78:0a:d4:6a:35:04:29:50:68:c8:78:dd:8f:7f: ad:ce:08:14:f1:16:ea:e1:8f:82:a1:2c:0b:5a:e1:ae:b3:46: 10:b7:2d:fc:ff:0c:aa:1a:92:45:87:aa:aa:40:99:cb:e6:9b: df:67:7e:e3:2a:0e:0b:02:23:6e:a0:1b:7a:83:fe:4d:64:49: e9:06:1f:37:7d:c8:77:fb:45:66:c9:7d:84:ad:95:25:1d:b9: 1c:d8:9f:37:8d:21:6f:2d:db:45:f3:e5:03:b7:63:fe:eb:d8: 96:13:0c:85:2f:c4:cb:57:24:21:8c:05:8f:c2:37:d2:08:31: 88:4c:83:4d:26:cc:aa:33:f4:7c:b5:66:76:2f:59:b9:ab:c9: 92:49:22:8b:ce:a2:e1:c7:91:79:38:1e:a0:9d:cb:56:b5:8b: 14:e3:a0:19:9e:f4:de:62:dc:d8:67:83:f8:dd:8d:6c:c5:5b: 0a:38:46:d8:9a:48:19:ae:e5:20:bf:3f:90:1f:f1:6e:db:3d: 11:a8:69:1e:5e:d5:c5:67:7e:42:f8:ca:19:5b:c4:2d:7c:85: 01:c5:76:5d:10:9b:95:e3:f1:58:76:60:7b:2f:60:e7:9f:73: be:c1:cd:ed -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4QTv491jceWGWLKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NjI5YjYzZDYtMjJjYS00MDE1LTg5OTgtNWI3NjM3N2E3ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoreW1flAphGAEDLJaFU5PKx5NpcKM5+X5YuF JtVOYfe4BCIoPN3GH4gAEcOgYwgZqcgCsUznVrPAEGZMaC71/nzyeXPSpsrHTaOP XzP5S+lYpLjyZul4V0TsW+KmcwZzejsdPU5NE+hm8/ZQR7cmgtH14dcygwAyKHNN 0VC7hVficRZoC8/BAwuMwNGQc+rgE7mnXncSqnn2UHa96fbGvMZAzYGrDVT/5ARf Pavejlsat+mJFFUOkQe7vOev4apqHHG+ysZqjNvm1HodEGdYZr5m5LnuvLeVJdI0 qflbw8rmVAu2xAXunn5txfDLxRtTvmd9r02EQ/PUEaWhwVZ/ywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAzF/Yrdn1vQZIJtQ0xbmEpRWq0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZhZTY3OTAtNDM2NC0z ZDFlLTk0MDktNmRhMTBkZTFhZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASiIvVv1MZnSAd31gPxCk3lba/sClY3gK1Go1BClQaMh43Y9/rc4I FPEW6uGPgqEsC1rhrrNGELct/P8MqhqSRYeqqkCZy+ab32d+4yoOCwIjbqAbeoP+ TWRJ6QYfN33Id/tFZsl9hK2VJR25HNifN40hby3bRfPlA7dj/uvYlhMMhS/Ey1ck IYwFj8I30ggxiEyDTSbMqjP0fLVmdi9ZuavJkkkii86i4ceReTgeoJ3LVrWLFOOg GZ703mLc2GeD+N2NbMVbCjhG2JpIGa7lIL8/kB/xbts9EahpHl7VxWd+QvjKGVvE LXyFAcV2XRCblePxWHZgey9g559zvsHN7Q== -----END CERTIFICATE-----Generated at Sat Jun 13 18:45:25 2026 by rpki-client