$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa File: f1def610-6bdb-3266-9d82-dc9da0ae8803.roa (raw, json) Hash identifier: na0llJGkrDGE4mEMV9RY+z1VipYOeAo7YSQbflXWb98= Subject key identifier: C3:BA:A8:84:B7:AE:3D:76:99:7E:DE:6A:B5:7B:9A:32:8B:25:0F:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F1D4E6CE0FFE06F4A69E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00:e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:1d:4e:6c:e0:ff:e0:6f:4a:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=2ec77055-44b4-44aa-8278-07a8a7bdc9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b5:b3:53:6b:19:7a:83:1c:06:5d:9d:1b:28: 60:dc:e4:ac:42:ca:64:56:55:cc:d9:0e:25:69:59: 74:e3:4b:78:05:6a:7d:9b:80:13:5f:d8:c8:ad:c5: 34:a8:8f:a2:a8:76:ba:f0:d9:67:29:67:aa:3a:f7: df:b2:72:16:3c:d9:76:a9:bf:0a:d5:bf:1a:97:c0: ad:3c:e3:39:00:04:6b:e4:31:1b:b1:67:bb:29:66: e9:5d:62:2b:35:e7:a0:69:6c:a5:5d:ab:e3:c0:52: aa:1a:af:72:17:c1:0f:a1:2e:65:54:85:9d:ac:62: b9:42:e0:2d:e0:e1:87:76:14:57:2a:7f:37:60:02: cd:ad:90:be:da:64:d7:1f:75:38:63:71:1a:35:26: 1b:80:08:a4:3d:46:f2:37:97:4d:7d:9b:5c:c6:b0: 11:e5:50:2d:29:ca:a4:95:6d:58:df:60:93:89:09: cd:cb:6a:bb:e8:84:07:ef:97:e2:2f:8c:c8:35:ff: a5:40:f0:cc:dd:55:07:72:41:94:9c:2e:a0:9a:89: b3:ba:f7:9a:ab:63:ad:07:ce:fb:9a:f7:29:b0:dc: f7:10:03:02:7b:31:41:a4:42:05:9c:14:b9:4b:2e: 94:d9:f0:c8:81:43:5b:f8:f1:23:7e:b3:a5:e5:64: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BA:A8:84:B7:AE:3D:76:99:7E:DE:6A:B5:7B:9A:32:8B:25:0F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:cd:32:dc:7a:87:cf:06:fe:ed:a8:95:d2:9f:ee:9d:61:b3: 0e:4b:1c:d4:43:05:d7:8f:87:a6:d6:93:86:df:16:68:d8:77: ac:e8:ad:3d:18:aa:f8:d5:24:04:30:6d:71:5a:de:b1:8c:6d: 7b:23:63:b3:5f:00:d9:b5:78:78:97:13:29:80:1c:d9:7e:6f: 1b:39:b8:c3:ac:04:9d:0d:e0:30:b1:75:fe:9a:e0:85:0a:7d: 03:3f:31:b3:3e:54:91:da:32:28:29:f4:f3:fb:48:5a:1c:2e: d6:8c:3e:7c:9a:90:86:97:57:90:c6:9f:8b:cc:7d:73:67:1b: a3:cb:a8:6e:2a:fd:63:28:2e:a9:de:65:2b:4f:f6:07:65:1e: ae:5c:0d:18:38:3d:8c:95:ac:3e:87:c9:7b:a5:62:51:e2:1d: 16:ef:58:7f:af:4d:5e:9d:1b:d8:18:cd:5b:e7:a3:32:83:9e: 3e:f0:d8:de:9f:af:c6:5e:03:de:24:1c:90:e4:43:24:6f:4a: 82:19:94:a7:3d:48:ad:1c:e8:b3:a2:d3:82:21:95:a4:73:ea: 53:ae:e4:28:6c:9d:59:90:e9:e2:a3:de:76:62:1e:f4:11:27: d4:fb:84:76:61:cb:fa:03:0c:a7:2d:0e:c2:45:96:11:15:19: 0b:4c:0d:7b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4QTx1ObOD/4G9KaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MmVjNzcwNTUtNDRiNC00NGFhLTgyNzgtMDdhOGE3YmRjOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbWzU2sZeoMcBl2dGyhg3OSsQspkVlXM2Q4l aVl040t4BWp9m4ATX9jIrcU0qI+iqHa68NlnKWeqOvffsnIWPNl2qb8K1b8al8Ct POM5AARr5DEbsWe7KWbpXWIrNeegaWylXavjwFKqGq9yF8EPoS5lVIWdrGK5QuAt 4OGHdhRXKn83YALNrZC+2mTXH3U4Y3EaNSYbgAikPUbyN5dNfZtcxrAR5VAtKcqk lW1Y32CTiQnNy2q76IQH75fiL4zINf+lQPDM3VUHckGUnC6gmomzuveaq2OtB877 mvcpsNz3EAMCezFBpEIFnBS5Sy6U2fDIgUNb+PEjfrOl5WTAfwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMO6qIS3rj12mX7earV7mjKLJQ+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFkZWY2MTAtNmJkYi0z MjY2LTlkODItZGM5ZGEwYWU4ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAA4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADs0y3HqHzwb+7aiV0p/unWGzDksc1EMF14+HptaTht8WaNh3rOit PRiq+NUkBDBtcVresYxteyNjs18A2bV4eJcTKYAc2X5vGzm4w6wEnQ3gMLF1/prg hQp9Az8xsz5UkdoyKCn08/tIWhwu1ow+fJqQhpdXkMafi8x9c2cbo8uobir9Yygu qd5lK0/2B2UerlwNGDg9jJWsPofJe6ViUeIdFu9Yf69NXp0b2BjNW+ejMoOePvDY 3p+vxl4D3iQckORDJG9KghmUpz1IrRzos6LTgiGVpHPqU67kKGydWZDp4qPedmIe 9BEn1PuEdmHL+gMMpy0OwkWWERUZC0wNew== -----END CERTIFICATE-----Generated at Sat Jun 13 18:56:41 2026 by rpki-client