$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2c8a33f3-96b0-3ec4-8d76-e5708371ca3d.roa File: 2c8a33f3-96b0-3ec4-8d76-e5708371ca3d.roa (raw, json) Hash identifier: RGdFTAJT/ObsiIUwqSzwrnCHzzwrCbdsmrnT94LGOBA= Subject key identifier: 17:24:88:C8:76:8A:94:E5:08:04:21:3F:7B:8E:D8:78:B0:7F:1C:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CD044302783F8B560ACC Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2c8a33f3-96b0-3ec4-8d76-e5708371ca3d.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 2607:fba8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cd:04:43:02:78:3f:8b:56:0a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=0038edfd-1392-4fe5-9fe0-07bef2fb08c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:b5:8b:25:8e:5c:b8:09:c8:44:c5:a9:26: ce:dc:08:d5:6a:d3:bd:5a:59:6e:7b:ba:c3:33:54: cf:91:ed:6d:a9:b0:fe:b0:47:72:f9:8a:74:49:4e: 64:d2:5d:5b:df:41:ab:88:56:97:4b:9f:9e:2d:0a: 30:fd:56:f7:2f:3e:d4:05:c4:30:95:40:5a:30:52: 00:0a:da:bf:c7:70:0d:77:ea:6e:2a:5f:7d:d1:7c: cc:65:25:dc:94:45:6d:29:51:54:5b:60:c0:64:97: dc:9f:d3:77:85:d3:68:be:1b:fa:4b:81:c8:b0:a3: be:82:15:3a:19:ad:a8:91:bd:59:5a:94:bd:b4:c7: 37:ae:be:9b:c5:32:fa:54:4e:58:c2:18:f7:22:7e: dd:2b:b3:74:e4:53:dc:6a:c5:23:8c:20:ed:ce:cd: 56:2e:50:00:0b:1d:e8:2f:2e:c4:95:dd:ef:9c:77: 9d:0a:c8:d1:68:70:46:d5:59:f7:a7:05:43:7c:3c: 5a:15:09:1f:85:b0:ef:1d:c0:11:e6:c0:6d:09:8c: 39:bd:6a:ef:a5:f3:ef:e1:f1:3e:12:27:5c:be:e9: b9:45:c5:18:69:bc:f1:9c:0d:fe:c4:46:37:a3:17: 7d:80:67:d8:62:9d:db:96:9e:70:85:fb:3e:38:d5: 1a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:24:88:C8:76:8A:94:E5:08:04:21:3F:7B:8E:D8:78:B0:7F:1C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2c8a33f3-96b0-3ec4-8d76-e5708371ca3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fba8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e7:c4:06:49:f2:cd:a6:19:68:ef:e0:c4:be:23:ce:12:a5: c8:51:55:8b:1e:52:f2:3a:e6:3b:a4:d4:8f:c8:cb:89:29:91: 17:a0:49:e2:52:7b:b2:1b:e7:5b:a8:29:dc:78:40:5b:9e:e4: 97:70:c5:01:84:98:4a:67:ad:0f:8d:ec:ba:21:15:30:ef:87: aa:6f:60:5b:03:d3:b4:e9:07:68:0b:83:e3:e3:3b:8e:3e:09: f1:61:8a:03:81:28:7e:07:ab:9c:17:ea:b4:c2:5e:ff:35:ff: 61:44:fd:0f:9d:d1:8a:39:17:34:ff:2f:aa:10:62:7e:cf:18: 80:02:a2:bd:ca:f8:98:a4:79:00:2b:26:ef:ac:b5:80:1f:c1: ba:df:d4:4d:26:70:94:56:7e:7b:66:06:35:23:24:7c:4d:02: 56:05:fb:78:9a:fd:af:f4:6c:a1:40:bf:f2:d1:a2:99:b9:0c: 09:d7:a3:21:68:15:11:d4:f2:96:e1:55:70:42:76:a7:ce:e9: 4f:76:18:e5:ca:37:9e:75:75:05:9b:cd:66:54:6f:d4:4b:ca: 14:68:90:1b:b5:ea:45:10:b8:d1:44:28:2a:4b:14:39:3d:c1: 6f:8a:34:b8:a0:1b:e7:e7:19:38:d3:8f:e6:06:69:e7:3f:c4: a6:e7:e1:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6ysc0EQwJ4P4tWCswwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MDAzOGVkZmQtMTM5Mi00ZmU1LTlmZTAtMDdiZWYyZmIwOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQe1iyWOXLgJyETFqSbO3AjVatO9Wllue7rD M1TPke1tqbD+sEdy+Yp0SU5k0l1b30GriFaXS5+eLQow/Vb3Lz7UBcQwlUBaMFIA Ctq/x3ANd+puKl990XzMZSXclEVtKVFUW2DAZJfcn9N3hdNovhv6S4HIsKO+ghU6 Ga2okb1ZWpS9tMc3rr6bxTL6VE5Ywhj3In7dK7N05FPcasUjjCDtzs1WLlAACx3o Ly7Eld3vnHedCsjRaHBG1Vn3pwVDfDxaFQkfhbDvHcAR5sBtCYw5vWrvpfPv4fE+ Eidcvum5RcUYabzxnA3+xEY3oxd9gGfYYp3blp5whfs+ONUaVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBckiMh2ipTlCAQhP3uO2HiwfxxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmM4YTMzZjMtOTZiMC0z ZWM0LThkNzYtZTU3MDgzNzFjYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7qDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBI58QGSfLNphlo7+DEviPOEqXIUVWLHlLyOuY7pNSPyMuJKZEXoEni UnuyG+dbqCnceEBbnuSXcMUBhJhKZ60Pjey6IRUw74eqb2BbA9O06QdoC4Pj4zuO PgnxYYoDgSh+B6ucF+q0wl7/Nf9hRP0PndGKORc0/y+qEGJ+zxiAAqK9yviYpHkA KybvrLWAH8G639RNJnCUVn57ZgY1IyR8TQJWBft4mv2v9GyhQL/y0aKZuQwJ16Mh aBUR1PKW4VVwQnanzulPdhjlyjeedXUFm81mVG/US8oUaJAbtepFELjRRCgqSxQ5 PcFvijS4oBvn5xk404/mBmnnP8Sm5+Gh -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:49 2026 by rpki-client