$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f24dae-949a-3c22-b4d0-feda68ac6c03.roa File: c2f24dae-949a-3c22-b4d0-feda68ac6c03.roa (raw, json) Hash identifier: QaTLNuDxbv0epBw04MTLbrWXzR9Fo1PIaLZ+aGNA0r8= Subject key identifier: 5F:C1:23:1D:82:BE:31:99:D5:83:4C:73:45:F7:F0:78:5C:00:CA:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DF4DB98DBDC6395DE967D9BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f24dae-949a-3c22-b4d0-feda68ac6c03.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 2600:5001:8801::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:98:db:dc:63:95:de:96:7d:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=805e9b0a-ac60-4775-801b-7ca51d1f0146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:20:5d:b4:bb:8b:e0:69:ed:4c:50:ba:19: 77:15:a3:85:e3:ea:fa:c0:72:38:d8:52:b3:b5:76: 2e:67:ef:d0:59:7d:f2:e3:f5:b0:6c:dd:c2:2a:d9: fc:bc:4f:49:8f:79:33:c0:10:a8:a2:35:0b:31:e6: 03:27:12:32:7c:f7:a2:b6:13:65:e0:55:17:4e:b5: 40:d0:a6:5e:aa:5e:80:5a:37:b5:ba:7c:a8:76:42: 8a:f7:f6:68:a1:b4:01:bc:cc:89:56:84:2e:bf:6e: 8d:f5:05:ef:51:0c:57:ad:45:9f:60:16:27:3d:61: 0d:8e:a1:d8:28:54:34:f9:b6:ff:9c:1b:4f:87:9c: ce:c5:0c:e9:b2:cd:1a:26:34:60:e1:86:6b:a1:8f: e2:aa:1b:21:ae:a0:28:45:e9:30:82:46:e4:6b:27: bc:90:53:d8:cb:0b:39:28:09:b2:18:7c:9b:07:34: a0:a7:c8:fe:41:22:c6:a4:d6:dc:14:89:6a:c3:06: b8:48:84:71:a4:66:84:71:9f:2b:be:9e:8d:f5:7e: 45:a9:26:38:f3:63:d1:bd:db:ce:3f:03:42:b3:f9: 8e:c5:bd:f6:5c:f1:c9:f4:b5:9f:06:9f:1a:ff:84: 77:e4:e7:b6:13:f6:74:41:d5:42:29:a3:1f:7c:e3: 91:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C1:23:1D:82:BE:31:99:D5:83:4C:73:45:F7:F0:78:5C:00:CA:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f24dae-949a-3c22-b4d0-feda68ac6c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2600:5001:8801::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a7:ff:e9:d7:7c:1e:29:b2:b8:ea:49:06:c7:98:ad:09:5f: f3:98:01:25:ca:41:cb:89:a0:4f:88:49:e1:44:cb:39:d5:03: c5:c0:71:35:de:c6:7b:44:5a:21:2d:3d:b3:7d:27:d3:dd:b6: 4e:f6:75:8f:ba:d9:db:93:54:24:68:c4:57:d1:58:f8:d5:37: 8c:b5:79:fe:4a:97:43:5c:7b:44:36:b3:2e:32:87:a6:f0:70: 01:81:74:cc:8c:5e:66:c1:c4:06:a5:95:4e:7b:e4:85:b2:8d: c6:70:18:3f:57:43:18:2a:97:56:f9:9c:90:55:c9:4b:df:c1: 68:58:c8:d5:ea:38:f9:56:5b:68:e2:9d:b6:4e:64:e0:1c:cd: 39:e4:7c:a5:a7:22:62:dd:0e:f1:25:9b:03:06:95:35:8d:d5: 58:bb:08:42:0c:5f:a9:94:1f:70:86:44:ca:5c:95:bf:ae:36: 9c:e5:ab:cb:9b:a7:47:2c:1c:c3:f2:4c:41:60:50:74:67:bc: 54:0e:de:70:bc:f4:5f:70:6e:1b:5f:ba:13:44:cf:44:9e:99: 53:ca:23:a3:09:f8:36:9e:0e:af:5d:fc:fb:8a:62:ae:83:0b: 47:03:8e:41:82:44:d7:15:a4:a0:a7:56:98:95:a0:ad:1e:b0: 2b:a4:33:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3025jb3GOV3pZ9m8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk ODA1ZTliMGEtYWM2MC00Nzc1LTgwMWItN2NhNTFkMWYwMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRYgXbS7i+Bp7UxQuhl3FaOF4+r6wHI42FKz tXYuZ+/QWX3y4/WwbN3CKtn8vE9Jj3kzwBCoojULMeYDJxIyfPeithNl4FUXTrVA 0KZeql6AWje1unyodkKK9/ZoobQBvMyJVoQuv26N9QXvUQxXrUWfYBYnPWENjqHY KFQ0+bb/nBtPh5zOxQzpss0aJjRg4YZroY/iqhshrqAoRekwgkbkaye8kFPYyws5 KAmyGHybBzSgp8j+QSLGpNbcFIlqwwa4SIRxpGaEcZ8rvp6N9X5FqSY482PRvdvO PwNCs/mOxb32XPHJ9LWfBp8a/4R35Oe2E/Z0QdVCKaMffOORBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF/BIx2CvjGZ1YNMc0X38HhcAMrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJmMjRkYWUtOTQ5YS0z YzIyLWI0ZDAtZmVkYTY4YWM2YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBQAYgB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIan/+nXfB4psrjqSQbHmK0JX/OYASXKQcuJoE+ISeFEyznVA8XA cTXexntEWiEtPbN9J9Pdtk72dY+62duTVCRoxFfRWPjVN4y1ef5Kl0Nce0Q2sy4y h6bwcAGBdMyMXmbBxAallU575IWyjcZwGD9XQxgql1b5nJBVyUvfwWhYyNXqOPlW W2jinbZOZOAczTnkfKWnImLdDvElmwMGlTWN1Vi7CEIMX6mUH3CGRMpclb+uNpzl q8ubp0csHMPyTEFgUHRnvFQO3nC89F9wbhtfuhNEz0SemVPKI6MJ+DaeDq9d/PuK Yq6DC0cDjkGCRNcVpKCnVpiVoK0esCukM1o= -----END CERTIFICATE-----Generated at Thu May 28 17:12:40 2026 by rpki-client