$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa File: f56e512a-4f4f-3e4f-8537-0609c0041e23.roa (raw, json) Hash identifier: t9Gbwz7ByUdAFSlS46UzLoX9XfH1Ri729dtSJKGRkGg= Subject key identifier: 5A:C8:F9:BF:6D:B0:84:93:5A:6C:B8:22:C6:16:74:9D:24:8B:7B:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E9C58030B0EA11962200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 2607:f690::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e9:c5:80:30:b0:ea:11:96:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=298882da-7771-4efb-83cc-ad2c8c4d4b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:7f:8d:14:b2:44:74:6a:0d:36:5b:ed:4b: d7:5a:5f:a4:78:81:bd:da:52:8f:6e:e7:bc:92:83: 6f:ee:b7:b1:78:c9:9d:14:22:cf:8e:a1:8b:62:25: 7f:3d:e1:38:3d:90:54:67:cc:c7:d8:da:42:cb:72: 4a:11:9c:7b:cd:10:f8:a4:b6:ef:21:43:12:4e:0b: ba:83:a4:76:0f:e3:a1:53:f4:54:ec:63:41:e4:86: b6:52:6f:43:62:aa:4e:77:b7:a1:6e:13:61:a3:18: 22:36:9a:db:8e:b0:6e:39:30:d7:5d:1c:82:b8:a8: 50:ee:8f:87:2c:da:a3:ff:7c:d8:26:44:85:17:18: 69:cc:5d:42:2e:39:ea:9b:e7:38:13:3b:d0:97:e1: 8d:c8:ba:02:55:8c:64:5c:0d:5f:f7:49:11:95:be: 79:1b:f1:df:53:8e:07:fa:71:e2:2c:4a:d8:24:11: 4d:50:3b:54:4d:e3:17:cf:41:d2:98:10:10:80:5e: c9:23:76:fd:da:53:7f:08:83:bc:44:c6:4d:54:3d: 75:fe:35:bf:96:84:6f:a8:c1:1a:54:e7:b4:63:1f: 4a:42:b9:95:54:2e:eb:e8:8f:37:40:91:6d:cf:a6: 23:98:0c:3b:8c:95:37:5d:47:d1:cc:20:fd:f1:00: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C8:F9:BF:6D:B0:84:93:5A:6C:B8:22:C6:16:74:9D:24:8B:7B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f690::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:66:8d:89:3d:bc:85:e9:f1:56:b7:17:ce:82:8b:c2:53:2c: c8:97:90:89:4c:f9:6b:a4:2c:64:87:9d:00:c5:bc:d9:87:8e: c7:05:d7:9a:69:3d:42:04:f4:bf:9d:d6:64:a3:98:46:9f:e6: 52:4f:9f:84:db:0d:ba:ac:cb:9f:23:35:78:26:33:d8:2b:92: ae:46:94:1f:e9:15:bc:82:e6:11:d6:54:6c:2e:ed:17:c9:a7: 4a:12:84:8a:d9:12:77:27:1b:d7:a8:c0:07:bd:9b:c7:ee:c6: 8f:ba:ab:8e:40:db:d2:93:59:ad:66:4a:97:21:f2:a0:0f:bb: 2b:b0:69:56:ab:4f:ca:6d:41:a1:0d:98:2c:39:31:70:7a:fe: 7a:b0:d4:f2:cf:88:d5:78:db:d6:d9:29:9f:1c:a1:5e:41:85: 48:9c:47:c4:3a:9c:21:0e:d9:13:d1:d2:d2:71:a7:7a:7e:fd: b0:f1:27:c3:8c:c9:39:4e:7f:c1:37:f1:8a:80:c0:e7:0d:20: c3:08:12:07:91:1f:a5:4f:e9:66:cb:b0:43:a9:4c:af:d8:18: 5a:d4:63:71:bf:fd:29:2e:bf:3c:88:b1:95:2a:76:ec:e0:35: d2:6d:29:bf:9b:64:74:0f:17:19:34:0d:6d:db:87:35:94:51: f3:eb:4d:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6ysenFgDCw6hGWIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk Mjk4ODgyZGEtNzc3MS00ZWZiLTgzY2MtYWQyYzhjNGQ0YjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuZ/jRSyRHRqDTZb7UvXWl+keIG92lKPbue8 koNv7rexeMmdFCLPjqGLYiV/PeE4PZBUZ8zH2NpCy3JKEZx7zRD4pLbvIUMSTgu6 g6R2D+OhU/RU7GNB5Ia2Um9DYqpOd7ehbhNhoxgiNprbjrBuOTDXXRyCuKhQ7o+H LNqj/3zYJkSFFxhpzF1CLjnqm+c4EzvQl+GNyLoCVYxkXA1f90kRlb55G/HfU44H +nHiLErYJBFNUDtUTeMXz0HSmBAQgF7JI3b92lN/CIO8RMZNVD11/jW/loRvqMEa VOe0Yx9KQrmVVC7r6I83QJFtz6YjmAw7jJU3XUfRzCD98QCOTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFrI+b9tsISTWmy4IsYWdJ0ki3sFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjU2ZTUxMmEtNGY0Zi0z ZTRmLTg1MzctMDYwOWMwMDQxZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf2kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqZo2JPbyF6fFWtxfOgovCUyzIl5CJTPlrpCxkh50AxbzZh47HBdea aT1CBPS/ndZko5hGn+ZST5+E2w26rMufIzV4JjPYK5KuRpQf6RW8guYR1lRsLu0X yadKEoSK2RJ3JxvXqMAHvZvH7saPuquOQNvSk1mtZkqXIfKgD7srsGlWq0/KbUGh DZgsOTFwev56sNTyz4jVeNvW2SmfHKFeQYVInEfEOpwhDtkT0dLScad6fv2w8SfD jMk5Tn/BN/GKgMDnDSDDCBIHkR+lT+lmy7BDqUyv2Bha1GNxv/0pLr88iLGVKnbs 4DXSbSm/m2R0DxcZNA1t24c1lFHz601e -----END CERTIFICATE-----Generated at Thu Aug 27 14:20:23 2026 by rpki-client