$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3023528b-3db6-357e-9146-0668edb4e6d8.roa File: 3023528b-3db6-357e-9146-0668edb4e6d8.roa (raw, json) Hash identifier: h2sLtDiSaJOZcq1Xz8xKjHKmcDFNS7lFXDexGyz9V+0= Subject key identifier: C9:A9:B6:8D:29:A5:3A:ED:79:68:FF:0A:37:3E:8A:7C:4E:F6:37:C6 Certificate issuer: /CN=49d0709a-32f1-4940-8864-e432721cf3ef Certificate serial: 010D0C9F4328584EAC6271308C39ECA5BE72FBC0 Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3023528b-3db6-357e-9146-0668edb4e6d8.roa Signing time: Thu 30 Jul 2026 18:45:54 +0000 ROA not before: Thu 30 Jul 2026 18:45:54 +0000 ROA not after: Wed 28 Oct 2026 18:45:54 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:3a8::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ac:62:71:30:8c:39:ec:a5:be:72:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef Validity Not Before: Jul 30 18:45:54 2026 GMT Not After : Oct 28 18:45:54 2026 GMT Subject: CN=63df0a6a-230f-47d6-abf3-1cf2a5041586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:1b:88:ea:27:de:1f:29:a7:bc:00:cc:84: c6:92:33:e4:21:91:5b:7f:04:8c:33:dd:bb:a0:1c: e9:8b:8e:72:0c:e1:96:fb:c4:3c:85:5a:64:00:fd: c3:62:6a:14:2a:22:0d:e7:53:81:5a:0e:e2:c3:bf: 78:cf:f6:1f:2a:f8:c2:0c:dd:f9:81:04:7f:b2:84: 2c:0a:f1:89:1c:34:14:59:8c:15:43:c5:2e:3f:33: 05:db:28:42:a5:91:68:fa:e9:81:0d:36:70:dd:15: 12:42:50:6f:74:c7:f2:c0:72:f8:55:6b:ca:18:03: a4:80:1f:d4:1c:5e:41:b5:58:a6:14:bd:b5:f8:e2: c4:57:e1:2a:5f:5c:a0:1e:ab:43:63:5b:9d:de:07: 55:43:24:64:b8:bf:32:bf:c9:ac:5b:f2:ee:c4:8f: 79:e0:7c:94:69:59:76:a6:ef:b3:03:99:99:25:15: 50:c7:cd:8d:ad:7d:a0:87:e9:75:6f:a8:65:ee:44: 84:6f:02:08:b4:96:ac:84:be:d1:8c:4f:2b:16:54: 18:92:c8:f7:2d:4d:6e:83:54:5d:f0:61:3e:2e:1f: b4:9e:a8:0f:e7:86:41:a6:a6:10:87:2d:3f:18:40: 2d:54:8f:c0:84:4b:29:32:f3:27:e3:27:2f:dc:7a: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A9:B6:8D:29:A5:3A:ED:79:68:FF:0A:37:3E:8A:7C:4E:F6:37:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/3023528b-3db6-357e-9146-0668edb4e6d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl X509v3 Authority Key Identifier: keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:3a8::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:99:88:76:42:c9:46:56:ed:fb:4f:0b:c7:40:9a:a5:31:95: 0a:d7:58:50:a6:da:8a:13:02:20:6f:ce:a2:25:6f:22:b7:a8: ec:e1:43:87:f9:45:4f:65:63:27:28:c1:33:3e:db:eb:5c:e8: 2b:3e:e4:20:96:b8:54:4b:45:7d:65:b7:da:7a:11:5f:f3:43: 11:c7:4d:b4:27:d5:4a:ce:3f:4c:04:a8:e4:1d:1c:9e:81:84: b2:e1:d7:35:2a:c6:38:b6:1c:a0:a5:5d:79:4e:79:8f:3e:71: 77:c0:1b:6a:e4:d4:d0:14:9c:47:47:5d:5c:5d:b6:56:5c:92: a0:89:ad:d9:55:fd:fe:c3:26:e2:4d:c6:1b:30:cb:d6:ad:fd: 20:14:90:5b:f9:f8:25:c4:cb:d7:cb:9a:66:0b:0d:f5:2c:9c: ef:15:2f:9f:e4:de:b7:34:9d:16:40:7a:f5:da:08:51:97:d9: bb:ca:0c:d0:67:2c:6d:03:a9:b3:1f:fa:bd:00:8b:a3:03:bb: 9c:a5:46:51:8d:1b:ff:a2:5c:cc:58:05:87:95:3e:dc:5a:28: 31:87:44:55:b4:42:41:db:17:bd:2c:5c:fe:1e:7f:ca:3c:f9: 1c:74:7e:76:a8:f8:3e:3e:7e:d6:5a:e5:6e:74:3d:fc:12:c9: 6f:09:c1:bb -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYnEwjDnspb5y+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm M2VmMB4XDTI2MDczMDE4NDU1NFoXDTI2MTAyODE4NDU1NFowLzEtMCsGA1UEAxMk NjNkZjBhNmEtMjMwZi00N2Q2LWFiZjMtMWNmMmE1MDQxNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRYbiOon3h8pp7wAzITGkjPkIZFbfwSMM927 oBzpi45yDOGW+8Q8hVpkAP3DYmoUKiIN51OBWg7iw794z/YfKvjCDN35gQR/soQs CvGJHDQUWYwVQ8UuPzMF2yhCpZFo+umBDTZw3RUSQlBvdMfywHL4VWvKGAOkgB/U HF5BtVimFL21+OLEV+EqX1ygHqtDY1ud3gdVQyRkuL8yv8msW/LuxI954HyUaVl2 pu+zA5mZJRVQx82NrX2gh+l1b6hl7kSEbwIItJashL7RjE8rFlQYksj3LU1ug1Rd 8GE+Lh+0nqgP54ZBpqYQhy0/GEAtVI/AhEspMvMn4ycv3HrXbQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFMmpto0ppTrteWj/Cjc+inxO9jfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvMzAyMzUyOGItM2RiNi0z NTdlLTkxNDYtMDY2OGVkYjRlNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4 NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A A6gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAEpmIdkLJRlbt+08Lx0CapTGVCtdYUKbaihMCIG/OoiVvIreo 7OFDh/lFT2VjJyjBMz7b61zoKz7kIJa4VEtFfWW32noRX/NDEcdNtCfVSs4/TASo 5B0cnoGEsuHXNSrGOLYcoKVdeU55jz5xd8AbauTU0BScR0ddXF22VlySoImt2VX9 /sMm4k3GGzDL1q39IBSQW/n4JcTL18uaZgsN9Syc7xUvn+TetzSdFkB69doIUZfZ u8oM0GcsbQOpsx/6vQCLowO7nKVGUY0b/6JczFgFh5U+3FooMYdEVbRCQdsXvSxc /h5/yjz5HHR+dqj4Pj5+1lrlbnQ9/BLJbwnBuw== -----END CERTIFICATE-----Generated at Fri Jul 31 08:15:24 2026 by rpki-client