$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/858152a2-40c7-3f8c-ad83-d021e975e2da.roa File: 858152a2-40c7-3f8c-ad83-d021e975e2da.roa (raw, json) Hash identifier: 03b7qe3f0NRlX0Ti1hfSMRTI1U+1fJ3lAOzQtAMnKt4= Subject key identifier: A8:86:65:32:C1:D8:A0:C7:50:C3:57:6E:1B:E9:A1:DB:92:F7:C6:06 Certificate issuer: /CN=49d0709a-32f1-4940-8864-e432721cf3ef Certificate serial: 010D0C9F4328584EAC6242A38DD3BD6628B0C300 Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/858152a2-40c7-3f8c-ad83-d021e975e2da.roa Signing time: Thu 30 Jul 2026 18:45:32 +0000 ROA not before: Thu 30 Jul 2026 18:45:32 +0000 ROA not after: Wed 28 Oct 2026 18:45:32 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:c7::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ac:62:42:a3:8d:d3:bd:66:28:b0:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef Validity Not Before: Jul 30 18:45:32 2026 GMT Not After : Oct 28 18:45:32 2026 GMT Subject: CN=db0166d3-d975-47e9-954c-3c009e23a88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:43:c0:9e:2c:f5:9c:45:53:1f:35:82:7f: 1b:71:dd:fc:d9:6f:35:27:f6:ab:05:a8:0c:ee:67: 87:75:37:bd:df:50:b7:b2:07:9a:58:c5:59:7f:2d: a3:e0:36:ca:ff:90:5f:99:44:9e:2d:b6:85:f8:61: 0f:97:ed:e7:ee:90:d8:61:e4:76:ec:80:7d:33:a7: 0e:82:0a:a9:f6:e5:2d:98:ea:a7:79:86:0a:26:84: 57:78:a0:d3:4d:f8:21:cd:af:1b:da:3f:bc:23:b3: 9b:e0:12:74:58:89:14:5e:75:a6:f5:50:22:22:0f: a1:16:f9:df:42:64:68:8f:98:20:33:f0:fa:da:c5: d0:97:d0:44:8d:05:d7:d9:ad:ae:50:21:f0:7e:80: d3:6a:94:f6:e3:94:60:c0:c8:fc:11:be:d4:09:c1: 9d:73:30:d6:22:f0:1e:3a:85:80:79:26:c3:eb:4f: 03:c9:ce:d7:f7:74:96:5d:de:c5:8d:61:ae:14:d2: 9e:26:b1:12:7f:aa:b5:b0:88:4f:db:25:ef:dd:a5: ab:ef:dc:53:a4:ef:9b:45:8f:54:c9:82:ba:1a:36: 2b:05:1f:cf:91:af:33:ab:64:e6:3e:21:7a:57:b7: 67:87:3d:f7:d9:29:7d:98:e4:8f:49:30:ab:c9:6c: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:86:65:32:C1:D8:A0:C7:50:C3:57:6E:1B:E9:A1:DB:92:F7:C6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/858152a2-40c7-3f8c-ad83-d021e975e2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl X509v3 Authority Key Identifier: keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:c7::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b6:6e:c5:16:5b:81:5f:f2:df:d5:9b:42:41:4b:29:c3:36: 38:e0:7a:2c:69:1c:c5:c5:fb:f4:7c:fc:56:89:ea:cd:eb:02: 3c:cb:ca:fd:7f:50:48:c0:f9:70:19:fb:2e:57:2d:65:ed:66: 5c:75:c0:97:b6:37:5b:d3:e0:64:0a:2d:33:0e:d4:00:95:99: c2:98:d8:ec:5b:24:be:5e:88:b4:00:26:23:92:5c:5e:88:26: b1:c7:07:c2:c1:6a:a4:36:be:7e:d7:6d:2f:d3:e1:f7:62:a0: 6c:79:83:e2:db:4a:10:68:b6:3c:57:48:30:22:ed:44:43:32: 03:aa:03:de:2e:75:cd:df:98:a2:be:43:11:b3:1e:b8:44:0c: b0:72:19:6f:35:23:38:43:fc:e0:35:b0:bf:7f:ed:5a:d8:83: 1c:8a:05:f5:f9:d3:c6:f5:ad:a3:e3:2b:16:b8:c0:2c:fc:97: 1d:cc:98:17:98:b3:b5:41:fd:1c:ea:8f:a1:79:5a:66:d6:90: 83:0e:9b:19:7a:c4:bd:34:97:1f:ad:a8:f3:ff:78:bf:86:7b: 82:17:2b:7d:7d:14:53:c6:89:db:14:9f:a4:23:44:c7:05:01: d2:ae:a5:7e:4c:a8:8b:43:eb:13:4d:ea:07:8d:1f:95:e1:15: 96:3d:d4:04 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYkKjjdO9ZiiwwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm M2VmMB4XDTI2MDczMDE4NDUzMloXDTI2MTAyODE4NDUzMlowLzEtMCsGA1UEAxMk ZGIwMTY2ZDMtZDk3NS00N2U5LTk1NGMtM2MwMDllMjNhODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGdDwJ4s9ZxFUx81gn8bcd382W81J/arBagM 7meHdTe931C3sgeaWMVZfy2j4DbK/5BfmUSeLbaF+GEPl+3n7pDYYeR27IB9M6cO ggqp9uUtmOqneYYKJoRXeKDTTfghza8b2j+8I7Ob4BJ0WIkUXnWm9VAiIg+hFvnf QmRoj5ggM/D62sXQl9BEjQXX2a2uUCHwfoDTapT245RgwMj8Eb7UCcGdczDWIvAe OoWAeSbD608Dyc7X93SWXd7FjWGuFNKeJrESf6q1sIhP2yXv3aWr79xTpO+bRY9U yYK6GjYrBR/Pka8zq2TmPiF6V7dnhz332Sl9mOSPSTCryWyrCQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFKiGZTLB2KDHUMNXbhvpoduS98YGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvODU4MTUyYTItNDBjNy0z ZjhjLWFkODMtZDAyMWU5NzVlMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4 NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AMcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAbrZuxRZbgV/y39WbQkFLKcM2OOB6LGkcxcX79Hz8VonqzesC PMvK/X9QSMD5cBn7LlctZe1mXHXAl7Y3W9PgZAotMw7UAJWZwpjY7Fskvl6ItAAm I5JcXogmsccHwsFqpDa+ftdtL9Ph92KgbHmD4ttKEGi2PFdIMCLtREMyA6oD3i51 zd+Yor5DEbMeuEQMsHIZbzUjOEP84DWwv3/tWtiDHIoF9fnTxvWto+MrFrjALPyX HcyYF5iztUH9HOqPoXlaZtaQgw6bGXrEvTSXH62o8/94v4Z7ghcrfX0UU8aJ2xSf pCNExwUB0q6lfkyoi0PrE03qB40fleEVlj3UBA== -----END CERTIFICATE-----Generated at Fri Jul 31 08:14:08 2026 by rpki-client