$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/8b68e340-04c2-3d15-b964-a0e21477b37f.roa File: 8b68e340-04c2-3d15-b964-a0e21477b37f.roa (raw, json) Hash identifier: o62UToXQP4wscIMmxbUYY7JHlqzBVTn6q11DvD2GAFY= Subject key identifier: 9C:3C:68:07:A7:B5:83:3F:0B:F2:82:48:FA:04:79:03:9D:15:EC:67 Certificate issuer: /CN=49d0709a-32f1-4940-8864-e432721cf3ef Certificate serial: 010D0C9F4328584EAC623F40B647A3F94B12B1C0 Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/8b68e340-04c2-3d15-b964-a0e21477b37f.roa Signing time: Thu 30 Jul 2026 18:45:30 +0000 ROA not before: Thu 30 Jul 2026 18:45:30 +0000 ROA not after: Wed 28 Oct 2026 18:45:30 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:89::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ac:62:3f:40:b6:47:a3:f9:4b:12:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef Validity Not Before: Jul 30 18:45:30 2026 GMT Not After : Oct 28 18:45:30 2026 GMT Subject: CN=f24276de-686d-4aba-9b6c-35df4786fc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:3c:dc:10:b6:bc:b1:ca:77:47:84:af:7f: 74:d6:bf:d1:6e:e8:73:27:72:3a:82:71:14:c3:80: 73:a5:42:4f:9c:9e:df:e3:ac:b4:a2:47:03:8d:76: 6e:7c:a4:55:b7:5e:9a:b4:9c:9c:bd:77:60:8e:4a: a9:f8:8c:5b:67:f0:4e:08:97:81:30:63:9b:99:35: 39:31:a2:1c:81:f0:b2:4a:b5:6b:92:1a:ac:d2:1f: f6:36:ae:b2:75:f5:12:c3:b4:52:ba:e6:93:b7:0b: aa:d4:81:3d:5c:b9:14:2e:18:4a:90:0d:a0:b8:62: 55:b9:91:c3:32:9a:63:bb:d9:92:ca:3d:4f:4a:01: 0a:b5:81:af:2f:9f:9d:0b:43:42:f8:8e:cb:86:13: 25:33:bc:19:9f:a0:3b:cb:1b:4d:b9:64:bd:59:e1: ca:17:5c:6f:4a:8a:a6:c4:8f:ab:b2:e3:2b:9d:33: 48:bb:1d:f1:29:20:e2:74:4f:87:42:1a:4a:1a:9a: 2d:91:55:7c:36:a1:df:87:22:56:31:28:c8:ce:6b: e0:3f:f4:35:13:53:57:08:08:4b:3e:54:1e:23:33: 99:57:34:91:a5:3b:2e:e5:4f:89:54:24:5e:e8:77: fd:fc:95:d5:d5:69:6d:01:34:5d:7f:33:54:62:a8: 38:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3C:68:07:A7:B5:83:3F:0B:F2:82:48:FA:04:79:03:9D:15:EC:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/8b68e340-04c2-3d15-b964-a0e21477b37f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl X509v3 Authority Key Identifier: keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:89::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:26:ef:fc:e8:9f:92:b1:bc:10:5a:a4:c5:66:9c:80:b4:f5: a7:dd:93:b0:79:b4:f8:0c:f8:02:e3:7e:f3:3d:8d:7b:78:8f: 77:be:9e:0b:e3:d2:1f:e0:7a:d2:4a:5d:02:4d:8f:13:c2:c0: 62:cb:15:6a:2f:11:9d:42:0b:8e:54:d7:b3:d6:2b:ae:e6:b5: 77:9a:c2:3c:2a:9c:30:6c:53:f7:95:76:14:2c:23:ec:34:09: 78:9e:4a:b2:1f:28:ac:ca:11:d6:69:e0:98:f2:00:5f:09:f4: db:ed:c5:e5:61:75:89:e7:4e:8c:2f:6d:88:2e:a4:9a:fd:06: 9e:59:1d:5a:b0:6b:e0:a9:25:ef:83:21:62:83:be:89:85:4a: 55:24:18:76:c9:98:06:c2:c1:76:20:ad:6f:3f:1d:3c:54:a7: c8:7c:ee:34:04:87:1d:58:c0:61:ba:79:cd:30:00:14:bd:28: 7b:fa:e0:72:03:bd:46:cd:5f:ff:b2:c2:96:82:1a:fd:d5:c5: 0b:aa:91:3c:cf:08:ef:14:da:cc:b3:ec:f4:05:c0:07:f4:e9: 6a:cf:80:a6:f8:68:6d:43:17:40:90:2d:45:1d:60:45:1f:75: 8a:53:82:73:10:35:1b:c8:90:49:56:77:be:d2:43:04:f3:59: c6:f3:0a:28 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYj9Atkej+UsSscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm M2VmMB4XDTI2MDczMDE4NDUzMFoXDTI2MTAyODE4NDUzMFowLzEtMCsGA1UEAxMk ZjI0Mjc2ZGUtNjg2ZC00YWJhLTliNmMtMzVkZjQ3ODZmYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6083BC2vLHKd0eEr3901r/RbuhzJ3I6gnEU w4BzpUJPnJ7f46y0okcDjXZufKRVt16atJycvXdgjkqp+IxbZ/BOCJeBMGObmTU5 MaIcgfCySrVrkhqs0h/2Nq6ydfUSw7RSuuaTtwuq1IE9XLkULhhKkA2guGJVuZHD Mppju9mSyj1PSgEKtYGvL5+dC0NC+I7LhhMlM7wZn6A7yxtNuWS9WeHKF1xvSoqm xI+rsuMrnTNIux3xKSDidE+HQhpKGpotkVV8NqHfhyJWMSjIzmvgP/Q1E1NXCAhL PlQeIzOZVzSRpTsu5U+JVCRe6Hf9/JXV1WltATRdfzNUYqg4gQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJw8aAentYM/C/KCSPoEeQOdFexnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvOGI2OGUzNDAtMDRjMi0z ZDE1LWI5NjQtYTBlMjE0NzdiMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4 NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AIkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAdybv/OifkrG8EFqkxWacgLT1p92TsHm0+Az4AuN+8z2Ne3iP d76eC+PSH+B60kpdAk2PE8LAYssVai8RnUILjlTXs9Yrrua1d5rCPCqcMGxT95V2 FCwj7DQJeJ5Ksh8orMoR1mngmPIAXwn02+3F5WF1iedOjC9tiC6kmv0GnlkdWrBr 4Kkl74MhYoO+iYVKVSQYdsmYBsLBdiCtbz8dPFSnyHzuNASHHVjAYbp5zTAAFL0o e/rgcgO9Rs1f/7LCloIa/dXFC6qRPM8I7xTazLPs9AXAB/Tpas+ApvhobUMXQJAt RR1gRR91ilOCcxA1G8iQSVZ3vtJDBPNZxvMKKA== -----END CERTIFICATE-----Generated at Fri Jul 31 08:15:11 2026 by rpki-client