$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/9604a812-cbe4-3af6-a416-ce6db7ce6ae3.roa File: 9604a812-cbe4-3af6-a416-ce6db7ce6ae3.roa (raw, json) Hash identifier: 4T2RFKlpMRjGqRl/oPJkgjGpzGvQw6e7yRK335ocCa0= Subject key identifier: A1:6E:F6:C2:B4:31:46:72:F3:B2:7B:2C:B3:F8:5C:53:60:25:16:87 Certificate issuer: /CN=49d0709a-32f1-4940-8864-e432721cf3ef Certificate serial: 010D0C9F4328584EAC623AF6EF486DF4DE354D99 Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/9604a812-cbe4-3af6-a416-ce6db7ce6ae3.roa Signing time: Thu 30 Jul 2026 18:45:28 +0000 ROA not before: Thu 30 Jul 2026 18:45:28 +0000 ROA not after: Wed 28 Oct 2026 18:45:28 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:38::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ac:62:3a:f6:ef:48:6d:f4:de:35:4d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef Validity Not Before: Jul 30 18:45:28 2026 GMT Not After : Oct 28 18:45:28 2026 GMT Subject: CN=0d92867c-e281-41cf-a6cd-f19c109d61b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:78:f4:b9:1c:37:ac:e8:78:8b:fc:59:64: bf:3d:d8:39:b3:49:c2:6f:93:1e:89:b1:44:60:3a: da:8f:71:13:49:17:e3:a4:6b:78:8d:72:02:2e:51: 67:f2:6d:03:c0:74:44:42:5a:4b:cb:22:8a:55:f2: 59:a6:f7:27:5c:02:4c:9b:4f:a3:b9:6b:a0:1f:86: 9f:4b:c0:0a:47:51:d2:c8:94:64:08:04:a7:7e:b7: e3:b8:a4:a7:02:06:93:7c:29:ed:93:0e:3f:40:07: 39:b6:98:47:93:e7:b0:20:6e:8f:bc:74:95:69:13: ce:b9:d1:ed:dc:35:73:47:fa:26:d6:93:24:89:c8: d1:4e:7f:78:92:ab:47:22:be:60:96:ed:26:0f:af: 36:a2:c1:4c:a1:e3:84:af:db:15:e3:26:bc:90:09: 4a:31:77:67:23:53:7d:87:18:8d:bf:ca:4d:31:15: f5:6e:e5:38:53:f8:a2:e7:83:64:87:e0:25:39:6e: 9a:87:3d:c0:fe:50:0a:c5:fa:ff:b5:16:be:dd:79: 01:5d:82:52:08:47:8c:67:32:4a:e8:d8:69:70:85: 8c:73:0e:83:5b:68:44:38:05:1c:75:0e:44:f8:6a: 00:70:94:34:13:1c:97:9c:dd:7e:c1:39:28:0e:e9: 0a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6E:F6:C2:B4:31:46:72:F3:B2:7B:2C:B3:F8:5C:53:60:25:16:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/9604a812-cbe4-3af6-a416-ce6db7ce6ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl X509v3 Authority Key Identifier: keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:38::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ec:f6:a3:9e:e6:51:ca:fb:30:bc:9d:76:25:e6:60:ba:fc: 6e:3b:49:58:dd:df:a5:a0:b2:21:70:29:de:51:05:06:5f:f7: aa:38:f6:21:09:1c:b9:f5:fa:f5:ba:cd:ff:1b:0b:cf:2d:93: 85:a5:27:a0:8d:f0:97:7f:52:c2:9d:19:7d:79:ee:bf:54:08: 33:a7:05:46:09:ac:52:30:32:a5:0b:89:c7:23:28:e9:7c:c3: 7c:6b:39:16:62:6b:97:62:dc:6d:fa:0b:16:a4:b7:84:c6:38: 68:e2:c9:51:72:64:09:f2:f1:db:07:9e:99:cb:14:3d:ad:b1: d9:53:c6:47:75:13:7b:55:26:d1:4c:1b:39:87:81:dc:55:7e: d0:85:78:99:d9:85:12:f7:66:c8:34:ba:9b:19:34:99:18:7b: d8:8f:e0:83:94:ee:55:ce:4e:9b:ec:ec:09:f9:67:60:e1:67: 9e:2d:52:f4:52:7e:71:25:23:86:8e:8c:bc:b9:e3:a1:24:f1: c9:3c:f8:c3:f6:17:29:30:97:c8:c6:84:1d:25:13:51:51:39: 59:3e:98:94:84:a3:c9:ae:79:a2:cb:26:69:67:09:26:37:0a: 8e:c1:d8:a7:2d:1e:f3:1a:d5:b4:f8:c9:40:48:7b:23:89:bc: b9:d4:3f:14 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYjr270ht9N41TZkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm M2VmMB4XDTI2MDczMDE4NDUyOFoXDTI2MTAyODE4NDUyOFowLzEtMCsGA1UEAxMk MGQ5Mjg2N2MtZTI4MS00MWNmLWE2Y2QtZjE5YzEwOWQ2MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPt49LkcN6zoeIv8WWS/Pdg5s0nCb5MeibFE YDraj3ETSRfjpGt4jXICLlFn8m0DwHREQlpLyyKKVfJZpvcnXAJMm0+juWugH4af S8AKR1HSyJRkCASnfrfjuKSnAgaTfCntkw4/QAc5tphHk+ewIG6PvHSVaRPOudHt 3DVzR/om1pMkicjRTn94kqtHIr5glu0mD682osFMoeOEr9sV4ya8kAlKMXdnI1N9 hxiNv8pNMRX1buU4U/ii54Nkh+AlOW6ahz3A/lAKxfr/tRa+3XkBXYJSCEeMZzJK 6NhpcIWMcw6DW2hEOAUcdQ5E+GoAcJQ0ExyXnN1+wTkoDukKHwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFKFu9sK0MUZy87J7LLP4XFNgJRaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvOTYwNGE4MTItY2JlNC0z YWY2LWE0MTYtY2U2ZGI3Y2U2YWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4 NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A ADgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAPOz2o57mUcr7MLyddiXmYLr8bjtJWN3fpaCyIXAp3lEFBl/3 qjj2IQkcufX69brN/xsLzy2ThaUnoI3wl39Swp0ZfXnuv1QIM6cFRgmsUjAypQuJ xyMo6XzDfGs5FmJrl2LcbfoLFqS3hMY4aOLJUXJkCfLx2weemcsUPa2x2VPGR3UT e1Um0UwbOYeB3FV+0IV4mdmFEvdmyDS6mxk0mRh72I/gg5TuVc5Om+zsCflnYOFn ni1S9FJ+cSUjho6MvLnjoSTxyTz4w/YXKTCXyMaEHSUTUVE5WT6YlISjya55ossm aWcJJjcKjsHYpy0e8xrVtPjJQEh7I4m8udQ/FA== -----END CERTIFICATE-----Generated at Fri Jul 31 08:16:23 2026 by rpki-client