$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/cf870199-09e4-353a-8975-894a92e4638e.roa File: cf870199-09e4-353a-8975-894a92e4638e.roa (raw, json) Hash identifier: nQzEnMkxBbZak2jYH+n2+hYHPK0YtbV8gXFN+3Xy0sM= Subject key identifier: 83:FB:9E:32:AA:D3:AF:F2:9E:EC:26:4E:A1:32:F6:4E:F9:9C:6C:70 Certificate issuer: /CN=49d0709a-32f1-4940-8864-e432721cf3ef Certificate serial: 010D0C9F4328584EAC6246BFC5C01BB0171BB580 Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/cf870199-09e4-353a-8975-894a92e4638e.roa Signing time: Thu 30 Jul 2026 18:45:34 +0000 ROA not before: Thu 30 Jul 2026 18:45:34 +0000 ROA not after: Wed 28 Oct 2026 18:45:34 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:110::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ac:62:46:bf:c5:c0:1b:b0:17:1b:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef Validity Not Before: Jul 30 18:45:34 2026 GMT Not After : Oct 28 18:45:34 2026 GMT Subject: CN=188da2b0-c9ba-4850-9203-c6822305c6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:18:e1:43:9a:75:83:b6:00:64:1b:9b:cf: ef:1c:5c:09:36:cf:fb:b6:eb:79:af:45:5f:64:6d: e4:28:a2:f7:a7:5a:b2:f6:ab:2d:f8:fb:75:84:13: de:c0:f3:f1:67:41:fa:98:29:35:15:6a:9b:20:76: 8d:d3:09:e2:93:3f:e5:43:30:08:4e:61:10:9b:6f: 09:56:a0:da:95:75:36:5c:96:71:70:af:64:35:99: 06:16:ed:ef:a2:e8:05:7a:ae:03:88:08:06:7c:e7: 6e:00:c0:64:bc:1c:b4:82:c9:b7:a0:79:88:96:1d: 68:15:14:29:a7:70:00:41:d9:a0:5a:7e:7c:9d:24: c2:1c:73:da:1f:8d:75:c8:f3:81:c5:ee:9d:27:af: e3:d9:fe:d2:99:3d:94:be:ec:cf:9c:02:e5:12:70: a5:73:8e:18:80:13:78:5b:90:b0:02:9e:53:ba:a3: 3b:28:87:4a:1f:ac:dc:4a:64:eb:a8:ed:d9:90:d5: 39:fb:3d:44:40:04:da:82:93:dd:5d:e3:f5:3f:08: a0:90:ab:9b:9d:20:eb:54:de:cc:67:49:30:ac:01: 4d:18:a0:65:55:6b:f8:88:6a:58:13:4a:13:83:ea: 1e:c6:ae:83:74:29:95:28:ed:bd:fc:34:44:ac:7c: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FB:9E:32:AA:D3:AF:F2:9E:EC:26:4E:A1:32:F6:4E:F9:9C:6C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/cf870199-09e4-353a-8975-894a92e4638e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl X509v3 Authority Key Identifier: keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:110::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c8:51:46:3e:52:eb:1a:17:5a:00:0d:7d:16:d0:9f:07:5f: 67:50:b8:15:97:31:b7:ba:bf:c0:0f:cb:bc:2a:85:b6:2d:b3: 53:eb:92:02:8a:de:f4:e8:7a:da:53:6c:7c:44:86:4c:f4:71: c4:47:5b:49:56:ad:95:ef:8a:fd:82:87:55:c0:71:11:a0:5c: 28:ef:ff:96:75:66:86:da:d2:4b:19:03:bf:a5:87:3c:6d:cf: e2:3d:84:db:11:cb:64:fd:e5:62:dd:9d:1d:22:53:cc:60:84: e3:64:a2:e4:1b:33:13:81:88:0f:04:9b:90:86:49:70:c6:a1: 40:af:52:b1:d9:9e:bd:40:4b:ed:5e:77:1f:32:07:61:92:d4: 5a:a7:8d:ca:54:5c:86:87:46:90:c4:89:bd:b4:cc:06:89:40: 2b:20:4f:da:4c:6d:21:be:a9:54:e9:30:a4:06:a5:d8:92:fb: d5:0f:94:f1:70:ac:13:5b:9d:02:5b:48:8b:56:a7:8f:87:16: 95:fc:8f:65:60:54:6e:9f:6b:e0:ae:bd:eb:15:65:d0:0e:39: 17:4e:54:ee:63:64:b3:8a:99:7f:31:23:29:0d:2a:e9:48:8c: 0b:91:35:27:a6:79:11:ef:a3:40:cd:06:23:e3:1f:11:23:bc: 9f:26:6e:26 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYka/xcAbsBcbtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm M2VmMB4XDTI2MDczMDE4NDUzNFoXDTI2MTAyODE4NDUzNFowLzEtMCsGA1UEAxMk MTg4ZGEyYjAtYzliYS00ODUwLTkyMDMtYzY4MjIzMDVjNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfwY4UOadYO2AGQbm8/vHFwJNs/7tut5r0Vf ZG3kKKL3p1qy9qst+Pt1hBPewPPxZ0H6mCk1FWqbIHaN0wnikz/lQzAITmEQm28J VqDalXU2XJZxcK9kNZkGFu3vougFeq4DiAgGfOduAMBkvBy0gsm3oHmIlh1oFRQp p3AAQdmgWn58nSTCHHPaH411yPOBxe6dJ6/j2f7SmT2UvuzPnALlEnClc44YgBN4 W5CwAp5TuqM7KIdKH6zcSmTrqO3ZkNU5+z1EQATagpPdXeP1PwigkKubnSDrVN7M Z0kwrAFNGKBlVWv4iGpYE0oTg+oexq6DdCmVKO29/DRErHySYQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFIP7njKq06/ynuwmTqEy9k75nGxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvY2Y4NzAxOTktMDllNC0z NTNhLTg5NzUtODk0YTkyZTQ2MzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4 NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A ARAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAX8hRRj5S6xoXWgANfRbQnwdfZ1C4FZcxt7q/wA/LvCqFti2z U+uSAore9Oh62lNsfESGTPRxxEdbSVatle+K/YKHVcBxEaBcKO//lnVmhtrSSxkD v6WHPG3P4j2E2xHLZP3lYt2dHSJTzGCE42Si5BszE4GIDwSbkIZJcMahQK9Ssdme vUBL7V53HzIHYZLUWqeNylRchodGkMSJvbTMBolAKyBP2kxtIb6pVOkwpAal2JL7 1Q+U8XCsE1udAltIi1anj4cWlfyPZWBUbp9r4K696xVl0A45F05U7mNks4qZfzEj KQ0q6UiMC5E1J6Z5Ee+jQM0GI+MfESO8nyZuJg== -----END CERTIFICATE-----Generated at Fri Jul 31 08:18:00 2026 by rpki-client