$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4657c331-f05e-37dd-bdbf-3b580a066118.roa File: 4657c331-f05e-37dd-bdbf-3b580a066118.roa (raw, json) Hash identifier: dOkloiFAf71+/bUtZ8IVT2LWseKdLRgh8R17BwULNFo= Subject key identifier: 57:28:EB:B6:DE:4E:24:DC:0D:02:57:6D:47:5C:79:E5:01:69:48:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F11A13B27459C1A14B133DAC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4657c331-f05e-37dd-bdbf-3b580a066118.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 2600:5002:1811::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:3b:27:45:9c:1a:14:b1:33:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=ef5a3525-210c-4a10-9ed9-3462467f62f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:62:5e:1c:17:ca:f6:f8:b3:0f:f1:c3:cd: 42:25:ec:16:5c:9c:9e:98:18:b6:58:3a:52:a4:8b: 82:3b:1e:0d:fc:70:65:fa:0f:7b:ad:fb:fa:84:01: e4:65:11:11:ae:00:6f:8f:30:16:55:f7:3c:df:7d: 3b:df:53:f8:b7:b7:8c:d7:c8:2f:7d:20:f6:03:90: 5b:2d:14:bf:ff:7f:d1:ae:47:53:78:a6:22:f3:87: 14:c5:25:99:05:84:de:af:58:ef:a9:31:95:34:fc: 08:9e:6d:19:ee:cd:58:47:4d:a5:1c:73:77:91:78: 0f:80:3f:24:8e:2d:b2:f3:0c:13:ea:a5:62:bc:de: e6:12:f5:c2:84:d1:fb:ef:e0:22:0a:65:b9:5d:4b: 7b:99:24:4e:84:74:6d:8f:12:06:4f:83:ca:72:4d: 5a:8f:08:17:43:03:f7:8f:98:61:ad:fc:be:f0:e4: 25:ac:37:0e:11:0e:a5:08:59:78:0a:da:c1:18:49: 43:49:15:0a:f6:ec:97:6d:71:44:42:d9:15:7f:a0: ae:67:c8:48:63:ce:96:42:05:2a:a8:7d:86:f4:8a: 16:20:30:c5:78:3f:1c:b6:4a:3f:f8:cb:ab:27:78: 85:b4:4b:6a:a4:89:27:14:cb:4a:3c:60:76:e6:43: 29:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:28:EB:B6:DE:4E:24:DC:0D:02:57:6D:47:5C:79:E5:01:69:48:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4657c331-f05e-37dd-bdbf-3b580a066118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2600:5002:1811::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b2:9e:5d:21:f9:68:54:70:f6:25:bf:36:7f:c7:e8:f8:31: 45:82:63:55:87:74:36:d4:fa:0b:c1:e3:ae:00:e1:c4:f4:a5: 5b:a5:17:46:df:b7:8f:9a:6d:fa:11:ff:91:ab:97:78:5b:ae: 34:19:fc:64:28:0c:46:27:93:26:1e:c4:9e:87:87:cc:ac:ff: d2:04:83:c1:06:49:ff:de:0c:c1:50:1c:0c:b8:d6:8f:2c:83: 3b:3f:1f:34:db:72:32:6f:0f:6a:e5:5b:97:28:88:42:a0:b7: 9a:75:38:5c:9b:e7:f1:0f:dc:00:e1:53:5d:f5:10:f6:d1:b3: f0:a8:c4:e5:be:3e:4f:dd:fa:6f:ac:9f:38:2e:27:84:1b:74: cf:1c:92:b6:05:94:c3:e6:6d:f4:10:a5:eb:13:c7:b9:26:12: 50:ce:15:c8:e9:c3:be:a8:8e:2e:2b:f2:d6:f1:9a:21:1e:a7: 3b:15:79:8f:5f:fd:ce:34:70:d4:e9:4b:a6:e4:3b:40:92:9c: 0b:3e:44:ff:7d:44:8d:81:3e:71:b1:3e:65:d2:d5:d6:4e:d6: 85:9e:94:0c:7c:48:c8:33:a7:f3:14:bf:d6:ac:dc:47:ef:d6: 19:4e:b6:86:a5:9b:f8:96:3a:60:bf:d4:d9:07:67:6c:82:ea: 56:02:42:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RoTsnRZwaFLEz2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWY1YTM1MjUtMjEwYy00YTEwLTllZDktMzQ2MjQ2N2Y2MmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrliXhwXyvb4sw/xw81CJewWXJyemBi2WDpS pIuCOx4N/HBl+g97rfv6hAHkZRERrgBvjzAWVfc8330731P4t7eM18gvfSD2A5Bb LRS//3/RrkdTeKYi84cUxSWZBYTer1jvqTGVNPwInm0Z7s1YR02lHHN3kXgPgD8k ji2y8wwT6qVivN7mEvXChNH77+AiCmW5XUt7mSROhHRtjxIGT4PKck1ajwgXQwP3 j5hhrfy+8OQlrDcOEQ6lCFl4CtrBGElDSRUK9uyXbXFEQtkVf6CuZ8hIY86WQgUq qH2G9IoWIDDFeD8ctko/+MurJ3iFtEtqpIknFMtKPGB25kMpmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFco67beTiTcDQJXbUdceeUBaUj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDY1N2MzMzEtZjA1ZS0z N2RkLWJkYmYtM2I1ODBhMDY2MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBQAhgR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2ynl0h+WhUcPYlvzZ/x+j4MUWCY1WHdDbU+gvB464A4cT0pVul F0bft4+abfoR/5Grl3hbrjQZ/GQoDEYnkyYexJ6Hh8ys/9IEg8EGSf/eDMFQHAy4 1o8sgzs/HzTbcjJvD2rlW5coiEKgt5p1OFyb5/EP3ADhU131EPbRs/CoxOW+Pk/d +m+snzguJ4QbdM8ckrYFlMPmbfQQpesTx7kmElDOFcjpw76oji4r8tbxmiEepzsV eY9f/c40cNTpS6bkO0CSnAs+RP99RI2BPnGxPmXS1dZO1oWelAx8SMgzp/MUv9as 3Efv1hlOtoalm/iWOmC/1NkHZ2yC6lYCQkM= -----END CERTIFICATE-----Generated at Mon Sep 28 00:11:39 2026 by rpki-client