$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd96c382-f39e-3426-83df-3f48d6bbc201.roa File: cd96c382-f39e-3426-83df-3f48d6bbc201.roa (raw, json) Hash identifier: 6bkCVpVAASrSg7fMbzZtn9kPdNFHsaNKtzCbGvfUjBo= Subject key identifier: C6:60:01:20:BF:32:06:95:DA:D5:25:7C:6F:91:EA:A6:3B:3A:D8:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F093D1581DC8D5874F51F4780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd96c382-f39e-3426-83df-3f48d6bbc201.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 2604:cb00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:15:81:dc:8d:58:74:f5:1f:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=1ee5e9e9-d850-42aa-9237-d92d5b6e6206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ea:e9:dd:b9:d2:a6:5d:4c:19:1e:c7:f7:f8: bc:83:59:51:ae:80:79:9e:bd:bf:c0:d9:64:4f:12: fa:4c:a6:55:6f:cf:5d:71:8e:57:43:b5:30:0b:38: 9b:21:a6:e3:3d:1b:e8:43:65:79:fe:6b:dc:b8:74: 7f:62:55:e4:93:5c:78:d7:bc:3c:94:c9:f5:fa:84: 0c:1e:45:1d:05:02:5d:1c:7b:3e:6f:17:ca:fc:3c: 34:35:9f:a4:c2:ee:23:66:0f:ad:49:c3:7e:cb:27: 9d:d5:34:c7:bd:a1:f0:71:37:ff:54:90:ef:02:3e: 1e:28:c9:15:cb:8a:27:46:12:cd:70:a4:d7:f5:b1: f6:c7:12:9f:2d:57:dc:42:43:9b:7b:00:2d:e6:62: d1:77:8a:d6:a5:f8:b7:de:c0:6e:08:fe:d0:51:0a: 8c:38:42:27:b8:3d:ba:a4:ce:cb:5a:df:d2:39:cd: 5a:c9:66:f0:1d:b7:c7:cf:11:9f:64:5e:6e:e9:76: f2:b1:6f:b4:b5:c4:1f:e8:30:4e:2d:fd:58:78:57: db:d0:4b:f9:8d:0d:67:34:94:d9:11:84:b0:7c:b3: 10:8d:09:28:c4:1c:fb:5b:38:66:88:ed:82:87:01: b8:ab:8d:62:1f:50:ad:dd:1c:e0:79:a8:fa:50:0c: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:60:01:20:BF:32:06:95:DA:D5:25:7C:6F:91:EA:A6:3B:3A:D8:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd96c382-f39e-3426-83df-3f48d6bbc201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9d:2d:8e:20:8e:8f:55:f5:56:3b:73:29:f7:3b:91:79:b9: a5:72:ad:00:34:5e:57:b2:1d:9f:a4:47:6d:fe:64:4b:a2:f8: c8:72:d2:ed:89:75:6c:cf:36:ad:fc:5b:82:1f:69:3c:05:d7: 5d:6f:8d:76:4b:01:87:8d:08:c5:48:03:61:eb:2e:0e:cd:75: ea:0d:ab:96:21:c6:f0:4b:9e:29:f3:b8:10:28:08:4b:38:a4: 60:8f:d8:65:79:63:0a:37:8f:cc:f5:1c:29:72:e9:16:94:1a: a5:a5:77:0f:d8:0e:10:86:c4:81:99:c8:ed:9e:68:96:30:1a: ae:c1:f5:1a:f6:90:94:97:70:7a:97:96:8a:ea:c5:44:d6:82: 61:19:e9:94:33:93:a9:33:ef:09:c4:9f:4f:3e:87:46:db:af: ac:34:03:cd:13:f4:7b:44:f1:12:45:c1:0f:0e:4f:cf:60:28: dd:9d:1e:a8:91:f0:cd:5d:1c:7f:4a:ba:f5:1d:b1:4f:46:1f: 16:ab:f9:83:7d:b9:91:64:12:69:e1:98:f1:e9:27:f5:64:82: 1d:bc:89:ab:fb:69:75:f3:3a:f7:d2:db:1f:36:bc:82:76:16: 7c:a6:2c:76:cc:7d:59:f9:62:84:7c:2f:e7:f0:4e:bf:29:11: 1b:12:a1:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8JPRWB3I1YdPUfR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MWVlNWU5ZTktZDg1MC00MmFhLTkyMzctZDkyZDViNmU2MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjerp3bnSpl1MGR7H9/i8g1lRroB5nr2/wNlk TxL6TKZVb89dcY5XQ7UwCzibIabjPRvoQ2V5/mvcuHR/YlXkk1x417w8lMn1+oQM HkUdBQJdHHs+bxfK/Dw0NZ+kwu4jZg+tScN+yyed1TTHvaHwcTf/VJDvAj4eKMkV y4onRhLNcKTX9bH2xxKfLVfcQkObewAt5mLRd4rWpfi33sBuCP7QUQqMOEInuD26 pM7LWt/SOc1ayWbwHbfHzxGfZF5u6XbysW+0tcQf6DBOLf1YeFfb0Ev5jQ1nNJTZ EYSwfLMQjQkoxBz7WzhmiO2ChwG4q41iH1Ct3Rzgeaj6UAx5KwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMZgASC/MgaV2tUlfG+R6qY7OtgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Q5NmMzODItZjM5ZS0z NDI2LTgzZGYtM2Y0OGQ2YmJjMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTLADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlnS2OII6PVfVWO3Mp9zuRebmlcq0ANF5Xsh2fpEdt/mRLovjIctLt iXVszzat/FuCH2k8Bdddb412SwGHjQjFSANh6y4OzXXqDauWIcbwS54p87gQKAhL OKRgj9hleWMKN4/M9RwpcukWlBqlpXcP2A4QhsSBmcjtnmiWMBquwfUa9pCUl3B6 l5aK6sVE1oJhGemUM5OpM+8JxJ9PPodG26+sNAPNE/R7RPESRcEPDk/PYCjdnR6o kfDNXRx/Srr1HbFPRh8Wq/mDfbmRZBJp4Zjx6Sf1ZIIdvImr+2l18zr30tsfNryC dhZ8pix2zH1Z+WKEfC/n8E6/KREbEqE5 -----END CERTIFICATE-----Generated at Sun Sep 27 11:04:39 2026 by rpki-client