$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa File: 02b3d6de-dde7-3c25-aba8-656086e431bd.roa (raw, json) Hash identifier: H0vgGy+6YpKQyQZTKybA895qxtlKH1b4Y2hZM2J+wn8= Subject key identifier: 3D:45:99:73:18:30:7E:EB:23:69:00:2F:48:01:72:F4:DE:BB:50:30 Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584E640F619206BE7886BE925D00 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 399668 IP address blocks: 2620:98:a000::/48 maxlen: 64 2620:98:a001::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:61:92:06:be:78:86:be:92:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=2bebd129-bb45-470f-8555-0fd04c92aedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:bd:d4:80:0d:33:99:f4:f4:a9:ce:9d:09: 8f:dc:c6:7b:f6:28:9d:26:0d:64:97:8f:2d:db:71: 86:26:8b:b1:0c:b0:45:11:65:05:91:cf:c4:f2:70: 2c:46:b7:db:61:0c:c8:b1:4c:e3:dd:00:af:19:8d: 09:7e:b4:a6:16:8a:d4:5d:24:39:98:a6:1e:91:7a: 97:e6:dc:61:c5:06:c5:10:39:34:f3:6b:74:c7:b4: e1:ca:f0:ba:ad:8e:e2:b2:16:c5:a8:7d:80:ce:3f: 2a:b5:ec:75:ad:90:cf:45:a1:e3:c2:dc:d5:6d:ac: 2b:3a:97:1f:ac:e3:7c:7c:4c:2f:2c:1e:46:12:b3: 50:d0:aa:e4:ad:b6:90:17:fe:76:e1:dc:9e:a0:f4: 01:5b:95:05:4e:09:ac:23:c3:59:af:62:88:0b:13: 88:6f:53:c4:2c:54:f8:eb:de:57:1a:ed:15:2d:46: c0:ba:c1:79:d5:61:a7:1d:ce:99:e8:76:cf:37:9d: 7b:df:62:4e:41:ba:0a:da:35:50:8a:6f:c5:cf:77: cd:0b:3a:9a:d5:d4:c2:42:83:dc:62:b5:49:6d:aa: fb:0f:2d:f8:a1:c0:79:20:e3:54:f4:84:29:90:a9: 66:38:d4:41:59:e8:63:e3:56:07:28:9a:bd:a4:7d: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:45:99:73:18:30:7E:EB:23:69:00:2F:48:01:72:F4:DE:BB:50:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:a000::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2b:47:47:31:4f:94:71:26:0d:db:76:3d:63:53:82:54:f7: 62:97:9f:43:f1:a0:47:3f:c5:37:d9:57:72:a4:c8:21:13:5d: f3:2e:d5:1d:cf:87:25:67:0c:59:62:e0:bd:db:2b:3d:38:4f: 77:e9:ab:12:41:e7:48:8f:d5:e2:0f:96:dd:a3:d4:f0:57:1c: d7:ce:03:14:cd:aa:e0:59:83:15:ba:fd:95:d2:34:c5:29:0c: 21:05:cb:ed:37:69:4d:cc:02:c6:b2:eb:3c:b6:44:63:4c:a1: 8c:89:57:6b:09:46:06:8a:89:7c:31:82:77:e2:98:77:30:fc: 3a:dc:93:93:fe:6b:d2:6d:5b:dd:69:b7:12:5f:d5:e3:3b:4e: 5b:3b:77:4b:6d:11:a6:24:06:3a:68:4e:a2:6c:72:8d:45:02: 49:1b:63:91:1e:2d:1c:80:3d:4e:72:1d:b0:3b:64:ea:20:58: 1a:c4:70:5a:73:8d:d3:47:ae:32:a4:31:49:bf:58:e0:35:da: 98:bb:32:db:72:24:39:ed:69:eb:67:37:3b:37:30:e0:f7:42: bd:ea:b8:f4:c3:f8:25:b7:7b:80:ed:33:ff:5c:51:1f:af:2e: ae:57:58:4d:b5:06:fc:fb:2d:de:0a:4c:12:a4:e7:e1:fe:fc: e1:b3:21:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5kD2GSBr54hr6SXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk MmJlYmQxMjktYmI0NS00NzBmLTg1NTUtMGZkMDRjOTJhZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kC91IANM5n09KnOnQmP3MZ79iidJg1kl48t 23GGJouxDLBFEWUFkc/E8nAsRrfbYQzIsUzj3QCvGY0JfrSmForUXSQ5mKYekXqX 5txhxQbFEDk082t0x7ThyvC6rY7ishbFqH2Azj8qtex1rZDPRaHjwtzVbawrOpcf rON8fEwvLB5GErNQ0KrkrbaQF/524dyeoPQBW5UFTgmsI8NZr2KICxOIb1PELFT4 695XGu0VLUbAusF51WGnHc6Z6HbPN51732JOQboK2jVQim/Fz3fNCzqa1dTCQoPc YrVJbar7Dy34ocB5IONU9IQpkKlmONRBWehj41YHKJq9pH0CkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD1FmXMYMH7rI2kAL0gBcvTeu1AwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvMDJiM2Q2ZGUtZGRlNy0z YzI1LWFiYTgtNjU2MDg2ZTQzMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAmKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIorR0cxT5RxJg3bdj1jU4JU92KXn0PxoEc/xTfZV3KkyCETXfMu 1R3PhyVnDFli4L3bKz04T3fpqxJB50iP1eIPlt2j1PBXHNfOAxTNquBZgxW6/ZXS NMUpDCEFy+03aU3MAsay6zy2RGNMoYyJV2sJRgaKiXwxgnfimHcw/Drck5P+a9Jt W91ptxJf1eM7Tls7d0ttEaYkBjpoTqJsco1FAkkbY5EeLRyAPU5yHbA7ZOogWBrE cFpzjdNHrjKkMUm/WOA12pi7MttyJDntaetnNzs3MOD3Qr3quPTD+CW3e4DtM/9c UR+vLq5XWE21Bvz7Ld4KTBKk5+H+/OGzIRg= -----END CERTIFICATE-----Generated at Fri Jul 24 19:05:25 2026 by rpki-client