$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa File: 29d649ff-7028-3767-8327-8c4721bf56a8.roa (raw, json) Hash identifier: +ybhviEOOpc9EPOBno/+asaX7H2H4braf1wRGY5dFbw= Subject key identifier: C2:EC:8D:BC:82:0E:49:72:1F:91:EF:8F:F8:42:AB:2B:0A:DD:A7:CE Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584E5619F0425DB489A11124BF80 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 399668 IP address blocks: 2620:98:a000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:f0:42:5d:b4:89:a1:11:24:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=21444da6-3ba4-4b6b-b2b8-b96607215320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:28:3f:e1:2f:1b:8f:ad:54:7e:a2:d5:48: b4:63:a4:b3:46:d4:37:2f:7f:b2:4c:af:34:c1:f5: 8e:e9:17:98:3f:b1:45:77:a0:85:c4:37:44:ae:2c: b6:9d:cb:ae:ab:4f:58:65:3a:01:fb:fe:bf:59:0f: 82:85:de:c5:eb:ce:db:dc:44:cc:d4:31:dd:8c:a5: d3:ea:e0:8c:96:7b:53:8f:be:1d:20:21:a4:cb:70: b7:89:a2:1e:7b:b6:8c:4a:f7:ad:78:cb:51:b3:1d: 2b:ec:49:27:53:ef:41:f6:ad:01:05:0d:c9:f3:33: af:51:a6:29:59:ad:56:af:9c:bd:ba:e0:8c:0d:29: 75:62:f3:5a:a3:a4:bd:3d:e7:1a:63:db:ab:9b:be: 4b:bc:2d:85:10:1a:32:b6:e6:c7:f4:b9:45:fb:34: d0:b7:c6:8c:cb:38:78:a3:73:e4:79:5a:f0:ef:c2: b8:e0:f4:cd:6e:a8:8a:9f:62:3f:2b:04:37:96:eb: b7:e6:af:90:b2:52:09:6e:4d:fc:80:ac:8b:e4:96: 53:d8:f9:fe:e1:1a:7c:23:d9:96:71:15:ad:11:1b: 6c:13:9d:55:db:1e:20:de:02:37:74:7f:a1:fe:6d: a5:c5:05:89:87:d2:0d:cd:2a:9b:f9:4c:ac:d8:3a: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EC:8D:BC:82:0E:49:72:1F:91:EF:8F:F8:42:AB:2B:0A:DD:A7:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:47:9c:20:f4:45:e1:ce:a3:75:67:66:55:70:51:eb:71:39: a4:f1:8b:3f:ab:21:cd:92:0b:47:7d:22:d5:4c:a3:45:63:a9: 23:ab:e0:7f:d1:4f:6d:24:08:46:46:ca:d6:e1:68:a3:5c:0a: 37:23:73:cc:b8:88:3d:21:d4:7f:0f:85:1a:87:63:76:df:18: 72:a5:55:5f:fa:ac:b8:25:c4:1f:a9:e9:27:a1:f4:74:6a:80: 50:37:08:18:9b:55:82:ea:6f:59:ff:0a:2a:fa:b8:3c:3e:9c: 37:3a:43:6d:65:e2:96:5e:60:36:aa:b1:65:8a:f8:12:c5:e8: 8b:64:c2:32:c4:c6:af:5c:d0:1f:f6:69:c6:c4:64:04:41:07: 1a:c0:ec:65:f4:18:32:20:77:f5:aa:7f:1a:93:9d:e7:3a:57: 37:3a:17:62:12:0d:ae:a0:8d:7a:6c:37:ef:64:14:07:48:95: 1f:00:2a:1c:c3:16:44:cc:19:32:9a:bf:4d:5b:1c:cc:f0:d1: 9b:6b:a0:fd:54:09:f7:79:a8:1c:3b:74:c6:4b:9c:8b:de:bf: b0:2c:55:ab:00:4a:4f:c8:38:8a:c2:f4:69:8c:73:25:05:cf: 91:4e:71:94:e2:98:b7:c0:d7:da:b5:9b:52:e4:98:84:65:a8: b7:6f:e4:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5WGfBCXbSJoREkv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk MjE0NDRkYTYtM2JhNC00YjZiLWIyYjgtYjk2NjA3MjE1MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQIoP+EvG4+tVH6i1Ui0Y6SzRtQ3L3+yTK80 wfWO6ReYP7FFd6CFxDdEriy2ncuuq09YZToB+/6/WQ+Chd7F687b3ETM1DHdjKXT 6uCMlntTj74dICGky3C3iaIee7aMSveteMtRsx0r7EknU+9B9q0BBQ3J8zOvUaYp Wa1Wr5y9uuCMDSl1YvNao6S9PecaY9urm75LvC2FEBoytubH9LlF+zTQt8aMyzh4 o3PkeVrw78K44PTNbqiKn2I/KwQ3luu35q+QslIJbk38gKyL5JZT2Pn+4Rp8I9mW cRWtERtsE51V2x4g3gI3dH+h/m2lxQWJh9INzSqb+Uys2DqrgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMLsjbyCDklyH5Hvj/hCqysK3afOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvMjlkNjQ5ZmYtNzAyOC0z NzY3LTgzMjctOGM0NzIxYmY1NmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMJHnCD0ReHOo3VnZlVwUetxOaTxiz+rIc2SC0d9ItVMo0VjqSOr 4H/RT20kCEZGytbhaKNcCjcjc8y4iD0h1H8PhRqHY3bfGHKlVV/6rLglxB+p6Seh 9HRqgFA3CBibVYLqb1n/Cir6uDw+nDc6Q21l4pZeYDaqsWWK+BLF6ItkwjLExq9c 0B/2acbEZARBBxrA7GX0GDIgd/WqfxqTnec6Vzc6F2ISDa6gjXpsN+9kFAdIlR8A KhzDFkTMGTKav01bHMzw0ZtroP1UCfd5qBw7dMZLnIvev7AsVasASk/IOIrC9GmM cyUFz5FOcZTimLfA19q1m1LkmIRlqLdv5Ck= -----END CERTIFICATE-----Generated at Fri Jul 24 14:06:30 2026 by rpki-client