$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa File: 28b58e9a-06a7-32cf-aa39-a353038ad25a.roa (raw, json) Hash identifier: +MGQeGhCvmik1m9+70L/DBfovJeC/ulkyBm9cxTVGRc= Subject key identifier: 63:FE:3E:18:C9:4A:D2:57:07:C8:F1:29:8D:5B:51:19:A0:76:82:69 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E8B250C5ABFFDA5C1AE187100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 22394 IP address blocks: 2600:1010::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:25:0c:5a:bf:fd:a5:c1:ae:18:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=e97be914-0184-48e9-b844-c72113cf9934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:38:31:ee:a6:f6:d7:51:1e:b9:74:24:e9: a5:27:9b:21:d0:6a:a7:9c:15:6b:44:c3:ab:f5:59: 0a:e8:9e:30:04:45:ba:9d:d8:fc:b1:1d:03:e8:0f: b6:1c:3a:82:0c:3b:fb:6a:78:7f:16:6d:26:eb:e5: a4:b5:b9:6f:ba:25:51:19:ea:a8:6a:44:50:09:c0: 86:97:f4:74:a2:4f:56:89:60:e0:70:bd:cd:98:bd: d7:ba:4a:03:d5:79:ac:41:3f:5b:ec:95:ab:f3:40: 97:63:3c:3b:40:30:f1:6a:e3:6e:e0:95:b9:14:f7: 13:49:31:9f:6a:55:eb:db:c9:aa:65:19:89:b5:22: 7d:ec:45:f3:68:fb:89:ac:d2:15:ec:2b:28:36:05: 49:de:b3:01:93:14:95:64:52:1f:6f:cc:df:1a:fc: 3f:8d:08:a6:4d:38:47:91:8e:e2:21:d6:60:e6:8e: 8d:c1:ea:3c:d8:95:3e:ff:21:1b:da:c8:13:ba:80: 0c:97:15:fe:36:62:6e:3f:94:4d:89:73:d4:8c:c8: bc:3f:ee:28:49:79:62:3a:a2:f5:5f:0d:0f:98:41: 8a:a1:f7:59:81:07:61:16:bb:42:67:14:b2:ac:6a: ba:6d:76:a9:85:45:06:68:28:09:e1:8d:e8:2c:1b: 44:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FE:3E:18:C9:4A:D2:57:07:C8:F1:29:8D:5B:51:19:A0:76:82:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1010::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c9:eb:37:e4:f8:4b:84:1b:ff:ee:d5:07:e9:64:75:71:a8: bd:a9:ac:a5:30:b4:85:87:3c:f4:99:92:48:48:56:81:ee:3c: 35:d6:32:fa:27:76:34:ad:fe:53:a7:2b:cc:4b:a4:94:a9:db: aa:0e:77:e3:4e:4a:28:90:d9:2f:fd:64:14:d8:ae:24:62:04: 4a:e1:9f:63:38:e1:3a:f2:98:3e:60:0b:91:9a:de:20:b4:77: 34:48:bc:26:fe:9c:fb:e2:8a:98:9d:dd:83:cc:dd:a3:93:b7: d4:ff:42:96:21:a6:c6:3f:b3:90:fe:50:0f:dd:a7:45:11:b9: 0f:8c:58:44:f6:8f:2b:08:e6:8b:cf:04:0d:14:1f:10:90:df: 93:68:95:df:18:e6:98:fb:a2:cb:27:15:e2:6f:cd:31:ee:0e: c1:55:15:76:ab:bf:73:1c:67:ee:85:5a:4b:af:7d:0c:b7:98: 0b:14:c4:a7:03:ee:83:3e:71:b0:ca:56:d5:ae:18:07:f5:2c: 75:cb:f9:c9:61:05:72:98:41:2f:a0:cc:81:fd:71:df:1f:63: 95:d6:6d:01:7e:cb:5a:96:40:e4:21:ad:76:70:45:63:a4:69: c0:0f:b0:9f:07:61:5d:d1:5e:e2:8c:7b:3a:e1:63:4c:5f:78: 3f:77:fa:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6LJQxav/2lwa4YcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk ZTk3YmU5MTQtMDE4NC00OGU5LWI4NDQtYzcyMTEzY2Y5OTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUs4Me6m9tdRHrl0JOmlJ5sh0GqnnBVrRMOr 9VkK6J4wBEW6ndj8sR0D6A+2HDqCDDv7anh/Fm0m6+WktblvuiVRGeqoakRQCcCG l/R0ok9WiWDgcL3NmL3XukoD1XmsQT9b7JWr80CXYzw7QDDxauNu4JW5FPcTSTGf alXr28mqZRmJtSJ97EXzaPuJrNIV7CsoNgVJ3rMBkxSVZFIfb8zfGvw/jQimTThH kY7iIdZg5o6Nweo82JU+/yEb2sgTuoAMlxX+NmJuP5RNiXPUjMi8P+4oSXliOqL1 Xw0PmEGKofdZgQdhFrtCZxSyrGq6bXaphUUGaCgJ4Y3oLBtEAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGP+PhjJStJXB8jxKY1bURmgdoJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjhiNThlOWEtMDZhNy0z MmNmLWFhMzktYTM1MzAzOGFkMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgAQEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxyes35PhLhBv/7tUH6WR1cai9qaylMLSFhzz0mZJISFaB7jw11jL6 J3Y0rf5TpyvMS6SUqduqDnfjTkookNkv/WQU2K4kYgRK4Z9jOOE68pg+YAuRmt4g tHc0SLwm/pz74oqYnd2DzN2jk7fU/0KWIabGP7OQ/lAP3adFEbkPjFhE9o8rCOaL zwQNFB8QkN+TaJXfGOaY+6LLJxXib80x7g7BVRV2q79zHGfuhVpLr30Mt5gLFMSn A+6DPnGwylbVrhgH9Sx1y/nJYQVymEEvoMyB/XHfH2OV1m0BfstalkDkIa12cEVj pGnAD7CfB2Fd0V7ijHs64WNMX3g/d/rr -----END CERTIFICATE-----Generated at Thu Jul 23 21:54:07 2026 by rpki-client