$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa File: 29d649ff-7028-3767-8327-8c4721bf56a8.roa (raw, json) Hash identifier: XZ8wQAVOZuBTVZpBoiUmMy3QT3kUb1vnkt1oTAVIy+Y= Subject key identifier: A9:41:70:FA:82:D2:3C:9B:69:D7:09:BC:C2:37:15:5D:09:B7:46:AD Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584EF87CBE4B203B9A2A805F8480 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 399668 IP address blocks: 2620:98:a000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:be:4b:20:3b:9a:2a:80:5f:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=9d43c4b4-ba53-40f4-bb41-c388c54fb4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:78:e0:68:33:06:0d:e3:1a:6c:42:2c:1a: 73:53:f3:e3:8a:df:ba:14:4d:8e:1f:62:b1:0e:5a: 8a:6c:69:dd:78:d0:72:eb:94:09:e9:3d:4b:57:40: 8a:b8:4f:c5:3e:f4:38:26:12:71:dc:23:fc:da:8d: 61:26:47:9a:86:e0:cf:06:69:f3:00:2f:5a:b7:ec: 3e:11:59:73:2b:b9:4b:dc:1d:40:00:cc:36:75:6e: 0b:9d:13:54:cf:71:fe:3a:c0:ba:45:db:86:d8:08: c3:a6:05:2c:8a:56:5f:c1:96:c3:0e:af:4c:92:d4: 9b:35:22:26:11:87:3e:c0:83:43:47:2e:59:33:72: b4:7e:54:95:d1:03:1a:36:69:bc:59:6b:b8:45:83: f1:72:7f:39:be:6c:81:91:e5:2f:58:ef:fb:0b:ca: bf:94:69:dc:be:12:69:8f:ce:96:08:a7:c5:ec:cd: cd:34:ca:be:21:ff:a5:7b:7e:bd:f9:68:95:76:22: 17:68:ad:a0:c5:38:8c:af:b6:24:5f:32:2c:7e:81: fd:e5:1a:7e:d8:fa:46:ff:12:0c:0f:a8:32:bc:ab: ac:e2:23:73:06:51:a7:74:86:1b:fa:85:45:5b:fb: 63:3d:0b:9a:b0:bb:04:77:e8:e1:bf:bf:de:39:97: bb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:41:70:FA:82:D2:3C:9B:69:D7:09:BC:C2:37:15:5D:09:B7:46:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:17:44:80:01:81:8f:02:14:b0:ea:29:b7:85:52:30:0a:c6: 07:1f:4a:dc:ba:00:3f:94:4f:22:cd:ae:e1:20:1c:ef:aa:45: 2d:a0:ac:95:59:f8:40:46:96:84:57:77:f5:ea:7e:67:70:d3: 49:38:da:44:80:89:24:c5:e9:b2:26:6b:cd:7b:92:b1:b6:b8: b1:e1:9f:1b:10:c6:64:d6:ec:27:d2:5c:8b:8e:31:d7:66:08: 46:1c:a4:f2:25:4b:94:ac:19:4c:43:96:c0:a1:dc:29:53:7b: 4f:71:32:19:01:f1:5e:a7:56:23:09:af:ee:b2:7e:64:6e:5e: 6c:31:e9:b6:41:8c:f4:20:59:9c:6d:d5:c1:73:18:c9:46:b4: 7a:c3:e2:62:97:72:c0:11:4e:73:4d:c2:1c:81:49:b5:65:69: 3f:22:32:8b:6e:79:a5:12:bc:3e:9a:f7:5b:da:3e:5d:ac:c4: 68:ed:e5:bd:15:71:8f:23:e0:9c:9f:7d:2f:62:53:db:7b:00: 71:b8:5d:7c:b8:2f:ca:5b:84:33:ba:24:82:0e:55:67:1d:4c: 4c:2c:1b:2d:d4:30:f0:10:05:78:e1:89:d7:92:d9:a4:6b:ca: e9:86:0a:16:19:36:3b:12:39:cf:cb:eb:7f:a4:92:1e:6d:12: fb:d2:43:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fL5LIDuaKoBfhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk OWQ0M2M0YjQtYmE1My00MGY0LWJiNDEtYzM4OGM1NGZiNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBF44GgzBg3jGmxCLBpzU/Pjit+6FE2OH2Kx DlqKbGndeNBy65QJ6T1LV0CKuE/FPvQ4JhJx3CP82o1hJkeahuDPBmnzAC9at+w+ EVlzK7lL3B1AAMw2dW4LnRNUz3H+OsC6RduG2AjDpgUsilZfwZbDDq9MktSbNSIm EYc+wINDRy5ZM3K0flSV0QMaNmm8WWu4RYPxcn85vmyBkeUvWO/7C8q/lGncvhJp j86WCKfF7M3NNMq+If+le369+WiVdiIXaK2gxTiMr7YkXzIsfoH95Rp+2PpG/xIM D6gyvKus4iNzBlGndIYb+oVFW/tjPQuasLsEd+jhv7/eOZe74wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKlBcPqC0jybadcJvMI3FV0Jt0atMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvMjlkNjQ5ZmYtNzAyOC0z NzY3LTgzMjctOGM0NzIxYmY1NmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGwXRIABgY8CFLDqKbeFUjAKxgcfSty6AD+UTyLNruEgHO+qRS2g rJVZ+EBGloRXd/Xqfmdw00k42kSAiSTF6bIma817krG2uLHhnxsQxmTW7CfSXIuO MddmCEYcpPIlS5SsGUxDlsCh3ClTe09xMhkB8V6nViMJr+6yfmRuXmwx6bZBjPQg WZxt1cFzGMlGtHrD4mKXcsARTnNNwhyBSbVlaT8iMotueaUSvD6a91vaPl2sxGjt 5b0VcY8j4JyffS9iU9t7AHG4XXy4L8pbhDO6JIIOVWcdTEwsGy3UMPAQBXjhideS 2aRryumGChYZNjsSOc/L63+kkh5tEvvSQz4= -----END CERTIFICATE-----Generated at Sun Sep 27 00:13:38 2026 by rpki-client