$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa File: f871407c-c2bc-3d6c-8715-048a48274b19.roa (raw, json) Hash identifier: yIOz0TEkofObVvZFzK6b98NQ5nifvsxug0Q6pjN0iCE= Subject key identifier: 6A:E8:6C:B2:83:FF:56:82:90:48:39:85:15:5C:15:7A:EA:93:44:E9 Certificate issuer: /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119 Certificate serial: 010D0C9F4328584EC371C7347F77C502ED6D8670 Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 21693 IP address blocks: 2620:18b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:c7:34:7f:77:c5:02:ed:6d:86:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=33c70ef4-9c92-4386-9f96-1db2ab774ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:88:3e:2a:4a:a1:99:f1:a8:e4:64:c7:f0: 8b:94:82:f0:20:70:eb:c0:c3:a2:71:f2:bf:17:74: fc:89:ce:65:3c:33:1b:3f:39:91:ef:25:62:e3:d9: 66:1d:37:5c:03:1d:81:6a:4e:5b:c9:f3:19:ce:ab: dc:16:d9:ce:b0:f6:15:2f:f9:03:e7:26:ca:bf:b2: bd:5f:ae:3a:84:88:86:0b:ae:79:4c:54:2d:55:52: c9:b8:8a:1d:db:21:85:d3:31:65:ad:fc:09:de:f2: b7:ec:ff:95:3b:69:25:89:80:cd:ee:4d:7d:5d:99: 57:df:46:cf:ae:68:68:50:0e:4d:00:59:16:ba:9f: f6:56:dc:99:d6:7e:d3:90:3f:1d:30:2d:13:f6:78: 31:5e:fb:e8:3e:ea:73:1c:14:b9:f4:c2:b6:72:85: b9:6a:cf:4c:ed:51:53:b5:56:50:b2:4e:07:55:28: 46:ad:be:80:c7:ca:e9:e1:29:cf:c8:ce:82:bf:a9: ca:df:58:2c:2d:e9:d2:7f:16:a8:63:d8:2e:c3:39: f1:71:5a:4f:58:75:51:7f:7c:7a:e2:9c:15:d3:90: ff:7b:c2:a6:f6:c5:62:b4:4c:63:e9:e9:55:c8:06: 65:69:c7:cf:8d:ff:45:1d:05:66:67:33:25:b7:03: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E8:6C:B2:83:FF:56:82:90:48:39:85:15:5C:15:7A:EA:93:44:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl X509v3 Authority Key Identifier: keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer sbgp-ipAddrBlock: critical IPv6: 2620:18b::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:44:68:3a:e6:c2:68:5b:ad:40:be:1e:6c:b2:21:6c:05:f6: 68:81:7d:ac:b0:04:39:71:bf:2b:ee:80:03:01:f2:6f:00:e2: 6a:e1:b5:5c:f9:61:95:3a:8f:87:5b:2d:d9:e6:4d:e8:2f:a8: 92:4e:f4:7d:91:2b:37:8e:28:7b:14:5c:2e:9b:46:92:ab:d7: 0e:cf:0b:37:42:34:ba:29:22:2d:94:6a:13:a3:87:db:80:e4: f6:29:14:9c:f6:ae:11:37:a1:3e:04:6f:67:c6:6b:c4:6c:dc: 07:6f:61:a3:a3:b6:0b:84:16:1e:0c:53:8e:ff:99:52:94:76: 6b:d1:3e:d4:92:17:d3:2f:f3:3d:93:7e:3e:2c:4f:15:1c:4c: f7:98:a3:a0:05:8d:9b:99:4f:9d:97:12:f8:9f:46:e9:20:7a: b6:08:6a:7b:a2:76:7c:63:2d:d0:c8:64:7b:5d:73:c0:75:b0: 46:4b:8f:a0:18:cd:34:ed:f7:c6:1d:31:2e:4b:04:be:9d:63: ca:8b:6e:ef:c5:13:c5:d5:b1:06:e5:ca:40:d5:95:06:95:04: 7d:13:6e:ad:19:50:60:01:15:5d:78:13:c2:f7:0c:06:ca:91: 32:ce:72:df:10:61:91:50:ae:92:62:c2:1a:e4:73:cc:9d:36: 10:5e:4b:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7Dccc0f3fFAu1thnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5ZTM2NzQtYWNjNi00ODU4LWIwZjEtN2EyZGFhYWVk MTE5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MzNjNzBlZjQtOWM5Mi00Mzg2LTlmOTYtMWRiMmFiNzc0YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC6IPipKoZnxqORkx/CLlILwIHDrwMOicfK/ F3T8ic5lPDMbPzmR7yVi49lmHTdcAx2Bak5byfMZzqvcFtnOsPYVL/kD5ybKv7K9 X646hIiGC655TFQtVVLJuIod2yGF0zFlrfwJ3vK37P+VO2kliYDN7k19XZlX30bP rmhoUA5NAFkWup/2VtyZ1n7TkD8dMC0T9ngxXvvoPupzHBS59MK2coW5as9M7VFT tVZQsk4HVShGrb6Ax8rp4SnPyM6Cv6nK31gsLenSfxaoY9guwznxcVpPWHVRf3x6 4pwV05D/e8Km9sVitExj6elVyAZlacfPjf9FHQVmZzMltwMyDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGrobLKD/1aCkEg5hRVcFXrqk0TpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMjll MzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJkYWFhZWQxMTkvZjg3MTQwN2MtYzJiYy0z ZDZjLTg3MTUtMDQ4YTQ4Mjc0YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTI5ZTM2NzQtYWNjNi00ODU4LWIw ZjEtN2EyZGFhYWVkMTE5L2EyOWUzNjc0LWFjYzYtNDg1OC1iMGYxLTdhMmRhYWFl ZDExOS5jcmwwHwYDVR0jBBgwFoAUml1tM1p2OnrYfTyiJ/n5DI1sO48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMjllMzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJk YWFhZWQxMTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJiABizBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCuRGg65sJoW61Avh5ssiFsBfZogX2ssAQ5cb8r7oADAfJvAOJq4bVc +WGVOo+HWy3Z5k3oL6iSTvR9kSs3jih7FFwum0aSq9cOzws3QjS6KSItlGoTo4fb gOT2KRSc9q4RN6E+BG9nxmvEbNwHb2Gjo7YLhBYeDFOO/5lSlHZr0T7UkhfTL/M9 k34+LE8VHEz3mKOgBY2bmU+dlxL4n0bpIHq2CGp7onZ8Yy3QyGR7XXPAdbBGS4+g GM007ffGHTEuSwS+nWPKi27vxRPF1bEG5cpA1ZUGlQR9E26tGVBgARVdeBPC9wwG ypEyznLfEGGRUK6SYsIa5HPMnTYQXku0 -----END CERTIFICATE-----Generated at Thu Aug 20 00:08:13 2026 by rpki-client