$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa File: 29eacb2e-b566-3e8a-a848-698c8483bf5a.roa (raw, json) Hash identifier: vhKyx8IaMrKIws2TT20bgT5Hd0Kl56LCnsg94g6YaUg= Subject key identifier: 4D:64:2D:68:71:8C:3A:18:07:78:84:8A:51:CE:0D:FB:FD:42:6F:E1 Certificate issuer: /CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Certificate serial: 010D0C9F4328584F8F3DC2F509E5780B8F00D500 Authority key identifier: E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 30256 IP address blocks: 2620:21:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c2:f5:09:e5:78:0b:8f:00:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=1d33605e-76dd-4060-9872-f872beaa2a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:a9:9d:53:02:86:0c:eb:f0:51:05:91:e4: 3d:64:c4:c6:db:ae:3b:bc:b5:cf:73:67:89:ca:8c: 75:b2:be:27:00:65:c3:2f:57:63:a3:4a:6e:50:d3: e6:a8:c7:83:70:72:fa:b1:b1:55:00:3b:ad:91:8b: dc:8b:61:3b:fd:35:ea:2a:66:b2:f8:3f:f9:02:4d: 80:fb:45:6b:4a:c2:59:fc:88:0d:61:89:09:6d:df: 9f:7d:54:e9:96:86:03:f4:55:24:70:5d:9f:91:8e: 7d:16:2f:93:2b:9a:c2:bf:10:e7:84:1c:dd:5e:f0: 1f:a8:4e:4d:a6:70:ca:c6:f5:f8:3e:e5:8a:50:7f: 54:c6:64:2f:10:d1:83:aa:62:e4:29:17:73:f4:ce: 68:68:4e:fe:e1:01:5e:65:1a:d7:d2:45:5a:50:c4: 73:98:0b:9c:95:2b:c5:ef:d3:73:0d:e3:0a:93:7a: 78:bb:ea:f4:3b:f8:bd:a1:8f:54:79:5d:b5:2d:2e: 45:f4:29:4f:f2:18:71:a2:0c:a3:b8:b8:ab:57:15: df:6d:d8:1e:b7:1f:97:b2:fe:4a:4a:8a:74:2e:e5: 51:a1:43:9c:2a:54:a0:88:39:d6:0e:22:ae:3e:fb: 84:f8:c0:1e:8d:4e:e4:5d:e9:47:29:a5:f0:73:90: 20:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:64:2D:68:71:8C:3A:18:07:78:84:8A:51:CE:0D:FB:FD:42:6F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl X509v3 Authority Key Identifier: keyid:E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer sbgp-ipAddrBlock: critical IPv6: 2620:21:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ba:5b:3b:21:55:5c:4a:0d:ae:2f:a4:af:cd:41:64:6a:9e: 58:20:09:d1:35:4b:c5:09:21:39:54:71:45:e5:28:de:8c:89: d9:c4:68:99:15:d7:aa:c6:5c:9b:6e:8b:93:63:56:c3:b2:90: 97:57:e7:c0:ce:41:4f:ff:b0:52:99:dc:b6:cc:94:d5:38:ee: cf:9d:a7:89:80:2d:d5:51:04:91:ba:0c:a0:07:ef:32:d5:c5: 73:26:96:9b:63:c6:1a:2e:84:ee:fc:86:3c:6f:28:52:ec:96: 25:8a:b1:9b:8e:11:66:eb:ba:c6:36:28:e7:3c:47:31:0e:3f: 60:2d:e3:ac:6e:39:71:b7:1d:bc:c6:88:fc:1c:1e:b3:ee:aa: f3:fd:1b:ec:50:84:f6:14:89:53:57:8b:b1:59:7a:32:60:94: e9:41:8d:a2:0e:ff:0d:11:fd:c1:c1:9a:ff:c2:02:86:d0:39: 32:78:57:3c:ce:f2:94:26:75:f1:1a:ba:54:6b:fa:20:8c:cb: 40:34:5a:cd:43:0b:4a:6c:e9:8d:13:07:ae:55:76:01:c8:eb: 39:e7:a3:cb:d6:bd:79:ae:8b:a8:77:e0:47:2b:df:51:48:aa: 50:95:a0:ea:11:51:b1:5b:95:f2:66:db:76:07:a4:d1:0f:6f: a6:96:0e:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+PPcL1CeV4C48A1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI4YjdjMTMtMzAxYy00N2ZjLWIzOWItMjIwMWU3NjNj NGRkMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MWQzMzYwNWUtNzZkZC00MDYwLTk4NzItZjg3MmJlYWEyYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0epnVMChgzr8FEFkeQ9ZMTG2647vLXPc2eJ yox1sr4nAGXDL1djo0puUNPmqMeDcHL6sbFVADutkYvci2E7/TXqKmay+D/5Ak2A +0VrSsJZ/IgNYYkJbd+ffVTploYD9FUkcF2fkY59Fi+TK5rCvxDnhBzdXvAfqE5N pnDKxvX4PuWKUH9UxmQvENGDqmLkKRdz9M5oaE7+4QFeZRrX0kVaUMRzmAuclSvF 79NzDeMKk3p4u+r0O/i9oY9UeV21LS5F9ClP8hhxogyjuLirVxXfbdgetx+Xsv5K Sop0LuVRoUOcKlSgiDnWDiKuPvuE+MAejU7kXelHKaXwc5AgpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE1kLWhxjDoYB3iEilHODfv9Qm/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMjhi N2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2M2M0ZGQvMjllYWNiMmUtYjU2Ni0z ZThhLWE4NDgtNjk4Yzg0ODNiZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzI4YjdjMTMtMzAxYy00N2ZjLWIz OWItMjIwMWU3NjNjNGRkL2MyOGI3YzEzLTMwMWMtNDdmYy1iMzliLTIyMDFlNzYz YzRkZC5jcmwwHwYDVR0jBBgwFoAU5ABESWr04MJHIrkb7PhQwit7rIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAx ZTc2M2M0ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIcAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHi6WzshVVxKDa4vpK/NQWRqnlggCdE1S8UJITlUcUXlKN6MidnE aJkV16rGXJtui5NjVsOykJdX58DOQU//sFKZ3LbMlNU47s+dp4mALdVRBJG6DKAH 7zLVxXMmlptjxhouhO78hjxvKFLsliWKsZuOEWbrusY2KOc8RzEOP2At46xuOXG3 HbzGiPwcHrPuqvP9G+xQhPYUiVNXi7FZejJglOlBjaIO/w0R/cHBmv/CAobQOTJ4 VzzO8pQmdfEaulRr+iCMy0A0Ws1DC0ps6Y0TB65VdgHI6znno8vWvXmui6h34Ecr 31FIqlCVoOoRUbFblfJm23YHpNEPb6aWDpg= -----END CERTIFICATE-----Generated at Mon Nov 2 21:36:11 2026 by rpki-client