$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa File: 29eacb2e-b566-3e8a-a848-698c8483bf5a.roa (raw, json) Hash identifier: OYbo3J58UOIDpW8GxE3F2UG7/f8e8M6H/TP4stRPumE= Subject key identifier: 9F:CE:5B:50:5F:0C:6A:47:4C:F6:CF:7A:C6:77:88:6E:F1:68:AD:FB Certificate issuer: /CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Certificate serial: 010D0C9F4328584EED521686C440C5BABB788A00 Authority key identifier: E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 30256 IP address blocks: 2620:21:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:16:86:c4:40:c5:ba:bb:78:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=1ef00a52-bf88-4800-82b8-4bd43bde026c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:89:6b:6a:35:ae:ef:66:ca:4f:14:51:75: fd:0f:55:f2:bf:f8:bc:89:38:ba:d3:f4:f6:03:46: 72:69:29:7e:c8:0e:6d:84:eb:5f:9f:d7:d5:61:aa: 55:a8:68:0c:73:46:b0:f9:9d:f6:82:d8:bd:90:03: 4a:7d:a6:5b:77:2e:11:dc:df:3c:40:61:70:60:1f: d3:ac:7c:6a:2b:4c:fd:ac:b4:0a:d0:54:2d:92:fa: b1:9c:6e:fa:bf:44:8d:cc:ed:b8:8d:bc:7d:3c:6b: ea:8e:6d:64:c4:21:5a:34:d5:cd:79:8a:53:60:5e: 32:29:7f:4d:3e:a0:f8:96:13:59:9d:e6:b2:9a:77: a9:df:f1:5f:da:ac:e0:3c:2a:91:ec:24:96:ef:5e: df:37:49:80:76:04:82:b0:9b:1f:75:db:22:9c:ff: 4e:ca:b8:c3:b6:6c:2e:ff:26:63:b5:68:f8:76:ba: c9:13:f0:36:79:03:ee:d6:ca:18:88:93:da:81:67: f3:71:60:48:28:95:1b:fd:9f:af:06:84:0e:7e:3e: 9f:e5:35:3a:61:b5:4c:db:a6:38:c9:0e:79:db:f8: c7:92:4a:87:66:17:bd:e7:82:6f:9d:92:f6:0f:7b: 72:ed:ca:83:a0:ea:f4:f9:ac:6b:6f:ac:88:c4:cf: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CE:5B:50:5F:0C:6A:47:4C:F6:CF:7A:C6:77:88:6E:F1:68:AD:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl X509v3 Authority Key Identifier: keyid:E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer sbgp-ipAddrBlock: critical IPv6: 2620:21:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e7:73:2c:4e:93:67:94:ac:66:18:04:32:19:d9:11:62:86: 48:7c:34:11:69:f2:e7:1b:74:c3:41:c3:04:57:7c:95:13:7b: 6b:ab:e7:43:a2:7b:e8:8a:99:11:9b:94:e4:0c:04:79:31:14: 53:08:ec:8a:0d:fd:c6:d0:25:21:37:45:3d:e9:1f:26:ec:a8: 35:fa:01:c1:66:04:b4:59:26:7d:25:f6:79:82:e3:9f:b1:dc: f9:33:c6:da:76:a8:0d:bf:ea:2d:66:cc:e7:8e:47:3d:55:c4: 64:3c:a6:91:11:10:c1:e6:b4:96:86:f5:e2:35:b5:6f:f5:a2: 7d:fb:75:b2:c2:91:5c:39:32:31:1c:63:0c:43:1c:b0:37:66: 19:f8:10:77:cb:3c:61:5e:ab:c8:62:c1:2f:47:0c:33:52:ea: 99:77:2f:e0:d7:b4:2a:1e:66:d3:7b:e4:a7:2b:cc:a7:c0:35: 06:56:c1:af:36:06:a5:a9:79:70:91:5e:6c:be:73:b1:d1:1c: 3c:fa:f8:51:6b:fc:71:c3:47:b7:a5:6a:e5:96:82:82:f8:61: 0a:49:4f:1c:46:bc:dc:e1:dd:0c:bd:d8:99:e2:b6:b6:bf:5d: da:7b:8b:98:22:27:ae:27:36:77:8e:e8:f7:8e:07:7f:c3:f4: e2:ed:f8:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7tUhaGxEDFurt4igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI4YjdjMTMtMzAxYy00N2ZjLWIzOWItMjIwMWU3NjNj NGRkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MWVmMDBhNTItYmY4OC00ODAwLTgyYjgtNGJkNDNiZGUwMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7uJa2o1ru9myk8UUXX9D1Xyv/i8iTi60/T2 A0ZyaSl+yA5thOtfn9fVYapVqGgMc0aw+Z32gti9kANKfaZbdy4R3N88QGFwYB/T rHxqK0z9rLQK0FQtkvqxnG76v0SNzO24jbx9PGvqjm1kxCFaNNXNeYpTYF4yKX9N PqD4lhNZneaymnep3/Ff2qzgPCqR7CSW717fN0mAdgSCsJsfddsinP9OyrjDtmwu /yZjtWj4drrJE/A2eQPu1soYiJPagWfzcWBIKJUb/Z+vBoQOfj6f5TU6YbVM26Y4 yQ552/jHkkqHZhe954JvnZL2D3ty7cqDoOr0+axrb6yIxM/YfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ/OW1BfDGpHTPbPesZ3iG7xaK37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMjhi N2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2M2M0ZGQvMjllYWNiMmUtYjU2Ni0z ZThhLWE4NDgtNjk4Yzg0ODNiZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzI4YjdjMTMtMzAxYy00N2ZjLWIz OWItMjIwMWU3NjNjNGRkL2MyOGI3YzEzLTMwMWMtNDdmYy1iMzliLTIyMDFlNzYz YzRkZC5jcmwwHwYDVR0jBBgwFoAU5ABESWr04MJHIrkb7PhQwit7rIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAx ZTc2M2M0ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIcAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvncyxOk2eUrGYYBDIZ2RFihkh8NBFp8ucbdMNBwwRXfJUTe2ur 50Oie+iKmRGblOQMBHkxFFMI7IoN/cbQJSE3RT3pHybsqDX6AcFmBLRZJn0l9nmC 45+x3Pkzxtp2qA2/6i1mzOeORz1VxGQ8ppEREMHmtJaG9eI1tW/1on37dbLCkVw5 MjEcYwxDHLA3Zhn4EHfLPGFeq8hiwS9HDDNS6pl3L+DXtCoeZtN75KcrzKfANQZW wa82BqWpeXCRXmy+c7HRHDz6+FFr/HHDR7elauWWgoL4YQpJTxxGvNzh3Qy92Jni tra/Xdp7i5giJ64nNneO6PeOB3/D9OLt+Eg= -----END CERTIFICATE-----Generated at Mon Sep 14 23:41:19 2026 by rpki-client