$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa File: deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa (raw, json) Hash identifier: mA5EHMm5r0wA+8L6g19fGlPWlfZTLEkZi7lmWSH7NEg= Subject key identifier: A8:96:1D:7B:7C:9B:19:62:41:22:5A:75:9D:A4:CA:DC:B6:23:C9:0B Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945 Certificate serial: 010D0C9F4328584ED431E3FB74400B5A4EC2EC80 Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 395363 IP address blocks: 2620:129:6020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e3:fb:74:40:0b:5a:4e:c2:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=389c2da9-d51c-425b-b3d3-aa7de43c834f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:50:d7:70:37:68:eb:f1:ff:ab:28:b7:f6: 38:68:d6:d3:02:9d:1a:26:8d:06:ee:41:89:e6:7b: ac:a1:f4:b6:96:7e:b3:d8:03:4e:38:c9:30:61:17: 20:a5:f3:52:09:4b:ca:5c:cc:2a:f3:18:61:f1:dc: 64:0d:fd:b5:cd:52:3d:a3:39:fd:95:ea:97:18:1e: 5a:b6:25:76:aa:07:40:c1:ee:85:38:ee:69:e1:84: 79:76:33:d3:d9:b1:71:32:8a:83:28:c5:80:b9:8a: 43:cd:50:37:50:20:f0:86:24:94:a4:85:ae:6c:98: 01:0b:cf:a4:bb:04:c2:b0:5d:b5:f5:4b:8c:cc:bb: 09:b0:26:60:65:85:38:4e:0a:41:1b:a7:5b:78:e8: 25:2f:3d:13:b9:c3:7d:3a:8c:c1:01:21:4a:02:0d: 29:71:40:72:cc:f3:cb:71:0e:f6:38:54:d0:10:7b: db:df:4b:14:11:af:8e:ee:40:05:ce:38:70:4c:3b: a9:30:33:8d:c8:05:0a:9b:ea:2b:53:91:eb:e9:03: 9c:3f:a0:f6:d1:b3:74:8a:28:f4:13:50:02:88:d8: 2c:d4:f3:ef:85:7e:a9:d1:ca:ef:68:ba:dd:d4:43: 17:37:38:73:f5:b1:10:f9:22:2f:15:41:b7:52:55: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:96:1D:7B:7C:9B:19:62:41:22:5A:75:9D:A4:CA:DC:B6:23:C9:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl X509v3 Authority Key Identifier: keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer sbgp-ipAddrBlock: critical IPv6: 2620:129:6020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:35:0a:a8:8d:73:33:c9:33:d5:f0:ce:60:7c:5f:0b:83:95: 9c:13:64:d8:bc:7c:e9:ff:0a:bd:5e:fd:c2:cc:8f:0b:41:17: 4b:66:09:bd:8e:9b:ce:29:f1:fe:4a:92:39:75:b7:3a:45:73: 69:8c:cd:35:7e:12:34:b8:9d:db:89:9b:94:ab:4b:78:1b:03: bc:a7:b8:dc:5e:90:9a:4c:f7:16:f9:d7:54:3f:10:d3:f9:e4: dc:ec:cc:64:73:98:87:66:2b:67:34:15:7d:21:76:9b:f9:c8: c6:85:78:4a:ab:ec:92:de:95:8a:1a:a9:d5:ce:e9:e0:90:ab: 33:91:42:db:4d:3d:72:c4:b3:b3:4c:2b:1a:36:ab:27:12:bf: f3:22:48:b9:9a:a9:e1:bd:77:72:cb:39:f6:83:b9:a0:30:4c: 66:5b:ec:00:69:33:b2:e4:0a:c8:a3:3e:30:e6:dd:e4:ba:74: ec:47:85:02:db:47:1b:b2:e4:ef:ea:f4:ef:74:05:57:58:d2: b3:2c:22:7d:9b:b5:d0:49:69:a6:29:0e:12:5e:cd:2b:6e:7e: 40:5b:6f:79:68:d1:a9:23:a2:d1:41:5f:96:7d:5a:85:cf:f0: 2b:50:93:01:5d:90:02:f0:f0:93:1b:f7:1f:ae:39:91:f4:d5: a4:79:33:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7UMeP7dEALWk7C7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1 OTQ1MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk Mzg5YzJkYTktZDUxYy00MjViLWIzZDMtYWE3ZGU0M2M4MzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKxQ13A3aOvx/6sot/Y4aNbTAp0aJo0G7kGJ 5nusofS2ln6z2ANOOMkwYRcgpfNSCUvKXMwq8xhh8dxkDf21zVI9ozn9leqXGB5a tiV2qgdAwe6FOO5p4YR5djPT2bFxMoqDKMWAuYpDzVA3UCDwhiSUpIWubJgBC8+k uwTCsF219UuMzLsJsCZgZYU4TgpBG6dbeOglLz0TucN9OozBASFKAg0pcUByzPPL cQ72OFTQEHvb30sUEa+O7kAFzjhwTDupMDONyAUKm+orU5Hr6QOcP6D20bN0iij0 E1ACiNgs1PPvhX6p0crvaLrd1EMXNzhz9bEQ+SIvFUG3UlWn0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKiWHXt8mxliQSJadZ2kyty2I8kLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvZGViNDcxMjItMTBjYS0z YTQ0LWFhMTYtY2JjOWI2MWFmZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1 NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy MmEzMTU5NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKWAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACU1CqiNczPJM9XwzmB8XwuDlZwTZNi8fOn/Cr1e/cLMjwtBF0tm Cb2Om84p8f5Kkjl1tzpFc2mMzTV+EjS4nduJm5SrS3gbA7ynuNxekJpM9xb511Q/ ENP55NzszGRzmIdmK2c0FX0hdpv5yMaFeEqr7JLelYoaqdXO6eCQqzORQttNPXLE s7NMKxo2qycSv/MiSLmaqeG9d3LLOfaDuaAwTGZb7ABpM7LkCsijPjDm3eS6dOxH hQLbRxuy5O/q9O90BVdY0rMsIn2btdBJaaYpDhJezStufkBbb3lo0akjotFBX5Z9 WoXP8CtQkwFdkALw8JMb9x+uOZH01aR5M20= -----END CERTIFICATE-----Generated at Thu Aug 20 23:40:11 2026 by rpki-client