$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/4f20e63c-cd20-3051-9632-312975732fcb.roa File: 4f20e63c-cd20-3051-9632-312975732fcb.roa (raw, json) Hash identifier: D3j9k1RxJLjtzRggEUtDpiDo5ovquGpG8JICG37ZYHA= Subject key identifier: 43:47:DE:54:0B:B2:E4:C0:C7:57:4A:F7:BF:0F:0D:FD:C4:3A:80:19 Certificate issuer: /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Certificate serial: 010D0C9F4328584DE150732671090A6D31792440 Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/4f20e63c-cd20-3051-9632-312975732fcb.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 6859 IP address blocks: 2620:0:5300::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:73:26:71:09:0a:6d:31:79:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=3496d7fa-72d9-4624-8dd2-4f4582b750af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:b0:f2:ac:50:ce:8b:fb:57:d1:5c:14:ff: 53:9a:6d:4a:6a:8a:9f:ab:ed:1e:a4:6a:10:e9:b0: d7:ea:14:7c:5f:bc:06:45:c9:f9:2b:88:bb:cf:f2: 7f:77:2d:23:40:4f:41:bd:46:1d:d9:9c:ce:3a:41: 83:09:60:26:0e:aa:4b:b6:d0:33:39:08:94:fc:d5: 16:0d:14:17:0c:c4:d5:f2:7a:f2:4c:9a:eb:d8:20: ac:30:d6:a3:ea:72:62:c5:38:47:e4:de:d0:a2:15: 7e:b3:6b:8b:3b:06:3e:eb:dc:04:1f:2d:9a:00:e0: 64:59:c0:c8:72:ac:a1:6a:6e:c6:90:28:8a:70:cd: 16:88:ee:1b:7c:b6:ad:44:e1:c7:7d:7c:ac:6e:0b: 83:6d:3a:93:c4:38:10:80:0a:ee:92:54:43:03:d4: 04:b5:b0:19:79:20:49:b8:ea:38:c3:8c:89:fc:c9: 10:1a:94:4e:dc:02:06:76:6c:d7:61:17:25:8d:28: d5:43:03:3a:90:b4:c9:b3:58:19:73:05:7e:33:e7: cd:c7:68:7f:77:5e:46:34:95:58:e1:1c:20:35:24: 7c:2b:d4:d2:6a:17:f7:58:dd:6f:15:73:ec:42:11: ce:ea:8e:7c:17:86:60:02:17:27:2b:e3:42:ba:b7: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:47:DE:54:0B:B2:E4:C0:C7:57:4A:F7:BF:0F:0D:FD:C4:3A:80:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/4f20e63c-cd20-3051-9632-312975732fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl X509v3 Authority Key Identifier: keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:1c:51:71:dd:2d:f5:37:6a:17:4d:19:08:07:b4:07:95:9f: a9:a9:9d:ec:1f:3b:d5:aa:d7:70:db:21:3a:b0:12:07:14:3f: 86:3a:0c:66:97:42:6f:37:03:c1:51:7a:38:c5:5d:82:e0:29: 35:9a:d4:9d:41:a7:48:e7:d4:d2:0a:61:e2:87:4e:f1:af:c8: 75:39:b6:c3:d9:7d:b5:5a:50:20:12:fd:d3:0c:ee:5d:05:f0: 39:df:d5:c2:66:ea:be:09:92:54:43:54:54:05:26:ed:a1:c1: 5b:14:69:7f:cf:e7:7c:a3:f2:60:d5:b1:cb:25:7b:1c:f1:20: 2f:78:2a:80:83:06:45:98:82:b6:7e:7c:98:5f:c3:79:56:f5: bc:d8:dd:a2:f6:9d:89:01:b0:8f:3b:24:a7:cb:9f:22:29:f2: 22:eb:ea:55:79:ac:08:21:e7:b8:fa:04:a2:f4:3a:26:9d:0a: 26:46:65:89:2a:a1:6d:62:3a:2e:bb:fe:e8:4d:87:1e:c0:47: 1d:86:1d:06:18:80:0a:ca:6d:74:ac:e3:fb:0f:0a:e0:dd:35: c9:23:6c:39:33:94:2e:f1:9d:b6:7a:af:83:f4:a6:ab:a1:d6: e5:d3:3d:c2:26:40:92:85:43:9b:6c:6e:dd:84:c5:6b:d7:6f: da:52:07:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3hUHMmcQkKbTF5JEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljZjU5YmItNDlkNC00NmRjLWEzMTItZGE5YzEwZGMz MzZlMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk MzQ5NmQ3ZmEtNzJkOS00NjI0LThkZDItNGY0NTgyYjc1MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd6w8qxQzov7V9FcFP9Tmm1Kaoqfq+0epGoQ 6bDX6hR8X7wGRcn5K4i7z/J/dy0jQE9BvUYd2ZzOOkGDCWAmDqpLttAzOQiU/NUW DRQXDMTV8nryTJrr2CCsMNaj6nJixThH5N7QohV+s2uLOwY+69wEHy2aAOBkWcDI cqyham7GkCiKcM0WiO4bfLatROHHfXysbguDbTqTxDgQgAruklRDA9QEtbAZeSBJ uOo4w4yJ/MkQGpRO3AIGdmzXYRcljSjVQwM6kLTJs1gZcwV+M+fNx2h/d15GNJVY 4RwgNSR8K9TSahf3WN1vFXPsQhHO6o58F4ZgAhcnK+NCurfQLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENH3lQLsuTAx1dK978PDf3EOoAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNm NTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTljMTBkYzMzNmUvNGYyMGU2M2MtY2QyMC0z MDUxLTk2MzItMzEyOTc1NzMyZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljZjU5YmItNDlkNC00NmRjLWEz MTItZGE5YzEwZGMzMzZlLzI5Y2Y1OWJiLTQ5ZDQtNDZkYy1hMzEyLWRhOWMxMGRj MzM2ZS5jcmwwHwYDVR0jBBgwFoAUdW0571VxSnE3LJO8R28dqLw0I5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNmNTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTlj MTBkYzMzNmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAFMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMEcUXHdLfU3ahdNGQgHtAeVn6mpnewfO9Wq13DbITqwEgcUP4Y6 DGaXQm83A8FRejjFXYLgKTWa1J1Bp0jn1NIKYeKHTvGvyHU5tsPZfbVaUCAS/dMM 7l0F8Dnf1cJm6r4JklRDVFQFJu2hwVsUaX/P53yj8mDVscslexzxIC94KoCDBkWY grZ+fJhfw3lW9bzY3aL2nYkBsI87JKfLnyIp8iLr6lV5rAgh57j6BKL0OiadCiZG ZYkqoW1iOi67/uhNhx7ARx2GHQYYgArKbXSs4/sPCuDdNckjbDkzlC7xnbZ6r4P0 pquh1uXTPcImQJKFQ5tsbt2ExWvXb9pSB6U= -----END CERTIFICATE-----Generated at Thu May 21 21:36:27 2026 by rpki-client