$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa File: 29d649ff-7028-3767-8327-8c4721bf56a8.roa (raw, json) Hash identifier: TNHiCo/aSFk6N8A/vx7yM9p3PiuCUAk85lQS3RZinU8= Subject key identifier: 00:FF:BC:93:24:F9:19:13:B3:9E:A7:88:A5:CF:6D:21:B6:E0:4E:9E Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584D75D52A4FA0EDEA4ADCB33000 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 399668 IP address blocks: 2620:98:a000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:2a:4f:a0:ed:ea:4a:dc:b3:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=6cef9d47-ed60-412a-b2ef-0b463e7a5c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:04:54:70:3f:c0:c3:b1:67:5c:cb:02:db: 46:ff:8b:44:2b:a5:69:e5:d9:4c:1c:15:bf:8f:98: 09:26:81:bc:7d:8e:53:24:e0:d8:c0:41:0a:6c:8a: 07:60:57:cb:bf:1d:13:ce:e5:75:71:76:8e:32:44: 04:11:19:13:ce:3f:7a:24:5d:58:c5:2c:b6:c7:e4: af:fa:f2:d1:e1:ed:87:a3:61:0b:aa:e7:2f:c7:c8: fa:3c:52:0f:2e:30:7a:4a:d7:6d:bb:35:aa:ee:1e: bf:c1:ab:9c:3d:e0:ee:79:d1:0f:f3:47:5f:02:bd: 2b:5e:a8:d7:1f:ae:6a:1d:7d:b4:38:82:61:10:8a: 09:8f:23:81:3e:a3:d7:00:7d:6b:28:69:f8:ea:e7: eb:dc:a5:83:01:bf:8e:d5:59:71:d6:63:00:62:97: b2:f6:37:2e:f3:9f:d6:96:bc:fc:34:9a:6e:35:29: c9:9f:00:62:ca:ba:f6:1b:e7:3f:ab:f8:6f:c0:cc: 9b:2c:d8:be:eb:f0:2b:56:27:16:0a:4f:c6:92:ac: a7:5c:e4:5e:f0:6b:ef:8e:b9:2b:c5:ae:bf:1a:97: 6a:07:ee:bf:be:35:95:1a:00:2d:de:de:1e:1a:0c: da:fa:8a:21:24:5c:2c:d1:4b:2c:df:7e:7c:2c:55: 3d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FF:BC:93:24:F9:19:13:B3:9E:A7:88:A5:CF:6D:21:B6:E0:4E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7b:6d:6d:dc:2b:42:9e:ca:ae:f8:87:bf:ae:e9:1a:e0:d5: dc:a6:04:16:6c:eb:8f:84:6d:42:8c:07:fa:1b:19:b0:f1:b8: c3:78:cb:01:09:2d:06:b7:b0:1d:91:4c:22:48:2a:3e:c9:1e: 32:38:da:e2:f2:36:c0:13:66:51:c6:8a:dd:46:eb:8a:0c:12: 30:b4:3b:b8:4c:23:96:06:d0:08:ae:fd:0f:df:9e:c7:28:dd: ed:d1:6a:61:59:95:9e:98:3a:01:59:88:a6:47:de:d1:cc:be: 67:e3:b0:87:2f:81:30:ce:af:b8:8c:a7:38:15:aa:b4:a0:49: 93:71:31:e3:0e:61:fa:64:80:62:08:2e:42:34:a8:ad:ac:a3: 45:42:d2:9c:c4:15:07:d5:e7:62:d8:be:eb:e8:50:2c:63:31: 4f:79:d5:69:a3:f3:b3:79:b6:ae:4e:f8:2a:91:b7:4c:0a:f9: fa:fb:b7:01:73:11:38:23:76:9a:55:35:1d:ff:69:ae:db:1e: 98:b4:b9:ab:39:f2:a6:fd:d1:2b:7d:1f:54:a6:6d:27:e9:c6: 87:22:5e:c0:ac:0c:b0:69:59:04:6c:fe:8f:ab:10:d5:d9:3b: 42:73:cf:c3:45:08:19:d6:d1:6c:dc:67:70:29:71:b5:4b:da: e6:d5:5a:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE111SpPoO3qStyzMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NmNlZjlkNDctZWQ2MC00MTJhLWIyZWYtMGI0NjNlN2E1YzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuScEVHA/wMOxZ1zLAttG/4tEK6Vp5dlMHBW/ j5gJJoG8fY5TJODYwEEKbIoHYFfLvx0TzuV1cXaOMkQEERkTzj96JF1YxSy2x+Sv +vLR4e2Ho2ELqucvx8j6PFIPLjB6StdtuzWq7h6/waucPeDuedEP80dfAr0rXqjX H65qHX20OIJhEIoJjyOBPqPXAH1rKGn46ufr3KWDAb+O1Vlx1mMAYpey9jcu85/W lrz8NJpuNSnJnwBiyrr2G+c/q/hvwMybLNi+6/ArVicWCk/GkqynXORe8Gvvjrkr xa6/GpdqB+6/vjWVGgAt3t4eGgza+oohJFws0Uss3358LFU9fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAD/vJMk+RkTs56niKXPbSG24E6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvMjlkNjQ5ZmYtNzAyOC0z NzY3LTgzMjctOGM0NzIxYmY1NmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHp7bW3cK0Keyq74h7+u6Rrg1dymBBZs64+EbUKMB/obGbDxuMN4 ywEJLQa3sB2RTCJIKj7JHjI42uLyNsATZlHGit1G64oMEjC0O7hMI5YG0Aiu/Q/f nsco3e3RamFZlZ6YOgFZiKZH3tHMvmfjsIcvgTDOr7iMpzgVqrSgSZNxMeMOYfpk gGIILkI0qK2so0VC0pzEFQfV52LYvuvoUCxjMU951Wmj87N5tq5O+CqRt0wK+fr7 twFzETgjdppVNR3/aa7bHpi0uas58qb90St9H1SmbSfpxociXsCsDLBpWQRs/o+r ENXZO0Jzz8NFCBnW0WzcZ3ApcbVL2ubVWhQ= -----END CERTIFICATE-----Generated at Sat Apr 18 03:06:00 2026 by rpki-client