$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa File: 29eacb2e-b566-3e8a-a848-698c8483bf5a.roa (raw, json) Hash identifier: KEu15b2+7j3UvPBBZDSe17zcMgqbxgQklBRs6qSL7eU= Subject key identifier: C4:AC:DF:89:B1:87:75:59:50:5E:44:D7:FA:C7:C0:D9:29:47:92:94 Certificate issuer: /CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Certificate serial: 010D0C9F4328584D6AAA81B63AF0146842A2FC00 Authority key identifier: E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 30256 IP address blocks: 2620:21:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:81:b6:3a:f0:14:68:42:a2:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=08fb985a-4631-4be5-87b6-16b73629cd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:d9:ff:9e:a6:0b:dc:7d:27:50:7c:f3:64: cc:5d:8e:9e:54:8e:d8:db:7d:82:24:36:f7:36:56: 62:67:47:eb:78:aa:22:b0:36:b2:e7:ef:81:36:9e: 90:bd:1b:3e:f1:71:40:6d:e9:81:aa:ec:57:bc:fb: 88:f7:22:da:87:b4:36:a2:61:21:33:e6:8a:96:d5: ff:ac:3e:e4:1b:ac:07:71:93:8e:11:60:1a:b2:53: 4b:7c:39:4c:17:8d:95:6b:a0:fd:83:91:7d:dd:82: 5e:b7:de:43:06:e2:fe:c5:ce:ea:c4:e3:51:59:a8: ae:6e:43:c8:12:dd:55:71:7f:f6:7c:fd:bb:12:f7: c5:b7:00:a2:03:f4:48:47:d9:cb:bc:d6:33:5f:ad: f3:bd:5b:ba:78:d5:ed:ba:9e:f6:2d:48:b7:6e:7d: 5c:d3:0d:df:88:78:15:95:9f:5b:0b:e7:a8:7c:d0: 28:46:5e:84:2f:d7:dc:ee:24:2e:ca:7c:e5:e1:34: b0:62:f7:81:47:8f:6b:07:0a:3d:03:c7:9e:da:a1: 6f:a9:8a:04:10:b7:d4:cb:12:6d:43:1a:da:d4:8d: 5f:3a:a4:98:89:87:b3:a1:77:bd:af:3d:b9:27:8e: 6e:52:dd:3d:f0:fd:f1:01:cb:27:ec:f4:0e:83:2b: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AC:DF:89:B1:87:75:59:50:5E:44:D7:FA:C7:C0:D9:29:47:92:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl X509v3 Authority Key Identifier: keyid:E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer sbgp-ipAddrBlock: critical IPv6: 2620:21:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1b:d5:e1:f7:20:c4:56:50:ef:ca:66:77:07:87:3d:81:f8: 1c:95:ee:cb:a0:14:f0:db:f6:64:22:66:80:f6:be:c5:c4:26: 09:15:5b:61:f2:43:83:71:25:30:8f:79:d0:c4:ad:38:c6:3b: 89:66:3c:09:1c:8d:33:8b:9d:7c:e0:e4:10:7e:d1:e4:29:2a: f3:30:76:53:82:f4:01:22:29:b9:7f:4d:0a:53:e7:c2:ba:4b: 58:37:fe:2b:8d:bc:e8:11:f0:22:39:63:91:fe:ec:fa:6d:41: 73:8d:b7:43:99:e0:e8:7f:a8:7e:e4:05:36:6c:95:f9:c0:46: 06:35:63:68:2c:34:e1:50:a1:00:7c:fc:fd:33:9b:5c:0a:8e: 7c:39:5f:31:c8:ec:a5:55:50:ac:14:aa:30:58:2c:0b:29:40: 7b:8f:ec:0d:6f:97:a1:88:ed:82:72:bb:25:e0:52:49:d1:b3: 5b:72:02:fb:e7:b8:f1:14:dc:4e:67:a3:d4:5f:65:35:b4:17: 28:22:d4:81:7e:6c:d7:5a:af:e2:1d:eb:f1:37:44:c2:0c:f9: 3a:2b:ac:69:8c:7a:ae:57:e5:69:a8:61:bf:54:e8:40:7c:b8: 43:d2:9e:a7:93:f2:f0:a4:84:2c:c5:ef:67:35:32:c3:05:d0: 40:d1:c6:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1qqoG2OvAUaEKi/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI4YjdjMTMtMzAxYy00N2ZjLWIzOWItMjIwMWU3NjNj NGRkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MDhmYjk4NWEtNDYzMS00YmU1LTg3YjYtMTZiNzM2MjljZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYvZ/56mC9x9J1B882TMXY6eVI7Y232CJDb3 NlZiZ0freKoisDay5++BNp6QvRs+8XFAbemBquxXvPuI9yLah7Q2omEhM+aKltX/ rD7kG6wHcZOOEWAaslNLfDlMF42Va6D9g5F93YJet95DBuL+xc7qxONRWaiubkPI Et1VcX/2fP27EvfFtwCiA/RIR9nLvNYzX63zvVu6eNXtup72LUi3bn1c0w3fiHgV lZ9bC+eofNAoRl6EL9fc7iQuynzl4TSwYveBR49rBwo9A8ee2qFvqYoEELfUyxJt Qxra1I1fOqSYiYezoXe9rz25J45uUt098P3xAcsn7PQOgytkLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMSs34mxh3VZUF5E1/rHwNkpR5KUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMjhi N2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2M2M0ZGQvMjllYWNiMmUtYjU2Ni0z ZThhLWE4NDgtNjk4Yzg0ODNiZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzI4YjdjMTMtMzAxYy00N2ZjLWIz OWItMjIwMWU3NjNjNGRkL2MyOGI3YzEzLTMwMWMtNDdmYy1iMzliLTIyMDFlNzYz YzRkZC5jcmwwHwYDVR0jBBgwFoAU5ABESWr04MJHIrkb7PhQwit7rIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAx ZTc2M2M0ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIcAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYb1eH3IMRWUO/KZncHhz2B+ByV7sugFPDb9mQiZoD2vsXEJgkV W2HyQ4NxJTCPedDErTjGO4lmPAkcjTOLnXzg5BB+0eQpKvMwdlOC9AEiKbl/TQpT 58K6S1g3/iuNvOgR8CI5Y5H+7PptQXONt0OZ4Oh/qH7kBTZslfnARgY1Y2gsNOFQ oQB8/P0zm1wKjnw5XzHI7KVVUKwUqjBYLAspQHuP7A1vl6GI7YJyuyXgUknRs1ty AvvnuPEU3E5no9RfZTW0Fygi1IF+bNdar+Id6/E3RMIM+TorrGmMeq5X5WmoYb9U 6EB8uEPSnqeT8vCkhCzF72c1MsMF0EDRxmg= -----END CERTIFICATE-----Generated at Fri Apr 17 23:59:43 2026 by rpki-client