$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6/6c237242-120d-3632-807d-a06f94f92243.roa File: 6c237242-120d-3632-807d-a06f94f92243.roa (raw, json) Hash identifier: tTVpzvdYLEuHfzVmipxxqBmRO4mjexCyY1EtTOWtSK0= Subject key identifier: CB:48:E6:52:95:EA:09:88:67:91:5C:5A:F8:25:D7:CC:8F:51:AF:29 Certificate issuer: /CN=21f8057f-d654-47e6-8f6f-eea32f0b8ab6 Certificate serial: 010D0C9F4328584F325C156F3BEDA2CCFA44AB00 Authority key identifier: 5A:DC:2E:67:59:EB:E3:23:D6:BC:EA:F3:CC:60:43:61:A6:97:8F:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6/6c237242-120d-3632-807d-a06f94f92243.roa Signing time: Wed 16 Sep 2026 18:31:24 +0000 ROA not before: Wed 16 Sep 2026 18:31:24 +0000 ROA not after: Tue 15 Dec 2026 19:31:24 +0000 asID: 32932 IP address blocks: 2620:cd:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6/21f8057f-d654-47e6-8f6f-eea32f0b8ab6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6/21f8057f-d654-47e6-8f6f-eea32f0b8ab6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:32:5c:15:6f:3b:ed:a2:cc:fa:44:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f8057f-d654-47e6-8f6f-eea32f0b8ab6 Validity Not Before: Sep 16 18:31:24 2026 GMT Not After : Dec 15 19:31:24 2026 GMT Subject: CN=ab2a5b10-bc42-4e2f-b630-11c15221db70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e2:08:f0:6e:2b:30:b7:d1:6c:fd:0e:68:3f: 75:03:6a:04:7f:0b:1c:f3:11:86:9d:2d:23:b5:dd: 7e:b4:ad:07:39:4a:9e:c0:99:9d:02:c1:12:bc:37: a0:d5:26:51:ac:08:52:62:4e:f3:45:a0:3e:cb:74: a9:a9:82:38:91:b0:0e:64:41:81:26:d1:de:4a:44: e7:bf:42:df:d8:fc:62:3c:da:59:10:0b:40:b7:35: 30:3b:b5:a1:54:93:37:6c:8e:5d:11:8d:9d:b6:ee: 6c:66:63:4a:3e:c9:ef:aa:33:66:27:8a:b8:c2:5a: d2:f1:2a:f9:fe:d6:46:a7:33:bf:c8:97:e6:0c:af: dd:9c:da:56:c6:5f:8c:b4:2d:76:aa:5e:dd:e3:93: 9c:7b:a0:99:ca:1a:82:38:fc:c8:60:f7:a8:1f:4f: e2:d7:40:76:ab:13:84:3c:db:44:10:6f:8e:4f:8d: c8:8f:75:8c:40:89:29:97:bf:69:e5:bd:04:95:80: 99:d3:d7:91:8d:93:d3:d0:cd:43:3d:21:86:08:86: 43:58:dd:18:33:a9:56:61:3a:4c:7d:8d:d9:44:5d: 47:92:c4:28:f0:4f:ca:39:bb:4d:3c:7d:16:b2:b0: 47:9b:34:07:78:16:16:95:06:77:c7:66:67:4b:6a: 10:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:48:E6:52:95:EA:09:88:67:91:5C:5A:F8:25:D7:CC:8F:51:AF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6/6c237242-120d-3632-807d-a06f94f92243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6/21f8057f-d654-47e6-8f6f-eea32f0b8ab6.crl X509v3 Authority Key Identifier: keyid:5A:DC:2E:67:59:EB:E3:23:D6:BC:EA:F3:CC:60:43:61:A6:97:8F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6.cer sbgp-ipAddrBlock: critical IPv6: 2620:cd:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e0:a1:a3:52:f0:20:09:d4:a2:41:63:c0:8e:0a:5b:d6:70: a8:39:ab:9f:96:b2:07:64:6c:82:6d:fa:9e:16:e7:de:9b:8e: 26:9e:67:0f:da:14:e8:97:be:a0:d6:fe:5d:28:f9:f4:2f:d9: 82:85:a4:26:13:84:c9:d1:38:60:55:8a:08:8a:7c:ba:63:ca: 2a:4f:42:d8:20:aa:53:22:ed:75:62:aa:af:e0:33:de:77:1d: e7:ca:eb:8b:f3:e0:f5:55:e2:f3:77:41:36:fc:7b:74:92:6c: ff:56:68:e5:0f:1f:8a:65:ac:71:34:d3:de:c3:56:1c:df:cc: 7e:03:6f:5d:65:57:f2:a6:d3:b3:8d:77:b5:43:d0:31:26:82: ca:ab:90:bc:5a:cd:c1:79:bc:73:c5:65:36:19:45:99:f2:dc: 91:f7:fc:6f:86:9a:f9:6a:09:16:82:43:2b:3c:33:67:01:64: bf:49:fe:b3:64:9c:f0:ea:3d:ca:65:ab:1a:67:b4:73:3c:49: 4b:55:29:74:77:54:e8:8e:34:ec:6e:a8:b4:14:4b:76:80:21: 6e:c7:bc:38:e8:35:d9:dc:d5:46:2a:83:6c:49:09:55:75:61: ad:40:98:eb:87:e2:de:8a:75:62:fb:8c:92:e0:78:71:01:c3: 7d:5f:c4:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8yXBVvO+2izPpEqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmODA1N2YtZDY1NC00N2U2LThmNmYtZWVhMzJmMGI4 YWI2MB4XDTI2MDkxNjE4MzEyNFoXDTI2MTIxNTE5MzEyNFowLzEtMCsGA1UEAxMk YWIyYTViMTAtYmM0Mi00ZTJmLWI2MzAtMTFjMTUyMjFkYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+II8G4rMLfRbP0OaD91A2oEfwsc8xGGnS0j td1+tK0HOUqewJmdAsESvDeg1SZRrAhSYk7zRaA+y3SpqYI4kbAOZEGBJtHeSkTn v0Lf2PxiPNpZEAtAtzUwO7WhVJM3bI5dEY2dtu5sZmNKPsnvqjNmJ4q4wlrS8Sr5 /tZGpzO/yJfmDK/dnNpWxl+MtC12ql7d45Oce6CZyhqCOPzIYPeoH0/i10B2qxOE PNtEEG+OT43Ij3WMQIkpl79p5b0ElYCZ09eRjZPT0M1DPSGGCIZDWN0YM6lWYTpM fY3ZRF1HksQo8E/KObtNPH0WsrBHmzQHeBYWlQZ3x2ZnS2oQmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMtI5lKV6gmIZ5FcWvgl18yPUa8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8yMWY4 MDU3Zi1kNjU0LTQ3ZTYtOGY2Zi1lZWEzMmYwYjhhYjYvNmMyMzcyNDItMTIwZC0z NjMyLTgwN2QtYTA2Zjk0ZjkyMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMjFmODA1N2YtZDY1NC00N2U2LThm NmYtZWVhMzJmMGI4YWI2LzIxZjgwNTdmLWQ2NTQtNDdlNi04ZjZmLWVlYTMyZjBi OGFiNi5jcmwwHwYDVR0jBBgwFoAUWtwuZ1nr4yPWvOrzzGBDYaaXj74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8yMWY4MDU3Zi1kNjU0LTQ3ZTYtOGY2Zi1lZWEz MmYwYjhhYjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAzcAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHjgoaNS8CAJ1KJBY8COClvWcKg5q5+WsgdkbIJt+p4W596bjiae Zw/aFOiXvqDW/l0o+fQv2YKFpCYThMnROGBVigiKfLpjyipPQtggqlMi7XViqq/g M953HefK64vz4PVV4vN3QTb8e3SSbP9WaOUPH4plrHE0097DVhzfzH4Db11lV/Km 07ONd7VD0DEmgsqrkLxazcF5vHPFZTYZRZny3JH3/G+GmvlqCRaCQys8M2cBZL9J /rNknPDqPcplqxpntHM8SUtVKXR3VOiONOxuqLQUS3aAIW7HvDjoNdnc1UYqg2xJ CVV1Ya1AmOuH4t6KdWL7jJLgeHEBw31fxCA= -----END CERTIFICATE-----Generated at Fri Sep 25 04:37:55 2026 by rpki-client