$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa File: 21e1f23d-5f1f-317b-8982-26cebe1a6742.roa (raw, json) Hash identifier: k9v+oTkWlJptBdzMNnCBWnPXJtvGH4TztVEncdpSI7E= Subject key identifier: 2E:BD:D9:06:4C:8F:82:9B:19:2F:23:85:1E:26:BC:11:B2:85:51:2F Certificate issuer: /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Certificate serial: 010D0C9F4328584F03A78C7FABED4CD127BE3CF0 Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 398065 IP address blocks: 2602:817:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:8c:7f:ab:ed:4c:d1:27:be:3c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=ea6c732b-8ad9-4a0f-ad13-165f10368b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:c0:80:e5:33:08:45:c5:10:dc:51:69:e9: 7e:d5:b8:cd:57:c9:e5:ad:30:8c:5e:75:1d:42:4e: be:5f:94:2c:d8:6d:db:38:5a:07:8f:7e:a3:e9:04: 29:ba:95:b4:a3:c6:e8:37:10:e1:d8:91:18:16:c0: 21:57:f3:e9:fa:df:dd:d3:cd:39:0b:ac:f3:cc:4f: 99:48:35:0c:e6:26:65:ff:5b:e1:d4:dd:3a:30:af: e5:64:d6:92:db:0a:96:d4:6b:7e:c1:8d:25:ad:27: 45:f4:ee:f5:39:9f:38:f5:d7:22:e7:48:ab:1b:ed: 1f:fc:0d:8e:31:79:c4:02:af:c8:1a:49:e1:b1:91: 02:3a:00:29:9b:a1:c7:2c:b3:9d:50:13:93:22:12: 5d:72:9d:43:24:77:2a:f2:03:1b:38:b5:a2:d1:f3: 76:f3:62:d1:70:39:2b:b4:26:b8:92:2b:5a:2f:63: 98:be:85:0c:74:2d:a4:f7:b1:9c:33:b0:c5:92:b9: 89:2d:93:0c:0e:6e:27:2f:27:e0:2d:55:07:46:e0: f5:9c:17:15:4f:30:b9:4e:5a:69:92:14:5d:f8:df: 73:c4:28:37:d0:1a:6d:7d:db:8c:bf:10:78:d7:f8: f9:c5:66:6e:b2:78:35:3a:de:9b:52:8c:99:81:3b: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BD:D9:06:4C:8F:82:9B:19:2F:23:85:1E:26:BC:11:B2:85:51:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl X509v3 Authority Key Identifier: keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:98:8c:f9:1b:d1:8d:c1:ff:08:ae:94:73:92:48:e5:fe:4d: 23:38:5b:97:23:99:72:79:b5:28:32:bd:46:9f:4e:29:76:4f: 38:80:88:d1:d5:0c:87:b7:eb:bb:2f:02:5d:c1:c0:b9:29:ae: 14:cf:b8:00:7e:ab:99:6f:5d:5b:99:b4:e6:ff:a6:52:60:f3: 24:4a:67:98:18:60:20:ea:ff:d1:6f:da:82:e5:32:45:0f:a9: b8:eb:28:77:da:b2:f0:1c:53:73:b4:3a:dc:a2:5e:cb:e7:96: 21:2b:ca:cf:65:64:b1:7f:0d:e7:fb:10:50:3d:0e:2a:39:c9: 21:09:e9:13:1d:88:38:96:0e:a9:82:d3:01:ac:e6:1e:f2:d6: 7a:15:f3:18:61:1a:2b:4d:9e:cb:fd:0b:42:0f:bf:4c:a1:a2: ed:7b:e6:e7:c8:31:37:e2:e2:5e:8b:e3:37:da:c8:48:ad:43: 17:d9:52:5a:85:16:5e:c9:e0:b0:5a:3c:ab:ea:79:58:d7:09: 44:83:d8:96:5f:bc:4c:3f:59:27:f9:e8:f8:10:bb:4f:b6:82: a8:23:1d:d3:a2:de:14:03:aa:ad:6d:8b:98:df:33:c7:a7:e3: ea:7c:8b:ff:43:fe:db:10:1e:f3:53:6b:f4:66:0a:58:1c:4b: 6e:42:36:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp4x/q+1M0Se+PPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY1MjE3NTktYjg4MC00YTdkLWJlOGItM2NlNzBlNGFi YTgzMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZWE2YzczMmItOGFkOS00YTBmLWFkMTMtMTY1ZjEwMzY4YjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBzAgOUzCEXFENxRael+1bjNV8nlrTCMXnUd Qk6+X5Qs2G3bOFoHj36j6QQpupW0o8boNxDh2JEYFsAhV/Pp+t/d0805C6zzzE+Z SDUM5iZl/1vh1N06MK/lZNaS2wqW1Gt+wY0lrSdF9O71OZ849dci50irG+0f/A2O MXnEAq/IGknhsZECOgApm6HHLLOdUBOTIhJdcp1DJHcq8gMbOLWi0fN282LRcDkr tCa4kitaL2OYvoUMdC2k97GcM7DFkrmJLZMMDm4nLyfgLVUHRuD1nBcVTzC5Tlpp khRd+N9zxCg30BptfduMvxB41/j5xWZusng1Ot6bUoyZgTunrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC692QZMj4KbGS8jhR4mvBGyhVEvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUy MTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3MGU0YWJhODMvMjFlMWYyM2QtNWYxZi0z MTdiLTg5ODItMjZjZWJlMWE2NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGY1MjE3NTktYjg4MC00YTdkLWJl OGItM2NlNzBlNGFiYTgzLzBmNTIxNzU5LWI4ODAtNGE3ZC1iZThiLTNjZTcwZTRh YmE4My5jcmwwHwYDVR0jBBgwFoAUB8KLUXEBd4+x1cBmbyFq1ySw5VQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUyMTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3 MGU0YWJhODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFzAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALOYjPkb0Y3B/wiulHOSSOX+TSM4W5cjmXJ5tSgyvUafTil2TziA iNHVDIe367svAl3BwLkprhTPuAB+q5lvXVuZtOb/plJg8yRKZ5gYYCDq/9Fv2oLl MkUPqbjrKHfasvAcU3O0OtyiXsvnliErys9lZLF/Def7EFA9Dio5ySEJ6RMdiDiW DqmC0wGs5h7y1noV8xhhGitNnsv9C0IPv0yhou175ufIMTfi4l6L4zfayEitQxfZ UlqFFl7J4LBaPKvqeVjXCUSD2JZfvEw/WSf56PgQu0+2gqgjHdOi3hQDqq1ti5jf M8en4+p8i/9D/tsQHvNTa/RmClgcS25CNp0= -----END CERTIFICATE-----Generated at Sat Sep 26 12:15:59 2026 by rpki-client