$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa File: 21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa (raw, json) Hash identifier: 6fQuLIhKZ37kCOA2IBK1cdk0G24BrbgBYdanX5bkf2E= Subject key identifier: E4:54:03:8B:0F:89:E7:6F:BB:15:0D:8C:FA:EC:A0:30:41:98:E6:60 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584F497466EECB5846C2A1891680 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 2601:20f0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:66:ee:cb:58:46:c2:a1:89:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09501f25-c61d-4f13-9611-e90bcfee325e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:a2:a2:76:65:be:2c:0d:8f:a8:ee:20:ee: c4:90:81:f2:74:67:a4:27:11:4e:da:27:9f:72:62: e2:36:6b:1d:a5:f8:92:ee:fc:df:f6:7d:af:06:79: 3d:da:d3:16:51:0a:f3:c7:72:6b:64:d2:42:ac:78: be:c3:91:a3:59:62:67:55:1c:76:95:d1:32:51:0d: 21:ed:15:92:58:d8:7f:13:ae:6e:24:35:4b:b9:e0: eb:e8:18:5b:45:05:ab:11:d5:fd:46:42:00:39:7c: d1:48:e3:60:06:d2:e6:1b:0b:62:5c:e3:cc:51:f4: e4:af:33:e3:cb:76:cf:f8:41:82:2d:75:87:e7:c8: 0b:72:b2:d9:ce:c4:ef:55:21:d9:a0:14:0f:9c:51: 7e:2f:ef:4a:28:e2:c1:ed:a0:95:5c:f7:a6:b3:44: 8f:cd:f5:1b:50:ba:cd:41:5d:be:6e:4b:9c:9b:60: 83:02:01:6c:4f:8f:df:64:30:f0:5e:7e:94:48:89: 99:52:aa:2b:19:2e:ab:8d:50:41:57:66:9d:35:48: 58:92:ca:b3:cc:a6:81:23:ec:23:ad:be:72:e1:28: 13:52:65:af:49:86:96:c2:d6:23:d8:f1:cf:24:ee: 57:6e:2a:80:df:41:69:3f:9c:49:2f:96:f1:53:86: 78:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:54:03:8B:0F:89:E7:6F:BB:15:0D:8C:FA:EC:A0:30:41:98:E6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:20f0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ad:d9:81:9b:7b:23:ff:32:38:3f:4e:b4:58:0f:62:ff:1d: d0:75:63:c9:12:4e:19:19:3f:77:38:1d:44:9d:4d:d2:01:9c: 08:5b:83:a1:42:3a:4e:43:12:b9:3a:40:ba:66:97:56:9b:4b: 62:46:29:b9:e6:50:80:6f:9c:57:66:08:89:33:39:3c:9b:9c: 83:15:8b:a1:a2:e7:6e:6f:b2:8b:82:71:73:2c:5f:59:7c:f4: b8:be:8d:1c:1c:e8:ef:4b:6d:71:5c:3f:52:97:1d:a8:bb:da: f3:01:1d:bd:1a:35:b7:73:a0:70:5c:c8:7d:b4:01:7f:fd:88: f6:c5:cc:7f:a9:d6:4e:96:e8:59:ed:42:dd:9a:5a:33:21:68: 58:bc:6a:d6:25:8c:33:86:5d:15:fa:b0:5d:f5:78:30:9c:08: a7:75:66:c8:c6:dc:68:af:0f:2f:91:6d:35:25:d6:1f:b7:8c: 49:e1:67:25:bd:c9:a9:d0:3b:e4:6a:3f:74:bc:f9:b1:bf:62: 9d:d0:70:a2:08:46:78:fe:fa:14:26:2a:c5:65:74:e6:ad:72: e5:7d:53:8e:be:2d:05:74:a8:b2:0c:5b:2c:b4:11:40:df:f1: 88:3b:18:b6:9e:83:3c:d9:df:89:68:50:0d:55:c9:f4:f1:2d: eb:43:7e:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdGbuy1hGwqGJFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDk1MDFmMjUtYzYxZC00ZjEzLTk2MTEtZTkwYmNmZWUzMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECionZlviwNj6juIO7EkIHydGekJxFO2ief cmLiNmsdpfiS7vzf9n2vBnk92tMWUQrzx3JrZNJCrHi+w5GjWWJnVRx2ldEyUQ0h 7RWSWNh/E65uJDVLueDr6BhbRQWrEdX9RkIAOXzRSONgBtLmGwtiXOPMUfTkrzPj y3bP+EGCLXWH58gLcrLZzsTvVSHZoBQPnFF+L+9KKOLB7aCVXPems0SPzfUbULrN QV2+bkucm2CDAgFsT4/fZDDwXn6USImZUqorGS6rjVBBV2adNUhYksqzzKaBI+wj rb5y4SgTUmWvSYaWwtYj2PHPJO5XbiqA30FpP5xJL5bxU4Z4xwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFORUA4sPiedvuxUNjPrsoDBBmOZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMjFiMWY1OGEtMGE3ZS0z NGI4LTk5MzgtN2NiYzI5NzVlNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgEg8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHrdmBm3sj/zI4P060WA9i/x3QdWPJEk4ZGT93OB1EnU3SAZwIW4Oh QjpOQxK5OkC6ZpdWm0tiRim55lCAb5xXZgiJMzk8m5yDFYuhoudub7KLgnFzLF9Z fPS4vo0cHOjvS21xXD9Slx2ou9rzAR29GjW3c6BwXMh9tAF//Yj2xcx/qdZOluhZ 7ULdmlozIWhYvGrWJYwzhl0V+rBd9XgwnAindWbIxtxorw8vkW01JdYft4xJ4Wcl vcmp0Dvkaj90vPmxv2Kd0HCiCEZ4/voUJirFZXTmrXLlfVOOvi0FdKiyDFsstBFA 3/GIOxi2noM82d+JaFANVcn08S3rQ35y -----END CERTIFICATE-----Generated at Sat Oct 3 15:55:45 2026 by rpki-client