$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa File: 21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa (raw, json) Hash identifier: tcuo55QN/7KafEvXoIJfBscbzInHpH5Dflmh6hRoGSQ= Subject key identifier: B1:B1:A9:1D:92:36:B6:B6:57:42:24:91:A8:4D:9E:F8:A3:BB:00:60 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B2CF71CFC0C2BFFDCAD809940 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 2601:20b8::/29 maxlen: 32 2601:20d0::/29 maxlen: 32 2601:20f0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:1c:fc:0c:2b:ff:dc:ad:80:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=09f6bdaa-3ab7-422f-8e11-35c5aa40b265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:e1:99:f4:84:89:fe:ea:6b:6f:b0:c7:6c: 90:a9:d0:2d:83:72:7a:f7:24:5b:70:71:59:e1:b7: 99:2f:c9:81:3d:8c:20:3f:ad:93:fb:9d:e1:b7:a2: 87:ce:f4:7a:67:0a:cb:1e:d6:e5:91:03:42:05:2d: a3:b4:63:f8:ad:fb:d2:a2:42:df:7c:98:c8:98:d0: b9:3a:87:9f:ab:7d:a0:90:f4:b4:57:15:de:ae:60: 1f:75:af:95:8a:39:f2:da:c1:5f:43:78:18:e8:01: f8:9d:cd:9e:0e:e1:52:4f:ec:52:1c:18:36:6d:73: 5f:b2:5d:a4:37:10:7b:12:17:93:85:c9:ba:dd:96: 02:b7:f6:5a:af:86:94:4d:8a:93:98:a4:47:a4:37: c7:ab:29:e3:68:87:cf:fa:81:3c:fd:db:b0:28:a2: c2:22:c0:56:fa:b4:d7:4b:38:9c:1b:95:43:13:07: 7d:50:ad:bb:ef:25:8d:91:f4:45:d1:74:a8:63:d9: f3:39:a3:06:28:2e:e2:7d:38:b3:0d:12:f5:43:11: 19:5d:27:80:51:f9:db:39:e3:0b:18:ea:96:85:05: bf:87:eb:33:d5:78:d0:9c:9a:0a:01:a0:2a:d5:07: 4d:a0:2e:b4:34:99:df:01:e4:f9:5c:1d:b0:83:8f: 78:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B1:A9:1D:92:36:B6:B6:57:42:24:91:A8:4D:9E:F8:A3:BB:00:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:20b8::/29 2601:20d0::/29 2601:20f0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:47:a1:c1:22:47:ff:90:01:95:89:df:c8:ed:ed:29:f2:bd: 49:77:62:d7:d1:e8:e4:9e:49:23:12:6e:d8:be:fb:0a:24:2e: d8:28:f1:18:22:f8:17:6b:0c:eb:69:e1:0b:a7:c8:2e:31:1e: 29:7c:f6:52:e3:b0:ac:be:f3:0d:76:28:90:cf:b9:39:5d:5d: c2:25:be:e0:ec:8a:0a:0d:cc:31:08:87:57:69:41:0a:f1:98: 9f:9e:6a:20:48:67:1a:00:a6:68:3d:73:e9:ab:e9:17:4d:fe: e3:60:57:e7:be:4a:68:f7:6e:9c:8c:40:15:08:d6:c1:f9:5a: db:36:a0:23:da:65:32:20:fc:52:fc:83:59:66:17:7d:70:ff: ea:39:cc:3f:84:af:97:4e:48:03:33:4c:87:93:fe:0e:7c:8f: c4:e1:5f:77:09:a1:b8:f7:22:89:64:49:20:f5:2e:36:2b:b8: 42:a0:1e:66:74:53:a6:c9:20:bc:68:9b:ac:4a:e9:12:3b:8d: 32:6d:a7:39:8e:94:8b:60:92:ee:b4:16:05:05:8b:8b:49:09: 13:b4:2f:11:97:4e:8b:b9:dc:d1:49:d7:4d:94:44:b3:ea:be: 1e:2d:6b:49:28:f1:7d:fd:c3:2a:cf:15:2b:44:84:da:44:0a: a4:42:78:23 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEss9xz8DCv/3K2AmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDlmNmJkYWEtM2FiNy00MjJmLThlMTEtMzVjNWFhNDBiMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoThmfSEif7qa2+wx2yQqdAtg3J69yRbcHFZ 4beZL8mBPYwgP62T+53ht6KHzvR6ZwrLHtblkQNCBS2jtGP4rfvSokLffJjImNC5 Ooefq32gkPS0VxXermAfda+Vijny2sFfQ3gY6AH4nc2eDuFST+xSHBg2bXNfsl2k NxB7EheThcm63ZYCt/Zar4aUTYqTmKRHpDfHqynjaIfP+oE8/duwKKLCIsBW+rTX SzicG5VDEwd9UK277yWNkfRF0XSoY9nzOaMGKC7ifTizDRL1QxEZXSeAUfnbOeML GOqWhQW/h+sz1XjQnJoKAaAq1QdNoC60NJnfAeT5XB2wg494mQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFLGxqR2SNra2V0IkkahNnvijuwBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMjFiMWY1OGEtMGE3ZS0z NGI4LTk5MzgtN2NiYzI5NzVlNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDJgEguAMF AyYBINADBQMmASDwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAJNHocEiR/+QAZWJ38jt7SnyvUl3YtfR6OSe SSMSbti++wokLtgo8Rgi+BdrDOtp4QunyC4xHil89lLjsKy+8w12KJDPuTldXcIl vuDsigoNzDEIh1dpQQrxmJ+eaiBIZxoApmg9c+mr6RdN/uNgV+e+Smj3bpyMQBUI 1sH5Wts2oCPaZTIg/FL8g1lmF31w/+o5zD+Er5dOSAMzTIeT/g58j8ThX3cJobj3 IolkSSD1LjYruEKgHmZ0U6bJILxom6xK6RI7jTJtpzmOlItgku60FgUFi4tJCRO0 LxGXTou53NFJ102URLPqvh4ta0ko8X39wyrPFStEhNpECqRCeCM= -----END CERTIFICATE-----Generated at Thu Oct 9 20:13:40 2025 by rpki-client