$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa File: 21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa (raw, json) Hash identifier: DU5p+eD8ff4XozUkxizNuK20ZxDpYj9cCJ6T2zSrc8E= Subject key identifier: 9B:0A:D5:F4:3A:2D:33:70:06:51:A1:2F:67:D7:7C:35:9D:27:E7:07 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584EA7876FE359ABFAE39BFC1700 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 2601:20f0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:6f:e3:59:ab:fa:e3:9b:fc:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7d395cea-a70e-48a0-8aae-9e0c2660eb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:04:7c:38:9e:b7:5e:84:ec:fe:42:38:d9:c1: 30:56:12:1f:b0:82:03:bf:d6:5d:c4:56:24:c1:34: 0a:50:fb:19:44:09:c5:e2:81:51:d8:16:aa:a4:98: eb:3e:68:b6:1a:85:2d:f6:12:ef:89:06:7b:5b:31: 39:f6:ff:a2:d7:f5:cd:62:41:97:a0:bb:cf:01:de: 16:c4:36:7f:96:d3:67:e8:a9:0a:12:93:1f:88:df: de:b9:81:0e:8c:1b:fd:85:e0:d6:05:a9:ea:79:ea: ef:4f:fc:c2:03:7c:64:0e:69:12:dd:92:04:39:51: a1:96:c1:fc:f7:98:69:e3:0c:5d:1b:dc:0e:3e:00: fb:25:5f:21:d2:77:f7:96:50:54:e1:ec:af:ad:1d: 3e:2a:5b:9d:49:69:4c:d5:1b:6a:3a:d6:77:46:6a: e4:cd:6e:af:a9:7a:94:1c:a0:c7:8f:cf:ba:aa:24: 13:5a:db:f2:c0:c1:03:3d:5f:89:38:ba:06:df:ad: 44:f7:a0:11:84:df:c8:8e:e4:37:dd:3c:1b:d9:b0: 37:ad:62:22:0b:59:b0:86:ea:31:29:85:ad:c1:fc: b4:b4:9e:30:5f:7e:1d:0b:7e:8e:28:ff:fd:f5:1e: 7c:df:75:a2:b0:14:1b:06:c1:c4:84:55:fd:0b:9a: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0A:D5:F4:3A:2D:33:70:06:51:A1:2F:67:D7:7C:35:9D:27:E7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:20f0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:06:13:71:bd:3c:29:99:be:e6:36:1b:c8:99:ec:b1:ee:f6: 4d:f6:87:d2:b8:59:9f:0f:ab:62:e5:8b:32:dd:f2:17:3c:1f: 40:b1:94:55:48:47:06:e7:a2:48:1d:14:8b:7b:07:89:e7:9a: 39:d9:5b:0e:25:3a:38:cd:85:76:e0:66:ae:de:4a:b0:ad:d5: 85:c1:f0:8d:a0:56:98:00:57:f6:e4:2e:ad:ba:29:34:d7:26: ee:28:31:49:b3:8e:ef:a5:83:8c:07:e9:33:42:ee:47:fd:6a: 73:fc:bd:82:5b:b3:39:80:48:af:74:4b:bf:b5:b4:6e:09:f2: f8:70:e3:d5:1a:84:7e:6a:35:05:b2:42:97:d2:1e:5a:07:58: 73:03:39:95:42:c7:ab:c1:1b:a7:ac:73:8d:ed:93:ab:0c:88: 3b:c5:54:86:b2:d0:5a:74:be:56:51:f7:13:ef:f8:c9:05:20: c2:c3:d7:83:a1:a9:f8:92:5a:2c:3d:c0:e2:f0:4d:05:76:63: 4e:e5:73:5b:68:30:af:8e:97:03:7e:e1:44:2e:65:54:70:66: b4:26:6d:0b:45:0b:02:f9:45:98:3b:5d:48:24:6d:d0:4b:a1: 68:f7:f4:c7:9a:5e:1d:6d:a5:f4:0f:23:f7:44:73:92:eb:fb: ed:ff:48:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nh2/jWav645v8FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2QzOTVjZWEtYTcwZS00OGEwLThhYWUtOWUwYzI2NjBlYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwR8OJ63XoTs/kI42cEwVhIfsIIDv9ZdxFYk wTQKUPsZRAnF4oFR2BaqpJjrPmi2GoUt9hLviQZ7WzE59v+i1/XNYkGXoLvPAd4W xDZ/ltNn6KkKEpMfiN/euYEOjBv9heDWBanqeervT/zCA3xkDmkS3ZIEOVGhlsH8 95hp4wxdG9wOPgD7JV8h0nf3llBU4eyvrR0+KludSWlM1RtqOtZ3RmrkzW6vqXqU HKDHj8+6qiQTWtvywMEDPV+JOLoG361E96ARhN/IjuQ33Twb2bA3rWIiC1mwhuox KYWtwfy0tJ4wX34dC36OKP/99R5833WisBQbBsHEhFX9C5qlcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJsK1fQ6LTNwBlGhL2fXfDWdJ+cHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMjFiMWY1OGEtMGE3ZS0z NGI4LTk5MzgtN2NiYzI5NzVlNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgEg8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDIBhNxvTwpmb7mNhvImeyx7vZN9ofSuFmfD6ti5Ysy3fIXPB9AsZRV SEcG56JIHRSLeweJ55o52VsOJTo4zYV24Gau3kqwrdWFwfCNoFaYAFf25C6tuik0 1ybuKDFJs47vpYOMB+kzQu5H/Wpz/L2CW7M5gEivdEu/tbRuCfL4cOPVGoR+ajUF skKX0h5aB1hzAzmVQserwRunrHON7ZOrDIg7xVSGstBadL5WUfcT7/jJBSDCw9eD oan4klosPcDi8E0FdmNO5XNbaDCvjpcDfuFELmVUcGa0Jm0LRQsC+UWYO11IJG3Q S6Fo9/THml4dbaX0DyP3RHOS6/vt/0iX -----END CERTIFICATE-----Generated at Tue Aug 25 10:59:31 2026 by rpki-client