$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/60eb3d1f-ad76-35e4-8270-05071d5fb722.roa File: 60eb3d1f-ad76-35e4-8270-05071d5fb722.roa (raw, json) Hash identifier: A7q9LooRL6rYGCXCqXClkVxfrE6rFLvItGO5EmwOXlI= Subject key identifier: 20:69:F2:A4:49:F6:93:F2:70:F3:1D:6D:78:56:FD:AA:83:AD:10:D7 Certificate issuer: /CN=2b3c022e-4679-4530-ad3a-1df3041efdd2 Certificate serial: 010D0C9F4328584D1C7F4AF8228DDC921AA05F00 Authority key identifier: FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/60eb3d1f-ad76-35e4-8270-05071d5fb722.roa Signing time: Mon 09 Mar 2026 13:00:40 +0000 ROA not before: Mon 09 Mar 2026 13:00:40 +0000 ROA not after: Sun 07 Jun 2026 13:00:40 +0000 asID: 36856 IP address blocks: 2620:101:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:7f:4a:f8:22:8d:dc:92:1a:a0:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3c022e-4679-4530-ad3a-1df3041efdd2 Validity Not Before: Mar 9 13:00:40 2026 GMT Not After : Jun 7 13:00:40 2026 GMT Subject: CN=1f4c294b-27b4-455f-a32e-5a0345ee44ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1b:fe:76:c3:52:e1:4c:d2:62:b7:ec:24:93: 0f:78:e6:00:76:bf:63:97:18:57:14:64:ac:e5:fd: f8:e6:c3:0a:1b:be:84:14:d5:0d:85:40:ea:ba:df: aa:f3:34:b7:6a:d1:1b:63:50:0d:78:4a:40:d4:a0: 96:ad:82:4c:ab:22:37:cb:86:79:87:e6:e7:d5:7a: 02:c3:a8:62:0e:2d:4d:84:23:cf:0f:fc:9e:91:55: 6f:6e:43:e0:8f:9a:ac:8d:f9:5c:1d:d2:38:84:bf: 22:60:e2:50:e2:49:b3:0c:53:9a:92:fd:23:63:25: 41:f9:52:b1:fc:32:88:55:a5:da:0d:b9:9d:df:1d: fc:7d:5c:05:00:f3:59:67:b9:cd:25:ff:fe:d2:73: cd:51:cd:cc:0c:eb:03:d9:c2:61:2b:d7:4b:a5:f2: a1:d0:60:78:fb:41:b7:4a:a5:81:6f:d4:6f:dd:64: f0:e1:c6:89:14:6b:40:50:a6:64:69:fa:83:db:c8: d8:64:28:b0:04:19:62:f2:5e:b1:bb:35:68:2f:5e: ba:c2:67:c9:c4:45:0c:d0:c2:87:83:a8:6e:32:94: 2e:91:04:cb:3f:2a:17:fa:b2:a7:91:b7:6a:d0:fc: 05:df:7d:5f:b3:89:d4:76:1f:68:ed:f1:a5:d3:c4: f7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:69:F2:A4:49:F6:93:F2:70:F3:1D:6D:78:56:FD:AA:83:AD:10:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/60eb3d1f-ad76-35e4-8270-05071d5fb722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.crl X509v3 Authority Key Identifier: keyid:FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:8000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fa:20:04:1b:02:6e:47:95:e5:8c:66:44:be:cf:13:da:de: e1:be:3a:bc:6b:86:b4:fe:fd:74:2b:42:6b:b7:b3:61:ab:47: fb:65:a3:23:60:d3:a6:c9:f8:a7:a6:e1:e6:c6:1c:93:ce:91: 27:82:a9:a6:e2:4a:a9:4d:82:35:74:3f:00:0a:dd:64:c2:13: 62:53:b9:80:34:d0:4a:bf:49:3a:93:ad:46:f3:fc:73:8c:49: 5e:91:9b:bc:67:16:0c:87:e8:33:c1:34:61:93:b3:a2:76:4d: 3c:91:1b:93:d1:e6:4f:0c:be:f2:84:15:7e:b2:ca:6f:d9:b9: 31:4a:43:78:b2:cf:a5:08:3a:3a:89:db:d2:72:ae:bb:c2:32: 58:ed:68:dc:73:da:b1:61:bb:67:cb:80:cc:c6:1b:cf:a2:21: 02:d4:62:e8:d5:46:ee:b0:51:23:41:d0:f5:39:1d:0a:2d:98: 2c:e2:e7:36:28:5c:02:d6:01:6e:89:55:e6:15:fc:58:62:8a: d5:15:9b:39:34:66:53:74:a3:34:ff:0e:d2:ac:9e:e1:ae:b2: a6:cd:9f:91:d9:7f:2d:47:b7:2e:ab:da:79:ea:3b:90:f1:33: e3:a6:ec:27:01:c2:8f:00:34:04:0d:28:d6:df:ac:57:6d:d4: f6:9a:68:02 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0cf0r4Io3ckhqgXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYzAyMmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0MWVm ZGQyMB4XDTI2MDMwOTEzMDA0MFoXDTI2MDYwNzEzMDA0MFowLzEtMCsGA1UEAxMk MWY0YzI5NGItMjdiNC00NTVmLWEzMmUtNWEwMzQ1ZWU0NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Rv+dsNS4UzSYrfsJJMPeOYAdr9jlxhXFGSs 5f345sMKG76EFNUNhUDqut+q8zS3atEbY1ANeEpA1KCWrYJMqyI3y4Z5h+bn1XoC w6hiDi1NhCPPD/yekVVvbkPgj5qsjflcHdI4hL8iYOJQ4kmzDFOakv0jYyVB+VKx /DKIVaXaDbmd3x38fVwFAPNZZ7nNJf/+0nPNUc3MDOsD2cJhK9dLpfKh0GB4+0G3 SqWBb9Rv3WTw4caJFGtAUKZkafqD28jYZCiwBBli8l6xuzVoL166wmfJxEUM0MKH g6huMpQukQTLPyoX+rKnkbdq0PwF331fs4nUdh9o7fGl08T3lwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCBp8qRJ9pPycPMdbXhW/aqDrRDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjNj MDIyZS00Njc5LTQ1MzAtYWQzYS0xZGYzMDQxZWZkZDIvNjBlYjNkMWYtYWQ3Ni0z NWU0LTgyNzAtMDUwNzFkNWZiNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmIzYzAyMmUtNDY3OS00NTMwLWFk M2EtMWRmMzA0MWVmZGQyLzJiM2MwMjJlLTQ2NzktNDUzMC1hZDNhLTFkZjMwNDFl ZmRkMi5jcmwwHwYDVR0jBBgwFoAU/sirHHbHOvVFD4dFwsu8DT689V4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjNjMDIyZS00Njc5LTQ1MzAtYWQzYS0xZGYz MDQxZWZkZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABAYAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACPogBBsCbkeV5YxmRL7PE9re4b46vGuGtP79dCtCa7ezYatH+2Wj I2DTpsn4p6bh5sYck86RJ4KppuJKqU2CNXQ/AArdZMITYlO5gDTQSr9JOpOtRvP8 c4xJXpGbvGcWDIfoM8E0YZOzonZNPJEbk9HmTwy+8oQVfrLKb9m5MUpDeLLPpQg6 Oonb0nKuu8IyWO1o3HPasWG7Z8uAzMYbz6IhAtRi6NVG7rBRI0HQ9TkdCi2YLOLn NihcAtYBbolV5hX8WGKK1RWbOTRmU3SjNP8O0qye4a6yps2fkdl/LUe3Lqvaeeo7 kPEz46bsJwHCjwA0BA0o1t+sV23U9ppoAg== -----END CERTIFICATE-----Generated at Wed Mar 18 20:27:14 2026 by rpki-client