$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa File: c21b6b08-7706-398f-83f1-168e28d2da7f.roa (raw, json) Hash identifier: Kt3nN8pYuk317WtM5SH6CvsEFJsHcZnSuWBLmGXHvJ0= Subject key identifier: 80:E8:91:6C:F3:39:9D:18:FB:59:76:C3:DD:65:54:B6:D5:F4:E9:44 Certificate issuer: /CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3 Certificate serial: 010D0C9F4328584D9A201C22459395A1B5A71C80 Authority key identifier: 26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 17138 IP address blocks: 2602:803:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:1c:22:45:93:95:a1:b5:a7:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=939acb2d-42cc-4291-972f-fa7f0f6d77d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:29:08:74:aa:94:c3:59:9f:e8:46:a7:64: ce:a8:46:d5:76:90:3e:53:a0:a7:5b:c3:0c:97:81: 48:fc:e9:2c:4a:06:1b:64:f1:89:f5:3f:1c:a6:a5: d8:82:70:e9:2b:07:4b:d7:02:1b:1b:d4:bb:89:8e: b5:42:2f:c3:a3:de:b6:51:d5:36:a8:b4:77:8f:71: ee:26:40:08:06:82:a1:c9:71:9a:1c:a2:7c:a0:13: 37:c2:0c:e9:16:75:7d:9b:a5:33:19:43:89:51:f8: 8a:da:73:e4:9b:98:60:e8:e5:10:3f:b8:35:65:06: b8:d7:b0:a5:37:6c:a8:b0:a9:12:50:f5:e0:24:c5: 64:4e:bb:8d:a4:81:49:94:28:21:c0:26:9a:95:5b: 8d:89:da:d5:6d:e8:59:29:15:ae:c9:0a:28:1f:c5: 5b:ef:e3:fa:4b:9e:f0:4a:09:58:41:53:a9:7e:d7: 52:9a:4a:ac:01:64:0e:03:ab:21:82:9d:bd:63:23: 11:9a:10:2a:32:f2:31:56:77:fd:58:d9:e0:70:e5: b5:8b:94:a7:4e:3e:de:8e:0b:f9:90:d8:0b:67:6e: d9:58:4c:d4:97:a1:f5:b5:d8:62:e2:3b:57:4a:c0: c8:68:66:c7:3f:b0:4c:f6:4e:4e:44:0a:b7:8e:eb: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E8:91:6C:F3:39:9D:18:FB:59:76:C3:DD:65:54:B6:D5:F4:E9:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl X509v3 Authority Key Identifier: keyid:26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer sbgp-ipAddrBlock: critical IPv6: 2602:803:9000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:0c:5f:7a:7d:f8:8d:05:25:68:73:62:b6:b7:e9:fe:c9:cf: aa:f0:dc:00:ac:29:b9:40:89:32:96:19:a7:e0:f5:63:01:2e: 7f:67:6c:1b:f6:25:99:86:79:be:a9:69:58:ee:d5:d7:24:56: 05:f5:3d:28:17:bf:b6:be:06:42:22:f6:b7:91:8b:55:ef:c8: 15:c6:88:be:22:1c:27:a9:45:3d:f4:d4:5a:8a:e8:f4:21:55: f5:1f:5d:8e:f3:39:83:b4:9a:2e:f8:80:99:9a:26:3f:3b:e7: a8:31:42:0b:29:31:02:1e:89:d1:3a:14:e2:06:1d:17:f6:ad: b0:6e:ba:57:52:57:21:ee:74:ba:22:a1:e7:da:0e:e9:37:00: c3:a1:bb:7b:5d:e5:9b:7c:f0:8c:eb:86:04:05:1b:7f:95:37: c3:20:42:a3:6f:2f:91:13:51:42:1d:0f:2f:64:97:0e:a7:ba: 2d:26:1d:95:98:fc:6f:2a:6e:83:1b:09:f7:99:86:e8:5b:5f: b9:fa:bf:8d:cc:4e:dd:b3:71:83:7c:6f:a7:a2:b5:69:27:4f: 16:48:cb:3d:af:79:d9:95:ff:69:0a:9b:52:00:07:d3:4b:78: 4e:9f:e6:f6:8e:d3:a1:90:3d:23:76:dc:91:7f:b3:dc:7c:82: b5:ee:73:4e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2aIBwiRZOVobWnHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwNDhiNWEtMmNhOC00MjUxLThlOTMtNWVhYWI3MmQ0 Y2MzMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk OTM5YWNiMmQtNDJjYy00MjkxLTk3MmYtZmE3ZjBmNmQ3N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiopCHSqlMNZn+hGp2TOqEbVdpA+U6CnW8MM l4FI/OksSgYbZPGJ9T8cpqXYgnDpKwdL1wIbG9S7iY61Qi/Do962UdU2qLR3j3Hu JkAIBoKhyXGaHKJ8oBM3wgzpFnV9m6UzGUOJUfiK2nPkm5hg6OUQP7g1ZQa417Cl N2yosKkSUPXgJMVkTruNpIFJlCghwCaalVuNidrVbehZKRWuyQooH8Vb7+P6S57w SglYQVOpftdSmkqsAWQOA6shgp29YyMRmhAqMvIxVnf9WNngcOW1i5SnTj7ejgv5 kNgLZ27ZWEzUl6H1tdhi4jtXSsDIaGbHP7BM9k5ORAq3juvOdwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIDokWzzOZ0Y+1l2w91lVLbV9OlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0 OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFhYjcyZDRjYzMvYzIxYjZiMDgtNzcwNi0z OThmLTgzZjEtMTY4ZTI4ZDJkYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjAwNDhiNWEtMmNhOC00MjUxLThl OTMtNWVhYWI3MmQ0Y2MzLzYwMDQ4YjVhLTJjYTgtNDI1MS04ZTkzLTVlYWFiNzJk NGNjMy5jcmwwHwYDVR0jBBgwFoAUJrNx2C7TAlCegsXwq57lU90/7UgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFh YjcyZDRjYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIIA5Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjgxfen34jQUlaHNitrfp/snPqvDcAKwpuUCJMpYZp+D1YwEuf2ds G/YlmYZ5vqlpWO7V1yRWBfU9KBe/tr4GQiL2t5GLVe/IFcaIviIcJ6lFPfTUWoro 9CFV9R9djvM5g7SaLviAmZomPzvnqDFCCykxAh6J0ToU4gYdF/atsG66V1JXIe50 uiKh59oO6TcAw6G7e13lm3zwjOuGBAUbf5U3wyBCo28vkRNRQh0PL2SXDqe6LSYd lZj8bypugxsJ95mG6Ftfufq/jcxO3bNxg3xvp6K1aSdPFkjLPa952ZX/aQqbUgAH 00t4Tp/m9o7ToZA9I3bckX+z3HyCte5zTg== -----END CERTIFICATE-----Generated at Mon Apr 27 11:58:27 2026 by rpki-client