$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa File: c21b6b08-7706-398f-83f1-168e28d2da7f.roa (raw, json) Hash identifier: 25uSUY+IxgyGDyLXCQqx7Cj4dItG/oj1PkVSXTtHUl0= Subject key identifier: 4A:84:5F:EB:E1:30:F0:42:89:E9:CD:23:23:76:3B:3A:5E:50:53:53 Certificate issuer: /CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3 Certificate serial: 010D0C9F4328584CB981DC36E569CD3E06D12880 Authority key identifier: 26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 17138 IP address blocks: 2602:803:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:dc:36:e5:69:cd:3e:06:d1:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=e1fe961c-fb1c-4e1d-a329-67f3808a661e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:36:5e:10:da:dc:e3:dc:4a:ce:a8:61:62: 0c:b6:a6:1e:68:50:23:3f:1a:c4:cc:15:a6:3e:fc: c3:a9:19:c2:5b:11:90:ed:ed:f1:a6:3f:38:83:64: b8:2a:74:dd:fc:20:fe:1a:5b:e1:d6:18:ca:d3:1b: 1c:81:3b:35:7f:27:6e:5d:3f:21:5d:6a:ef:6c:77: 0d:a7:03:7d:72:9d:a3:3e:65:15:fb:ab:29:ef:3c: 2b:ec:cc:97:37:fc:a8:63:7b:fd:45:bf:79:d1:24: 4b:02:8e:7d:74:55:33:1b:08:f3:76:f2:69:44:7e: d6:77:3b:60:18:ed:cb:20:f8:be:59:5c:45:c5:06: 0a:d9:f9:5f:16:b4:93:32:6e:2d:c5:27:ce:89:f8: 1a:8c:18:3e:08:82:a5:c5:6f:0e:7f:c6:d7:a5:78: cb:67:0c:9a:ab:cc:49:80:db:4b:8a:9b:85:dd:9d: 19:c5:5b:4e:ee:69:a4:a7:af:5b:5c:7e:41:eb:34: 4c:74:17:6e:73:30:e7:f1:06:02:39:6e:62:ec:32: e7:63:de:2e:a5:d1:6b:93:e1:ba:f9:0a:91:17:ec: 60:c4:e9:7b:cb:d5:f4:53:7c:fd:d2:d4:26:e8:f9: d6:a1:6b:bb:f1:6f:fb:75:b5:dc:0e:28:2a:01:c4: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:84:5F:EB:E1:30:F0:42:89:E9:CD:23:23:76:3B:3A:5E:50:53:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl X509v3 Authority Key Identifier: keyid:26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer sbgp-ipAddrBlock: critical IPv6: 2602:803:9000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:17:37:b1:5b:b6:f3:53:2b:3f:be:cc:0f:82:50:65:5c:e9: 92:b5:38:07:ba:e7:4c:76:08:66:fe:8a:c4:46:31:63:11:b8: 6d:2c:ec:a0:86:b5:b6:07:27:8f:fe:a2:9b:fb:d3:f3:13:6b: 16:5e:56:da:0b:8f:1f:80:9e:a0:04:56:8f:80:4f:d7:61:bb: 21:ea:35:62:02:2d:fe:05:48:e0:dc:1d:3d:66:3b:97:88:45: a7:d1:36:d0:e3:5b:23:5a:10:67:03:84:b2:fb:d3:7e:2e:1f: 0f:09:81:e9:37:0f:a5:e5:87:b8:e9:7b:03:54:d7:43:ed:ad: ef:dc:62:3c:0e:ec:eb:97:cb:3f:09:0f:1d:58:17:2f:ca:d1: 8f:ac:b6:dc:b1:c3:fd:9d:53:80:5f:b3:0d:9c:fc:f8:fe:f0: 76:fc:b9:61:41:a0:a0:b0:23:b4:a4:ba:de:19:4c:5d:ac:8c: 3d:b5:f9:81:9e:0b:c0:5d:68:e2:8b:ec:8e:ba:41:d0:7e:19: 82:19:8d:af:a6:59:04:27:a5:d8:ad:27:27:1f:29:93:37:c8: 69:03:43:9f:44:91:69:f4:a4:7b:1e:77:30:ce:af:a1:d4:1f: a4:06:f0:f1:39:56:6d:1c:6b:a4:af:9d:7f:ac:f9:d5:d0:90: 39:60:c2:b1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEy5gdw25WnNPgbRKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwNDhiNWEtMmNhOC00MjUxLThlOTMtNWVhYWI3MmQ0 Y2MzMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTFmZTk2MWMtZmIxYy00ZTFkLWEzMjktNjdmMzgwOGE2NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrU2XhDa3OPcSs6oYWIMtqYeaFAjPxrEzBWm PvzDqRnCWxGQ7e3xpj84g2S4KnTd/CD+Glvh1hjK0xscgTs1fyduXT8hXWrvbHcN pwN9cp2jPmUV+6sp7zwr7MyXN/yoY3v9Rb950SRLAo59dFUzGwjzdvJpRH7Wdztg GO3LIPi+WVxFxQYK2flfFrSTMm4txSfOifgajBg+CIKlxW8Of8bXpXjLZwyaq8xJ gNtLipuF3Z0ZxVtO7mmkp69bXH5B6zRMdBduczDn8QYCOW5i7DLnY94updFrk+G6 +QqRF+xgxOl7y9X0U3z90tQm6PnWoWu78W/7dbXcDigqAcQCIQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEqEX+vhMPBCienNIyN2OzpeUFNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0 OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFhYjcyZDRjYzMvYzIxYjZiMDgtNzcwNi0z OThmLTgzZjEtMTY4ZTI4ZDJkYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjAwNDhiNWEtMmNhOC00MjUxLThl OTMtNWVhYWI3MmQ0Y2MzLzYwMDQ4YjVhLTJjYTgtNDI1MS04ZTkzLTVlYWFiNzJk NGNjMy5jcmwwHwYDVR0jBBgwFoAUJrNx2C7TAlCegsXwq57lU90/7UgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFh YjcyZDRjYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIIA5Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqhc3sVu281MrP77MD4JQZVzpkrU4B7rnTHYIZv6KxEYxYxG4bSzs oIa1tgcnj/6im/vT8xNrFl5W2guPH4CeoARWj4BP12G7Ieo1YgIt/gVI4NwdPWY7 l4hFp9E20ONbI1oQZwOEsvvTfi4fDwmB6TcPpeWHuOl7A1TXQ+2t79xiPA7s65fL PwkPHVgXL8rRj6y23LHD/Z1TgF+zDZz8+P7wdvy5YUGgoLAjtKS63hlMXayMPbX5 gZ4LwF1o4ovsjrpB0H4ZghmNr6ZZBCel2K0nJx8pkzfIaQNDn0SRafSkex53MM6v odQfpAbw8TlWbRxrpK+df6z51dCQOWDCsQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:21:52 2026 by rpki-client