$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/60caf8f9-5051-3d82-8e00-297844b8dbfc.roa File: 60caf8f9-5051-3d82-8e00-297844b8dbfc.roa (raw, json) Hash identifier: issZqcLN6PBCEzUCP56sPBM1gEs6OqYxULABmrKAQyI= Subject key identifier: 9F:46:E1:B2:11:CC:6F:70:EC:BC:F9:42:F3:FC:D3:58:72:3E:16:E1 Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584D6AAA5E8DB6AA1DC0DD0CC680 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/60caf8f9-5051-3d82-8e00-297844b8dbfc.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 16557 IP address blocks: 72.21.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:5e:8d:b6:aa:1d:c0:dd:0c:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=56044a7c-f698-4b6a-8534-f72a57caf946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:91:f6:8f:57:b9:a2:9c:e0:2c:1a:03:a2:48: a5:e5:27:f8:05:04:40:37:ed:c2:39:dd:ed:d2:f9: 74:43:a7:95:1d:a9:89:60:e4:c2:8f:d7:ab:3c:e0: fe:e6:f1:db:6f:d8:96:28:1f:36:46:7a:60:6b:7c: 75:33:2c:bb:67:bc:0a:21:14:d5:a0:81:b6:82:ea: 9b:a2:e4:eb:72:8a:0e:d6:fa:5e:d3:78:47:5d:84: bd:d2:91:f6:d8:49:aa:23:40:de:5a:98:b3:c0:dd: 0b:3e:ef:98:d6:1a:eb:14:31:a3:db:74:be:f8:74: bf:46:99:e6:c5:6a:3e:66:c0:4a:55:aa:2e:ee:b3: ce:ae:d6:a3:bf:82:15:f6:4b:af:23:82:4c:93:1c: 55:b8:98:d3:fd:a6:a7:5c:77:ea:54:31:06:a0:cc: e1:d7:60:61:32:17:9b:da:a5:a9:99:ab:89:b6:46: 53:1d:e7:21:aa:91:c5:68:35:35:31:e3:f4:9e:eb: 2e:de:b4:db:5a:8f:6e:10:73:86:98:33:49:1e:05: 1c:f0:55:a5:e2:ef:b6:c2:c6:8f:f2:3b:24:39:99: 55:25:83:b7:8f:ba:ca:3e:a8:87:b8:2b:cf:8a:b5: 0a:ab:1e:76:55:19:0d:b9:fb:b4:c7:5e:06:f1:c4: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:46:E1:B2:11:CC:6F:70:EC:BC:F9:42:F3:FC:D3:58:72:3E:16:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/60caf8f9-5051-3d82-8e00-297844b8dbfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:62:d2:61:5d:e8:e8:b0:e6:55:0a:20:c8:a5:75:6a:e7:cd: 6c:bd:f0:c2:ad:c5:61:b6:d0:28:2b:67:e1:13:a6:8c:9c:27: 06:2d:48:01:af:71:c3:55:60:f8:39:a8:4e:d9:53:c8:51:64: 8e:17:94:33:3d:bc:19:92:94:07:23:c5:68:d2:6d:eb:68:08: f3:ed:31:94:88:75:97:46:a4:c4:6c:fc:d1:44:ac:de:e3:3c: 81:6f:b2:e4:6f:12:53:d6:9d:c9:a7:96:9e:ce:2b:fd:ea:49: a8:9e:9e:32:19:1f:16:11:0a:a0:46:fd:05:c9:64:3b:ec:4c: 43:4a:b4:aa:fa:35:97:5c:1a:eb:90:ae:de:2d:30:6b:76:b9: 2e:66:3e:d4:82:c8:f3:5c:80:4d:75:56:be:39:38:cd:2f:63: 93:23:5b:7a:e1:b8:ff:ea:54:16:41:c1:c6:bb:f5:8f:20:31: 4b:fb:65:07:2b:a6:84:64:75:12:a3:d8:5d:d2:69:86:7d:01: 58:42:47:a1:2f:06:15:b6:27:15:03:a8:7d:f6:e7:3b:32:ca: 58:1e:1d:fa:dc:67:c2:0d:d0:3e:9b:27:cb:02:30:d5:34:5a: a7:8a:5b:00:b2:44:db:e5:c9:6b:96:7a:3e:68:93:37:c5:26: 8c:9c:47:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qql6NtqodwN0MxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NTYwNDRhN2MtZjY5OC00YjZhLTg1MzQtZjcyYTU3Y2FmOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZH2j1e5opzgLBoDokil5Sf4BQRAN+3COd3t 0vl0Q6eVHamJYOTCj9erPOD+5vHbb9iWKB82Rnpga3x1Myy7Z7wKIRTVoIG2guqb ouTrcooO1vpe03hHXYS90pH22EmqI0DeWpizwN0LPu+Y1hrrFDGj23S++HS/Rpnm xWo+ZsBKVaou7rPOrtajv4IV9kuvI4JMkxxVuJjT/aanXHfqVDEGoMzh12BhMheb 2qWpmauJtkZTHechqpHFaDU1MeP0nusu3rTbWo9uEHOGmDNJHgUc8FWl4u+2wsaP 8jskOZlVJYO3j7rKPqiHuCvPirUKqx52VRkNufu0x14G8cRDcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9G4bIRzG9w7Lz5QvP801hyPhbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvNjBjYWY4ZjktNTA1MS0z ZDgyLThlMDAtMjk3ODQ0YjhkYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFi0mFd6Oiw5lUKIMildWrnzWy98MKtxWG20CgrZ+ETpoycJwYtSAGv ccNVYPg5qE7ZU8hRZI4XlDM9vBmSlAcjxWjSbetoCPPtMZSIdZdGpMRs/NFErN7j PIFvsuRvElPWncmnlp7OK/3qSaienjIZHxYRCqBG/QXJZDvsTENKtKr6NZdcGuuQ rt4tMGt2uS5mPtSCyPNcgE11Vr45OM0vY5MjW3rhuP/qVBZBwca79Y8gMUv7ZQcr poRkdRKj2F3SaYZ9AVhCR6EvBhW2JxUDqH325zsyylgeHfrcZ8IN0D6bJ8sCMNU0 WqeKWwCyRNvlyWuWej5okzfFJoycR2o= -----END CERTIFICATE-----Generated at Fri Apr 17 11:20:16 2026 by rpki-client