
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa
File: c21b6b08-7706-398f-83f1-168e28d2da7f.roa (raw, json)
Hash identifier: +itAW9oo1yflNA5yJrxQrXWZDsnMWY9eGi/NY+it/Mo=
Subject key identifier: 47:58:6F:D3:F7:2A:98:A8:2B:93:6D:6C:DF:80:6D:70:47:F9:0F:66
Certificate issuer: /CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3
Certificate serial: 010D0C9F4328584E7A64E1692650221A29838A00
Authority key identifier: 26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa
Signing time: Sun 12 Jul 2026 21:00:13 +0000
ROA not before: Sun 12 Jul 2026 21:00:13 +0000
ROA not after: Sat 10 Oct 2026 21:00:13 +0000
asID: 17138
IP address blocks: 2602:803:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7a:64:e1:69:26:50:22:1a:29:83:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3
Validity
Not Before: Jul 12 21:00:13 2026 GMT
Not After : Oct 10 21:00:13 2026 GMT
Subject: CN=8e8caf1a-d4e2-438f-86a2-d62e86396149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:69:c3:b1:e0:c2:3b:69:6b:68:20:95:cf:
da:b5:5e:6e:ab:32:24:9a:2d:24:b5:66:53:a8:bc:
11:dc:b3:2e:60:33:cc:91:1f:94:11:95:76:90:ad:
21:9e:59:d1:2f:b8:02:39:56:30:5d:5e:a5:ad:e3:
4c:56:b7:8f:5c:3c:e0:e7:6a:70:77:a4:12:3f:67:
06:74:1b:b5:d2:b6:ef:fe:0d:5d:73:b7:37:b9:13:
fc:b8:48:cf:5b:12:4c:4a:3e:7a:e5:ed:b3:77:d7:
e7:cb:ae:ba:11:5a:24:92:eb:05:2c:e8:21:f7:35:
80:f6:8c:58:f0:1d:11:ea:a5:aa:a5:72:18:59:2a:
49:c9:82:f6:cd:e0:b2:05:60:a8:a6:e7:53:3f:41:
24:65:2a:9c:2e:e0:1e:7b:0a:45:57:d7:f8:60:76:
37:69:61:ba:e5:42:7f:1c:65:ea:94:dc:12:6b:e8:
b5:ef:bf:2e:c8:53:34:3c:89:e8:9d:4c:85:4f:77:
ae:45:9d:de:aa:47:09:4a:c6:46:41:87:99:3f:48:
82:82:40:b4:ac:43:c1:48:28:6d:45:ba:33:aa:d9:
9c:73:28:38:fe:13:b6:6a:4d:3b:af:74:4e:9a:12:
0d:d2:d6:8b:65:17:b8:b4:30:d3:5b:a3:97:51:49:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:58:6F:D3:F7:2A:98:A8:2B:93:6D:6C:DF:80:6D:70:47:F9:0F:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl
X509v3 Authority Key Identifier:
keyid:26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:803:9000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:14:a4:28:8c:7d:4e:cc:9a:87:7c:3d:f6:28:78:d0:8b:d5:
a8:07:c6:56:8f:fb:2a:f0:90:f0:7a:38:87:9f:bd:e5:3d:55:
79:f6:4c:0f:24:54:31:c4:ac:ca:3e:b2:2f:ae:2e:9f:3d:75:
05:d4:31:07:0e:99:03:e8:58:21:75:9a:3d:3b:95:a8:4e:61:
1d:14:49:17:c8:04:26:6a:a7:bd:6c:94:f5:91:80:14:02:48:
9b:33:54:45:f8:7b:0b:9b:4d:2a:19:f5:67:ca:f8:8e:52:a2:
c6:32:cb:d8:1d:56:72:3e:9b:a8:0a:54:a2:75:3e:a0:24:81:
fa:3d:22:b0:da:bf:5c:f0:c8:0e:e1:f9:c4:c2:1e:c7:f1:aa:
27:2e:e6:73:ed:61:7b:00:3d:f9:8e:25:be:2e:6e:f7:07:9c:
e5:7d:87:93:36:b0:23:ad:76:2e:0e:fc:ee:6b:e5:ad:63:8d:
fd:d3:90:84:c7:f1:e4:28:e0:44:d6:1d:d6:6c:4c:a6:bc:f5:
06:73:e0:6d:ac:45:35:68:dd:3f:bc:ba:2a:aa:b7:8e:2f:05:
a2:59:4a:ff:1f:bb:29:4c:57:f2:9b:10:b5:e9:0c:7f:7a:dd:
39:a9:da:1e:20:0d:45:bd:87:55:d4:3e:64:47:8c:0a:42:fa:
de:f2:a1:bd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE56ZOFpJlAiGimDigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAwNDhiNWEtMmNhOC00MjUxLThlOTMtNWVhYWI3MmQ0
Y2MzMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
OGU4Y2FmMWEtZDRlMi00MzhmLTg2YTItZDYyZTg2Mzk2MTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSRpw7Hgwjtpa2gglc/atV5uqzIkmi0ktWZT
qLwR3LMuYDPMkR+UEZV2kK0hnlnRL7gCOVYwXV6lreNMVrePXDzg52pwd6QSP2cG
dBu10rbv/g1dc7c3uRP8uEjPWxJMSj565e2zd9fny666EVokkusFLOgh9zWA9oxY
8B0R6qWqpXIYWSpJyYL2zeCyBWCopudTP0EkZSqcLuAeewpFV9f4YHY3aWG65UJ/
HGXqlNwSa+i1778uyFM0PInonUyFT3euRZ3eqkcJSsZGQYeZP0iCgkC0rEPBSCht
Rbozqtmccyg4/hO2ak07r3ROmhIN0taLZRe4tDDTW6OXUUk0RQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEdYb9P3KpioK5NtbN+AbXBH+Q9mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0
OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFhYjcyZDRjYzMvYzIxYjZiMDgtNzcwNi0z
OThmLTgzZjEtMTY4ZTI4ZDJkYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjAwNDhiNWEtMmNhOC00MjUxLThl
OTMtNWVhYWI3MmQ0Y2MzLzYwMDQ4YjVhLTJjYTgtNDI1MS04ZTkzLTVlYWFiNzJk
NGNjMy5jcmwwHwYDVR0jBBgwFoAUJrNx2C7TAlCegsXwq57lU90/7UgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFh
YjcyZDRjYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIIA5Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbRSkKIx9Tsyah3w99ih40IvVqAfGVo/7KvCQ8Ho4h5+95T1VefZM
DyRUMcSsyj6yL64unz11BdQxBw6ZA+hYIXWaPTuVqE5hHRRJF8gEJmqnvWyU9ZGA
FAJImzNURfh7C5tNKhn1Z8r4jlKixjLL2B1Wcj6bqApUonU+oCSB+j0isNq/XPDI
DuH5xMIex/GqJy7mc+1hewA9+Y4lvi5u9wec5X2HkzawI612Lg787mvlrWON/dOQ
hMfx5CjgRNYd1mxMprz1BnPgbaxFNWjdP7y6Kqq3ji8FollK/x+7KUxX8psQtekM
f3rdOanaHiANRb2HVdQ+ZEeMCkL63vKhvQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:58 2026 by rpki-client