$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/60caf8f9-5051-3d82-8e00-297844b8dbfc.roa File: 60caf8f9-5051-3d82-8e00-297844b8dbfc.roa (raw, json) Hash identifier: ElvdrZrAhDSyhnikwbshBerj4qpVs6rxBS75TXxA6Hc= Subject key identifier: 22:DA:2F:83:78:A7:BD:47:71:81:B4:AC:A5:AB:DD:78:ED:0A:E1:69 Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584E4AEF2C282545C55019957040 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/60caf8f9-5051-3d82-8e00-297844b8dbfc.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 16557 IP address blocks: 72.21.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:2c:28:25:45:c5:50:19:95:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=be2774c7-fcb5-4965-96c1-7cf1cbaea7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b0:7f:36:5f:06:b3:aa:08:eb:93:6f:ed:37: 1d:5b:63:a6:e3:e5:00:0a:fa:ce:bf:2e:ac:e1:72: d5:71:df:c4:37:53:88:3e:08:c6:fb:aa:ce:b4:86: 09:b0:9c:9e:75:59:96:09:2b:6e:db:09:5b:70:2f: 94:05:97:c9:45:aa:dd:a2:6e:0c:f1:1d:2e:7b:bf: 09:8d:9d:98:3c:b1:d2:1e:42:81:3a:ad:26:e7:56: a9:71:63:01:c0:71:04:c0:23:6c:4e:3b:07:ce:37: 3d:61:b3:61:5e:1f:db:92:5c:2d:13:86:42:b0:e1: aa:e9:69:54:1c:2d:29:26:ae:21:6f:92:45:e8:e8: 9b:50:a4:3a:61:79:0c:87:3b:cd:f4:fd:32:ee:45: e7:4f:cc:43:9b:c7:dd:38:b7:0e:07:1b:6c:a2:95: 6c:30:8c:aa:ad:ad:9f:a6:18:e2:f4:fd:a0:a0:9c: 08:f9:b9:26:cc:71:6b:f1:f6:c5:32:43:fc:31:a9: b6:f7:f2:7c:9e:9b:11:50:6f:80:5c:c2:bf:f5:77: 61:49:dc:37:e3:45:a2:13:11:09:0d:c3:1b:8c:9d: cd:3b:19:16:44:a9:ca:6f:72:5f:d8:95:82:b0:5d: 70:20:01:07:f8:fe:c1:63:57:28:4e:d7:66:8c:20: 90:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DA:2F:83:78:A7:BD:47:71:81:B4:AC:A5:AB:DD:78:ED:0A:E1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/60caf8f9-5051-3d82-8e00-297844b8dbfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9f:48:c2:ec:c5:83:57:09:49:a1:2a:cb:5a:df:15:5f:fb: 1d:87:98:2d:3d:ac:f6:ae:d1:0f:3f:d6:62:c1:74:4a:a9:de: cf:e0:39:15:e7:fa:d1:41:56:6f:03:aa:be:aa:f9:60:ef:6a: 40:ba:4c:a9:3d:12:39:1b:d0:95:17:56:30:34:c7:ff:37:d9: b0:75:8f:b0:d0:b6:08:75:89:66:60:82:80:34:b6:3d:de:e3: 22:19:bb:27:2b:c7:64:f6:d3:64:d9:ff:6c:48:c2:12:d8:e5: 70:5a:fb:65:05:e7:ef:fb:81:37:ee:ac:57:70:5e:7d:a2:be: 1d:7d:71:6d:7b:f0:3d:32:f3:4c:0f:53:e9:5c:03:a4:20:67: c9:1e:98:56:ef:f1:c1:83:89:6b:2f:83:c9:e7:ef:a2:2c:90: ce:c1:99:24:69:53:f7:30:f0:1b:3f:04:3b:8b:d4:8f:c6:cc: af:55:6a:15:b6:7e:ca:46:a5:f4:16:ef:1c:3c:d4:b8:71:bc: dd:9a:8c:5d:04:c9:e0:30:bb:2d:2e:a2:47:34:eb:59:d9:ea: 4d:ca:90:3a:6d:5c:94:6e:f4:e8:0d:0c:b3:4b:9b:6b:32:6c: d4:aa:14:63:cd:86:fc:09:87:43:ef:fd:ce:4e:5e:2a:29:a0: fc:cf:73:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7ywoJUXFUBmVcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YmUyNzc0YzctZmNiNS00OTY1LTk2YzEtN2NmMWNiYWVhN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bB/Nl8Gs6oI65Nv7TcdW2Om4+UACvrOvy6s 4XLVcd/EN1OIPgjG+6rOtIYJsJyedVmWCStu2wlbcC+UBZfJRardom4M8R0ue78J jZ2YPLHSHkKBOq0m51apcWMBwHEEwCNsTjsHzjc9YbNhXh/bklwtE4ZCsOGq6WlU HC0pJq4hb5JF6OibUKQ6YXkMhzvN9P0y7kXnT8xDm8fdOLcOBxtsopVsMIyqra2f phji9P2goJwI+bkmzHFr8fbFMkP8Mam29/J8npsRUG+AXMK/9XdhSdw340WiExEJ DcMbjJ3NOxkWRKnKb3Jf2JWCsF1wIAEH+P7BY1coTtdmjCCQ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLaL4N4p71HcYG0rKWr3XjtCuFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvNjBjYWY4ZjktNTA1MS0z ZDgyLThlMDAtMjk3ODQ0YjhkYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+fSMLsxYNXCUmhKsta3xVf+x2HmC09rPau0Q8/1mLBdEqp3s/gORXn +tFBVm8Dqr6q+WDvakC6TKk9Ejkb0JUXVjA0x/832bB1j7DQtgh1iWZggoA0tj3e 4yIZuycrx2T202TZ/2xIwhLY5XBa+2UF5+/7gTfurFdwXn2ivh19cW178D0y80wP U+lcA6QgZ8kemFbv8cGDiWsvg8nn76IskM7BmSRpU/cw8Bs/BDuL1I/GzK9VahW2 fspGpfQW7xw81LhxvN2ajF0EyeAwuy0uokc061nZ6k3KkDptXJRu9OgNDLNLm2sy bNSqFGPNhvwJh0Pv/c5OXiopoPzPcwM= -----END CERTIFICATE-----Generated at Fri Jul 24 08:58:32 2026 by rpki-client