$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa File: 4df6fcae-809c-334c-948c-a1db49d80779.roa (raw, json) Hash identifier: 0YjFn6VWfzfGislVQdOpUre78TmksSmj38Zl8zdSggc= Subject key identifier: EC:6F:C1:E2:0A:A3:20:A2:F0:5B:1D:3C:A6:4F:AB:18:12:57:BD:58 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F4328584E9A7FD5E4127ECB8A77DBD700 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 62952 IP address blocks: 172.82.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:d5:e4:12:7e:cb:8a:77:db:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=0b5dc82b-ddc6-4e25-aba8-203e33e6d0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:a3:77:9e:d2:41:5c:71:d5:58:61:44:9d: b9:af:e3:17:22:fb:5c:42:c2:2e:4f:1e:e8:94:43: e4:40:f3:57:80:8e:a1:57:0e:d2:08:13:b7:15:f2: 76:51:2f:1d:fe:8d:8b:9a:6b:3d:55:4d:5a:cf:bb: b2:65:0d:d2:6a:f3:81:eb:fa:01:6d:0d:db:43:05: d9:30:ac:a1:1d:b3:a0:0f:43:33:71:a1:d3:d6:f0: 51:6d:a3:d1:f2:05:b7:d9:05:4b:12:b5:5d:43:c5: 81:c6:62:d3:68:93:ad:05:f5:33:91:32:fe:a9:b5: 7b:6d:0f:06:ce:1f:b6:0d:99:31:08:1a:35:01:50: 86:00:03:37:0c:a8:d5:77:58:94:fa:b8:11:a2:f8: 0c:19:dc:99:58:bf:af:7d:3e:fa:4e:57:2c:90:33: 79:cf:b9:93:df:35:84:8d:b7:8d:2d:73:11:9b:c9: 6a:d4:83:37:0f:42:41:85:ab:06:67:d8:5e:4a:31: ee:18:6a:10:59:3b:70:10:dc:4d:66:98:3e:b6:71: e0:f5:3b:b4:bf:c9:b3:af:68:e4:08:fc:73:8c:d6: 50:b7:7b:86:d5:a3:97:08:c1:0f:c2:5b:c8:fb:3c: ce:cc:7c:fe:92:36:b8:c5:22:81:b0:3f:98:2c:7c: 23:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6F:C1:E2:0A:A3:20:A2:F0:5B:1D:3C:A6:4F:AB:18:12:57:BD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: 172.82.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:62:c2:5b:57:88:58:c5:f5:9c:1f:96:e4:41:98:5c:be:ed: ba:fc:b8:e9:0f:c3:1c:55:3e:61:a7:46:90:59:df:44:60:da: 50:9f:ef:1a:92:9c:47:c2:c8:d7:51:72:47:9a:10:89:66:11: 47:ec:96:30:75:55:c9:67:d4:61:11:1c:42:ad:3c:16:d1:30: 65:15:b7:6a:81:dc:05:30:f7:e3:f2:ab:89:ee:23:c5:e8:5c: f3:d3:1e:e8:e7:20:74:63:34:7e:8c:77:2e:01:c8:6d:bc:42: f3:82:03:4e:98:0b:c0:8f:c4:71:61:37:29:f5:b1:eb:06:2c: 2f:a2:71:7e:38:40:b8:bc:ee:2d:db:74:87:4b:3e:f6:6b:f6: 88:b1:27:c4:69:8a:05:cb:30:a9:02:3d:94:a7:0f:a5:be:37: 06:29:b2:3f:f6:2f:73:be:4d:20:20:d1:21:88:74:db:65:43: 4c:82:66:61:5d:e9:8b:29:99:45:05:02:3d:08:cb:4b:d2:ab: 23:2b:85:a2:91:22:5d:e7:c7:52:a5:98:4b:97:cf:98:92:73: 85:9f:80:33:24:f8:44:ea:d0:76:51:80:6f:29:84:b3:8f:2b: ef:22:6d:b7:de:93:98:9f:35:6a:c0:63:7c:90:c2:f5:11:7c: 14:3a:14:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9XkEn7Linfb1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MGI1ZGM4MmItZGRjNi00ZTI1LWFiYTgtMjAzZTMzZTZkMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlOjd57SQVxx1VhhRJ25r+MXIvtcQsIuTx7o lEPkQPNXgI6hVw7SCBO3FfJ2US8d/o2Lmms9VU1az7uyZQ3SavOB6/oBbQ3bQwXZ MKyhHbOgD0MzcaHT1vBRbaPR8gW32QVLErVdQ8WBxmLTaJOtBfUzkTL+qbV7bQ8G zh+2DZkxCBo1AVCGAAM3DKjVd1iU+rgRovgMGdyZWL+vfT76TlcskDN5z7mT3zWE jbeNLXMRm8lq1IM3D0JBhasGZ9heSjHuGGoQWTtwENxNZpg+tnHg9Tu0v8mzr2jk CPxzjNZQt3uG1aOXCMEPwlvI+zzOzHz+kja4xSKBsD+YLHwjvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxvweIKoyCi8FsdPKZPqxgSV71YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvNGRmNmZjYWUtODA5Yy0z MzRjLTk0OGMtYTFkYjQ5ZDgwNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFiwltXiFjF9ZwfluRBmFy+7br8uOkPwxxVPmGnRpBZ30Rg2lCf7xqS nEfCyNdRckeaEIlmEUfsljB1Vcln1GERHEKtPBbRMGUVt2qB3AUw9+Pyq4nuI8Xo XPPTHujnIHRjNH6Mdy4ByG28QvOCA06YC8CPxHFhNyn1sesGLC+icX44QLi87i3b dIdLPvZr9oixJ8RpigXLMKkCPZSnD6W+NwYpsj/2L3O+TSAg0SGIdNtlQ0yCZmFd 6YspmUUFAj0Iy0vSqyMrhaKRIl3nx1KlmEuXz5iSc4WfgDMk+ETq0HZRgG8phLOP K+8ibbfek5ifNWrAY3yQwvURfBQ6FE0= -----END CERTIFICATE-----Generated at Sat Aug 1 11:40:27 2026 by rpki-client