$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa File: 060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa (raw, json) Hash identifier: u6q5LBamsCwbyLcit83fCZIDpXo9pCrZBhGt6J0dBJo= Subject key identifier: F4:44:EB:4B:15:F9:B6:1F:D0:47:FF:2A:60:32:C5:75:EB:28:A0:A7 Certificate issuer: /CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Certificate serial: 010D0C9F4328584F78E830E14888B99EEC34CA00 Authority key identifier: 3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 55189 IP address blocks: 192.132.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:30:e1:48:88:b9:9e:ec:34:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=2db7ce9e-f9e8-4bf8-a9cd-b40d5de11ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:19:65:d9:d5:4e:a3:a4:67:57:4e:26:80: 35:68:07:b4:cd:3c:58:18:bd:f4:64:ca:d3:5c:fe: e2:51:2a:18:9f:bd:96:59:fa:5d:7b:63:a2:1f:eb: 71:de:e2:db:dd:fe:99:d8:00:96:cd:77:08:33:80: a5:be:33:40:2c:16:f5:06:09:ff:52:db:cb:48:02: d0:98:9b:11:9f:d0:76:a4:25:6b:e4:0e:4f:c6:17: f9:3c:41:34:63:54:62:15:5d:6a:40:2b:df:2e:ff: 5e:1c:3e:ea:17:46:99:60:43:74:d9:7d:4c:9d:a7: ce:77:3a:fb:64:5a:97:ff:b1:56:33:8a:c8:52:8b: 6c:fb:48:04:d2:be:c1:d6:48:a7:8e:40:38:f3:93: c5:bb:6c:fa:b0:70:43:14:a6:9b:bb:3e:00:25:5e: 02:93:e9:71:f4:aa:2a:78:e7:56:4e:4b:80:bc:63: e1:bc:18:c8:38:25:98:1e:58:9b:ca:bc:81:78:4c: 55:53:a1:55:13:0d:f4:39:10:a9:9a:f5:47:9a:cb: 2e:07:e6:c6:e9:c6:5b:9b:94:66:b4:0d:d5:7b:a9: ca:7b:be:e5:20:fb:fa:3b:6e:0b:5d:01:96:b9:d7: 9b:55:69:b6:c8:97:db:f1:0c:22:a9:84:69:06:fe: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:44:EB:4B:15:F9:B6:1F:D0:47:FF:2A:60:32:C5:75:EB:28:A0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl X509v3 Authority Key Identifier: keyid:3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer sbgp-ipAddrBlock: critical IPv4: 192.132.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:a6:f9:e8:15:a3:14:bb:27:2f:62:b7:da:ba:39:c0:4b:0e: b7:5b:d6:c1:2a:8d:98:a8:ca:4c:b0:bb:4e:62:2d:39:06:08: 5b:9d:eb:8a:d6:46:12:8c:a5:ac:16:a1:6d:26:19:d2:29:75: 20:e1:5e:5a:e5:87:86:fe:22:3d:61:4f:82:1b:df:f6:36:ea: a7:a4:de:22:01:99:a4:5e:3a:a5:9c:82:af:bd:14:12:0d:e3: da:6d:6c:74:8a:a0:16:01:4c:d9:50:e6:a8:61:52:04:ee:26: 7e:c5:05:5f:82:ca:3c:c7:0b:09:20:f4:e1:08:2d:1f:54:a6: 65:f9:e1:f3:6e:7c:20:59:08:56:65:d1:a7:bc:76:0c:92:8d: 6f:29:c0:bd:1a:20:e1:b2:de:cf:e1:55:b3:05:1e:70:66:2c: 56:f0:3c:2d:38:7f:c1:f1:b9:19:16:87:5d:7a:cd:53:9f:7f: 74:95:d7:24:29:6f:62:7e:3a:a1:af:d5:3b:78:c3:b8:9b:e5: 12:61:c4:4c:b1:a8:87:4a:27:89:70:da:2a:76:ea:a9:e2:ca: e3:48:48:71:a8:be:66:0d:32:51:0a:8b:3c:61:b4:b3:e6:de: cb:7e:54:69:d2:fd:f5:90:29:ef:93:43:46:1a:5d:08:ba:ea: 12:14:73:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DDhSIi5nuw0ygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyZDMzNTktN2JjMi00YzNkLTljMzMtYzI1MDM0ZGJi MDQ5MB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk MmRiN2NlOWUtZjllOC00YmY4LWE5Y2QtYjQwZDVkZTExY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon4ZZdnVTqOkZ1dOJoA1aAe0zTxYGL30ZMrT XP7iUSoYn72WWfpde2OiH+tx3uLb3f6Z2ACWzXcIM4ClvjNALBb1Bgn/UtvLSALQ mJsRn9B2pCVr5A5Pxhf5PEE0Y1RiFV1qQCvfLv9eHD7qF0aZYEN02X1MnafOdzr7 ZFqX/7FWM4rIUots+0gE0r7B1kinjkA485PFu2z6sHBDFKabuz4AJV4Ck+lx9Koq eOdWTkuAvGPhvBjIOCWYHlibyryBeExVU6FVEw30ORCpmvVHmssuB+bG6cZbm5Rm tA3Ve6nKe77lIPv6O24LXQGWudebVWm2yJfb8QwiqYRpBv5bjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRE60sV+bYf0Ef/KmAyxXXrKKCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YzJk MzM1OS03YmMyLTRjM2QtOWMzMy1jMjUwMzRkYmIwNDkvMDYwZTA4NTktOWVlZi0z YWViLWEyZmQtZWNmMmUzNWNiMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWMyZDMzNTktN2JjMi00YzNkLTlj MzMtYzI1MDM0ZGJiMDQ5LzljMmQzMzU5LTdiYzItNGMzZC05YzMzLWMyNTAzNGRi YjA0OS5jcmwwHwYDVR0jBBgwFoAUPtpyMjtFHN6Dqd1yZILSGZmnI30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YzJkMzM1OS03YmMyLTRjM2QtOWMzMy1jMjUw MzRkYmIwNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIQeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCm+egVoxS7Jy9it9q6OcBLDrdb1sEqjZioykywu05iLTkGCFud64rW RhKMpawWoW0mGdIpdSDhXlrlh4b+Ij1hT4Ib3/Y26qek3iIBmaReOqWcgq+9FBIN 49ptbHSKoBYBTNlQ5qhhUgTuJn7FBV+CyjzHCwkg9OEILR9UpmX54fNufCBZCFZl 0ae8dgySjW8pwL0aIOGy3s/hVbMFHnBmLFbwPC04f8HxuRkWh116zVOff3SV1yQp b2J+OqGv1Tt4w7ib5RJhxEyxqIdKJ4lw2ip26qniyuNISHGovmYNMlEKizxhtLPm 3st+VGnS/fWQKe+TQ0YaXQi66hIUc68= -----END CERTIFICATE-----Generated at Sun Nov 1 03:22:20 2026 by rpki-client