$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa File: 60adbf7d-4503-31a4-a156-6bae4b601738.roa (raw, json) Hash identifier: sW84ATW1lWs21QIYop2N+rSgWvVjyo9g+cXRPQ2ZrI8= Subject key identifier: F2:A8:44:A5:7C:36:2F:D3:1C:90:B8:3F:B6:01:DA:5E:62:68:BD:66 Certificate issuer: /CN=c66b7cab-031d-4c4c-8595-19848efd3058 Certificate serial: 010D0C9F4328584F1467945A217B349A83E9EF80 Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 400339 IP address blocks: 147.136.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:94:5a:21:7b:34:9a:83:e9:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=7c69301c-3fc0-4c9e-adef-d78b0c44d155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:28:c0:55:c6:e5:63:6a:bd:c3:40:77:9d: 81:d4:b4:7d:2a:15:f3:58:29:8a:30:66:10:80:5f: 3f:02:66:19:a7:9a:cd:b5:dc:28:34:20:42:5f:3d: c6:6b:d3:b3:28:29:6b:c4:b2:4f:27:38:36:e1:9c: 45:c9:f0:7b:21:9a:73:da:da:28:8e:61:94:aa:36: 27:87:6e:eb:8c:e8:2d:0c:41:9d:65:74:00:0e:c2: 8b:98:82:22:3d:40:2e:4f:37:57:72:fb:c8:2c:cd: b8:51:b8:c8:23:d2:21:42:f9:c9:a0:42:2d:92:4e: f8:2d:63:0c:f0:05:36:16:b0:5a:02:77:60:b9:e3: c0:67:19:38:9e:9b:16:e4:8b:cd:32:62:f8:47:18: a3:ba:00:ef:03:8d:e4:19:21:89:33:27:a6:2a:93: 47:82:40:20:bf:5e:48:c6:3e:53:7f:f5:c5:f6:5f: 97:c1:c7:14:68:7b:ab:db:68:63:e9:2b:8c:4d:d1: e1:16:e7:49:82:f1:a3:d8:d2:d6:aa:c2:b2:99:30: 37:de:0b:4b:ab:03:9b:07:da:9c:67:86:90:2e:96: b7:1f:a8:3d:40:bb:6c:71:1d:d8:68:92:c5:a6:1b: 70:6d:ba:8a:b9:55:ea:e0:c7:87:73:5f:83:36:90: 67:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A8:44:A5:7C:36:2F:D3:1C:90:B8:3F:B6:01:DA:5E:62:68:BD:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl X509v3 Authority Key Identifier: keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer sbgp-ipAddrBlock: critical IPv4: 147.136.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0a:51:52:85:26:6a:b2:7f:bd:a7:0c:b7:cd:66:68:87:7d: 45:cb:50:e8:86:87:f9:62:2c:9b:d9:29:8f:8c:30:d4:98:f2: 79:14:f4:ab:67:2f:85:ed:df:0f:6c:ed:c0:76:71:37:23:d7: f0:a2:80:07:8c:26:27:cf:e2:0e:49:f8:3d:4a:ca:68:cd:5d: 1c:af:f5:c9:ca:0e:28:3b:de:ee:11:b1:95:6e:e8:94:01:84: 1c:c6:a1:c5:aa:4f:05:4e:3b:ba:53:c0:10:27:46:b0:ed:7c: 94:22:a3:2e:c3:0f:56:6d:4d:af:05:03:0d:88:bd:ec:10:54: a1:af:d8:99:aa:76:e9:fa:22:b1:90:11:4e:17:78:2a:6b:ec: eb:5e:4d:21:fd:4f:84:ed:dc:99:e4:73:8c:76:8f:c8:b1:5e: b5:0b:56:ff:ca:31:6b:69:df:3d:15:d5:5d:83:87:12:ab:0c: 83:96:05:2e:43:fa:a9:6c:f4:dc:55:f9:d3:1f:2c:86:e5:25: 10:a6:20:81:31:86:97:97:89:45:c6:07:c8:62:48:ec:37:d8: 34:3f:b6:b4:de:7b:a2:f5:39:fd:8a:70:63:31:f3:c1:09:55: d0:64:f3:03:82:75:72:64:eb:cb:23:a5:96:87:47:a3:0f:b1: df:d2:42:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5RaIXs0moPp74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY2YjdjYWItMDMxZC00YzRjLTg1OTUtMTk4NDhlZmQz MDU4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk N2M2OTMwMWMtM2ZjMC00YzllLWFkZWYtZDc4YjBjNDRkMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaQowFXG5WNqvcNAd52B1LR9KhXzWCmKMGYQ gF8/AmYZp5rNtdwoNCBCXz3Ga9OzKClrxLJPJzg24ZxFyfB7IZpz2toojmGUqjYn h27rjOgtDEGdZXQADsKLmIIiPUAuTzdXcvvILM24UbjII9IhQvnJoEItkk74LWMM 8AU2FrBaAndguePAZxk4npsW5IvNMmL4RxijugDvA43kGSGJMyemKpNHgkAgv15I xj5Tf/XF9l+XwccUaHur22hj6SuMTdHhFudJgvGj2NLWqsKymTA33gtLqwObB9qc Z4aQLpa3H6g9QLtscR3YaJLFphtwbbqKuVXq4MeHc1+DNpBnfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKoRKV8Ni/THJC4P7YB2l5iaL1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZi N2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0OGVmZDMwNTgvNjBhZGJmN2QtNDUwMy0z MWE0LWExNTYtNmJhZTRiNjAxNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY2YjdjYWItMDMxZC00YzRjLTg1 OTUtMTk4NDhlZmQzMDU4L2M2NmI3Y2FiLTAzMWQtNGM0Yy04NTk1LTE5ODQ4ZWZk MzA1OC5jcmwwHwYDVR0jBBgwFoAUt8UCrE3muMdpydX2BPcapRRIdkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZiN2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0 OGVmZDMwNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk4jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUKUVKFJmqyf72nDLfNZmiHfUXLUOiGh/liLJvZKY+MMNSY8nkU9Ktn L4Xt3w9s7cB2cTcj1/CigAeMJifP4g5J+D1KymjNXRyv9cnKDig73u4RsZVu6JQB hBzGocWqTwVOO7pTwBAnRrDtfJQioy7DD1ZtTa8FAw2IvewQVKGv2Jmqdun6IrGQ EU4XeCpr7OteTSH9T4Tt3Jnkc4x2j8ixXrULVv/KMWtp3z0V1V2DhxKrDIOWBS5D +qls9NxV+dMfLIblJRCmIIExhpeXiUXGB8hiSOw32DQ/trTee6L1Of2KcGMx88EJ VdBk8wOCdXJk68sjpZaHR6MPsd/SQj8= -----END CERTIFICATE-----Generated at Sat Sep 19 21:33:16 2026 by rpki-client