$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/a60b8393-dcf0-3143-9504-a57ccd62828a.roa File: a60b8393-dcf0-3143-9504-a57ccd62828a.roa (raw, json) Hash identifier: tYj8Yi0ne9omZzFoVg2tMmyUa7SlF/2LkvXHuRMVDsE= Subject key identifier: 68:0A:1B:CC:82:D5:4C:34:E8:EA:0D:10:6F:04:8C:CF:44:04:F1:09 Certificate issuer: /CN=c25a8f2d-f070-4a47-a89b-ee2b1501bba4 Certificate serial: 010D0C9F4328584F04036738CCFC4AFCA7B199C0 Authority key identifier: 4A:B0:B9:67:9C:BF:A6:DA:EE:F6:28:03:76:F7:68:D2:DF:C9:E3:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/a60b8393-dcf0-3143-9504-a57ccd62828a.roa Signing time: Mon 31 Aug 2026 04:05:32 +0000 ROA not before: Mon 31 Aug 2026 04:05:32 +0000 ROA not after: Sun 29 Nov 2026 05:05:32 +0000 asID: 13886 IP address blocks: 198.101.8.0/24 maxlen: 24 198.101.9.0/24 maxlen: 24 198.101.10.0/24 maxlen: 24 198.101.11.0/24 maxlen: 24 198.101.12.0/24 maxlen: 24 198.101.13.0/24 maxlen: 24 198.101.14.0/24 maxlen: 24 198.101.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:04:03:67:38:cc:fc:4a:fc:a7:b1:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25a8f2d-f070-4a47-a89b-ee2b1501bba4 Validity Not Before: Aug 31 04:05:32 2026 GMT Not After : Nov 29 05:05:32 2026 GMT Subject: CN=76056f6c-d75c-4d49-9b38-e237e3493846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:71:61:b0:cb:e4:de:7f:8d:41:35:0e:e2:b0: 0f:a4:be:cc:5c:cf:52:0a:2d:19:da:94:89:4f:f9: 28:b8:1d:5f:e7:4f:d5:a1:83:aa:c5:c4:f2:63:e7: 1d:29:05:90:ff:14:d4:ff:e4:23:61:f6:97:e7:9f: 48:6a:5e:49:6e:a0:d8:21:cb:08:9a:2e:88:66:34: 43:2c:c3:d1:c6:a7:53:40:0f:8e:5d:8b:8a:96:18: 78:1d:8d:72:62:51:8c:fc:bf:f0:d2:bd:c4:4c:82: 1d:7c:10:a4:1f:ec:47:2a:81:ef:c1:e6:9b:36:39: dc:f2:5d:77:74:e4:e9:54:2e:37:60:b9:7a:5b:35: 5d:93:3f:0e:fb:c8:32:9e:dc:17:3b:0e:28:50:84: 5a:58:c4:5b:cf:0f:ce:1b:58:07:3b:c8:dc:2f:06: c8:a2:45:50:59:3a:f5:6a:a3:23:a9:6b:55:e6:d0: 0c:f2:ec:31:6f:00:65:33:e6:f0:50:85:e7:b9:bb: b7:be:b4:52:46:12:72:b7:71:b3:d0:d5:47:c0:b2: 6a:d8:7a:52:ad:14:8f:44:19:c3:80:72:89:12:fe: 1b:17:3a:71:a9:3f:eb:06:72:4e:1e:66:3e:60:21: bb:20:c9:0d:6c:50:e0:da:26:fb:9c:d2:22:4d:8c: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:1B:CC:82:D5:4C:34:E8:EA:0D:10:6F:04:8C:CF:44:04:F1:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/a60b8393-dcf0-3143-9504-a57ccd62828a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.crl X509v3 Authority Key Identifier: keyid:4A:B0:B9:67:9C:BF:A6:DA:EE:F6:28:03:76:F7:68:D2:DF:C9:E3:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.cer sbgp-ipAddrBlock: critical IPv4: 198.101.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:3f:91:ba:04:d0:0d:22:4e:bc:3f:86:e5:a0:87:8e:03:6a: 5e:98:1b:18:ec:15:1a:e7:25:0f:55:09:88:e5:5f:aa:7f:04: a4:f3:3f:6f:dd:5a:e7:31:9f:35:56:34:72:23:dc:18:01:20: c8:29:e2:a2:f8:66:fd:07:f7:eb:51:fa:b8:80:e5:ba:1e:bc: 86:d4:d3:57:38:b5:d4:46:83:ad:dc:f2:cd:e6:e2:94:5c:c8: 6e:44:f3:af:e7:0d:eb:68:bd:ca:9b:bb:b2:9d:b6:fa:8e:94: a2:dc:97:81:0f:ff:ef:4a:bc:3d:40:23:94:2d:2a:55:2e:af: e8:a7:13:4d:4d:ef:4b:5b:48:28:69:67:d6:4c:d8:15:43:47: bd:6a:a7:55:90:01:86:92:83:c6:2f:55:30:0e:31:da:cf:35: 4c:81:49:5f:4b:5b:e7:c0:1c:8e:d7:4a:8c:67:02:50:16:d6: 8b:e0:ba:86:f9:3d:06:4b:e0:56:87:02:cf:1c:92:48:96:7e: 41:b3:20:2c:1e:43:10:18:ad:df:22:cc:e4:44:b6:1d:3b:9b: cc:16:62:5f:68:c5:6c:58:86:0f:a0:7a:84:ed:e1:2f:28:00: 26:f8:b2:fd:55:7f:ef:12:3b:6d:b4:59:7b:5b:24:ae:ad:28: 6d:1f:50:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8EA2c4zPxK/KexmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI1YThmMmQtZjA3MC00YTQ3LWE4OWItZWUyYjE1MDFi YmE0MB4XDTI2MDgzMTA0MDUzMloXDTI2MTEyOTA1MDUzMlowLzEtMCsGA1UEAxMk NzYwNTZmNmMtZDc1Yy00ZDQ5LTliMzgtZTIzN2UzNDkzODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXFhsMvk3n+NQTUO4rAPpL7MXM9SCi0Z2pSJ T/kouB1f50/VoYOqxcTyY+cdKQWQ/xTU/+QjYfaX559Ial5JbqDYIcsImi6IZjRD LMPRxqdTQA+OXYuKlhh4HY1yYlGM/L/w0r3ETIIdfBCkH+xHKoHvweabNjnc8l13 dOTpVC43YLl6WzVdkz8O+8gyntwXOw4oUIRaWMRbzw/OG1gHO8jcLwbIokVQWTr1 aqMjqWtV5tAM8uwxbwBlM+bwUIXnubu3vrRSRhJyt3Gz0NVHwLJq2HpSrRSPRBnD gHKJEv4bFzpxqT/rBnJOHmY+YCG7IMkNbFDg2ib7nNIiTYzDXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgKG8yC1Uw06OoNEG8EjM9EBPEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jMjVh OGYyZC1mMDcwLTRhNDctYTg5Yi1lZTJiMTUwMWJiYTQvYTYwYjgzOTMtZGNmMC0z MTQzLTk1MDQtYTU3Y2NkNjI4MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYzI1YThmMmQtZjA3MC00YTQ3LWE4 OWItZWUyYjE1MDFiYmE0L2MyNWE4ZjJkLWYwNzAtNGE0Ny1hODliLWVlMmIxNTAx YmJhNC5jcmwwHwYDVR0jBBgwFoAUSrC5Z5y/ptru9igDdvdo0t/J47UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9jMjVhOGYyZC1mMDcwLTRhNDctYTg5Yi1lZTJi MTUwMWJiYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACE/kboE0A0iTrw/huWgh44Dal6YGxjsFRrnJQ9VCYjlX6p/BKTzP2/d WucxnzVWNHIj3BgBIMgp4qL4Zv0H9+tR+riA5boevIbU01c4tdRGg63c8s3m4pRc yG5E86/nDetovcqbu7KdtvqOlKLcl4EP/+9KvD1AI5QtKlUur+inE01N70tbSChp Z9ZM2BVDR71qp1WQAYaSg8YvVTAOMdrPNUyBSV9LW+fAHI7XSoxnAlAW1ovguob5 PQZL4FaHAs8ckkiWfkGzICweQxAYrd8izOREth07m8wWYl9oxWxYhg+geoTt4S8o ACb4sv1Vf+8SO220WXtbJK6tKG0fUPk= -----END CERTIFICATE-----Generated at Thu Sep 10 21:55:33 2026 by rpki-client