$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa File: 60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa (raw, json) Hash identifier: oa7qAlL7pCLsLu+uawqD8WNp1xN2ZpxZ2ieUt7OdhcU= Subject key identifier: 92:4F:7E:F7:1C:81:D9:00:92:51:41:A8:B0:F5:2C:B4:2D:97:FE:80 Certificate issuer: /CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7 Certificate serial: 010D0C9F4328584F5E62E42B15B14C358C5B4290 Authority key identifier: 91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 14618 IP address blocks: 172.99.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e4:2b:15:b1:4c:35:8c:5b:42:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=a897e106-d1f7-4489-a572-114f50cc249d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:c3:6e:05:91:d3:d8:3b:59:a6:f2:e2:ed: b8:44:fe:40:7a:a1:56:b4:62:cd:36:e5:a8:ac:54: 37:86:6d:19:68:a9:62:48:d4:f8:e2:7b:06:a8:49: 43:88:e0:19:1a:13:62:f3:6f:9f:75:be:66:fb:cf: cb:1f:07:6a:21:31:ea:75:a7:96:b9:72:be:9f:f9: ba:fd:33:47:4e:35:37:47:7f:83:d9:cb:ff:77:3d: af:b6:23:06:60:be:1b:75:59:37:36:b8:ad:86:f9: e0:c0:dc:91:71:1c:61:0e:77:40:17:cd:fe:c3:39: a3:de:08:3c:7f:07:e9:56:0f:8b:1d:ed:1c:b2:23: 98:a4:da:91:2b:84:52:6d:2a:e2:51:45:bf:3f:b9: 30:7e:72:9e:05:1d:74:82:7d:99:a5:01:af:e8:2f: 91:34:7d:c3:e5:98:39:3f:07:99:08:43:ed:9e:a3: e5:72:fa:17:7c:70:21:14:22:ae:ca:87:5e:61:cd: 0f:58:04:24:41:65:8e:bc:b8:96:01:c9:da:db:90: ee:86:31:18:c6:73:44:7e:48:78:42:80:f5:f6:03: bb:23:21:a0:c3:83:3f:71:4b:d9:57:3b:5f:2a:19: 1c:a2:fb:2e:c2:a0:25:40:ba:39:2f:18:6d:f0:e6: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4F:7E:F7:1C:81:D9:00:92:51:41:A8:B0:F5:2C:B4:2D:97:FE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl X509v3 Authority Key Identifier: keyid:91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer sbgp-ipAddrBlock: critical IPv4: 172.99.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:40:82:a3:c2:41:96:39:78:6a:05:35:32:e1:c3:0b:1a:94: b7:a6:e4:ec:44:4b:c1:f0:bd:5d:c9:10:4d:0e:92:de:97:32: 63:52:6c:32:e5:62:3d:32:00:61:a9:e6:6a:5b:3d:4e:04:ed: da:b4:8b:e8:19:3a:7a:9e:01:be:07:d9:6b:dd:90:bd:5d:23: a2:48:99:a9:d0:ae:44:ab:f7:bf:f4:f9:d9:55:9d:c4:ca:96: e7:78:e8:e4:ba:04:f9:61:27:fe:75:d2:f7:68:71:4e:63:6b: b8:36:13:09:65:29:61:5a:a8:74:d3:a2:09:e5:22:04:44:5d: 38:82:18:32:af:07:57:fb:4f:27:fd:72:d2:56:ef:f8:04:63: 92:2d:1c:ef:72:c3:39:46:63:26:27:1e:78:89:9f:61:34:d9: bb:f1:af:22:b7:77:b8:8a:8d:51:9d:ed:f1:51:ba:9a:2a:60: a0:98:2d:56:bb:7a:99:ef:8b:01:0f:4a:e0:d6:1a:e4:cb:27: fb:e1:f1:73:35:49:ac:79:e7:9d:c0:92:30:ee:bf:a8:a9:4c: 5d:25:81:aa:a0:d5:60:17:d7:a8:d5:36:c1:fa:e8:e0:72:3c: c7:2b:ba:fc:c1:18:79:e5:fe:2f:f0:75:66:ad:fc:c7:13:12: 5f:b4:fd:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuQrFbFMNYxbQpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY0ZGQ2MTUtNWE5ZS00MDU3LTk4ZDItYzA2OWRkMTZm NGY3MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YTg5N2UxMDYtZDFmNy00NDg5LWE1NzItMTE0ZjUwY2MyNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgnDbgWR09g7Waby4u24RP5AeqFWtGLNNuWo rFQ3hm0ZaKliSNT44nsGqElDiOAZGhNi82+fdb5m+8/LHwdqITHqdaeWuXK+n/m6 /TNHTjU3R3+D2cv/dz2vtiMGYL4bdVk3NrithvngwNyRcRxhDndAF83+wzmj3gg8 fwfpVg+LHe0csiOYpNqRK4RSbSriUUW/P7kwfnKeBR10gn2ZpQGv6C+RNH3D5Zg5 PweZCEPtnqPlcvoXfHAhFCKuyodeYc0PWAQkQWWOvLiWAcna25DuhjEYxnNEfkh4 QoD19gO7IyGgw4M/cUvZVztfKhkcovsuwqAlQLo5Lxht8ObxKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJPfvccgdkAklFBqLD1LLQtl/6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjRk ZDYxNS01YTllLTQwNTctOThkMi1jMDY5ZGQxNmY0ZjcvNjBjYTk1ZTctMjk3NS0z YjA5LWI4ZWUtY2ViM2QxZGY5MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmY0ZGQ2MTUtNWE5ZS00MDU3LTk4 ZDItYzA2OWRkMTZmNGY3LzJmNGRkNjE1LTVhOWUtNDA1Ny05OGQyLWMwNjlkZDE2 ZjRmNy5jcmwwHwYDVR0jBBgwFoAUkRmv7ICfXyFIlKG3jeZh5Yt4wdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjRkZDYxNS01YTllLTQwNTctOThkMi1jMDY5 ZGQxNmY0ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFAgqPCQZY5eGoFNTLhwwsalLem5OxES8HwvV3JEE0Okt6XMmNSbDLl Yj0yAGGp5mpbPU4E7dq0i+gZOnqeAb4H2WvdkL1dI6JImanQrkSr97/0+dlVncTK lud46OS6BPlhJ/510vdocU5ja7g2EwllKWFaqHTTognlIgREXTiCGDKvB1f7Tyf9 ctJW7/gEY5ItHO9ywzlGYyYnHniJn2E02bvxryK3d7iKjVGd7fFRupoqYKCYLVa7 epnviwEPSuDWGuTLJ/vh8XM1Sax5553AkjDuv6ipTF0lgaqg1WAX16jVNsH66OBy PMcruvzBGHnl/i/wdWat/McTEl+0/bs= -----END CERTIFICATE-----Generated at Wed Oct 7 04:28:47 2026 by rpki-client