$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/00609a35-bead-30ca-9315-4eb627491d30.roa File: 00609a35-bead-30ca-9315-4eb627491d30.roa (raw, json) Hash identifier: 8QUTpLmTQh9Jwm1wacLjEnGOpIXA5jAOxOsFvM0vHMI= Subject key identifier: D7:E9:CF:69:31:2A:43:C4:03:C4:70:F0:91:65:CF:86:95:98:8C:F8 Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Certificate serial: 010D0C9F4328584F02421D9C7112AB757F487480 Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/00609a35-bead-30ca-9315-4eb627491d30.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 20326 IP address blocks: 67.209.52.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:1d:9c:71:12:ab:75:7f:48:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=3c009128-984b-4c75-8db3-8b2f236765e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:33:59:a7:53:13:aa:60:ed:fd:86:f4:c5: 3a:58:bd:eb:ae:25:7d:cb:b1:69:74:2e:55:b4:28: 01:16:dd:08:27:c5:5d:cc:47:0b:aa:1f:5a:9e:81: e4:19:4f:e3:8d:e8:18:62:46:8f:d7:b0:a9:37:c5: 8c:27:5d:44:8d:dc:31:de:79:03:2f:55:90:2d:03: 84:93:37:52:5e:ac:85:ae:25:23:3e:f4:c9:f4:a5: 91:76:86:b1:33:51:51:0a:da:05:36:d2:95:c7:b2: 72:0b:a2:cd:f5:e7:5c:08:d0:99:38:1b:a0:0e:f9: cd:34:42:b8:c2:a9:be:aa:f3:b5:89:ad:b6:e8:75: 20:76:dd:7b:07:e7:37:de:4e:49:8e:fe:87:a4:d4: 08:56:51:51:7c:23:56:02:54:cc:51:61:15:8c:ec: 74:1b:78:c3:d4:8b:07:b0:f1:2a:22:1f:01:33:19: fa:97:3a:3a:11:ca:85:10:26:ec:19:e8:f9:63:06: 14:28:66:ea:43:2d:13:ec:b8:8f:fe:8b:fc:ac:75: e8:03:dc:e7:4e:40:fc:9c:49:72:01:b2:ad:95:b4: 88:68:53:0e:19:66:20:c1:78:8a:83:89:8b:cd:ee: 15:81:25:aa:58:09:f1:6b:cf:54:f2:9b:de:31:92: 94:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E9:CF:69:31:2A:43:C4:03:C4:70:F0:91:65:CF:86:95:98:8C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/00609a35-bead-30ca-9315-4eb627491d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl X509v3 Authority Key Identifier: keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer sbgp-ipAddrBlock: critical IPv4: 67.209.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ef:81:5f:e6:6e:ea:1d:15:d8:a0:af:01:a2:dd:b6:f5:1d: 4f:d0:24:71:3e:07:18:e5:a5:79:83:da:1a:f6:f0:89:d3:93: 95:af:e5:1c:00:fc:08:8b:74:4f:ec:50:47:d7:09:c7:2b:2f: c3:6b:d7:e7:ee:05:06:98:b2:03:f5:a8:5a:de:dc:f2:f3:de: 64:82:1d:0b:09:7d:0c:53:60:c2:d9:bd:2b:ec:74:60:7b:a2: e7:04:a3:42:af:ed:9b:64:8c:4e:79:3b:87:27:87:ff:1a:1e: 8c:53:ed:e5:42:b5:6c:05:54:06:64:18:b2:2d:fb:ac:13:be: 12:a7:00:97:e4:50:d6:fb:fd:a5:45:d0:48:fd:aa:19:40:ee: 75:08:4f:75:fc:9a:cd:74:0a:ea:b7:36:1a:10:4a:c2:a3:7c: 53:8b:da:be:82:ce:60:01:77:c2:6e:0d:d0:62:d6:25:d9:87: 18:05:8a:64:86:1c:98:a1:0a:f7:a2:47:e1:3b:a5:d6:3b:90: a1:16:41:7f:11:70:98:01:2a:cb:a8:90:31:0a:7c:5c:b6:ac: e0:d3:0f:f2:b8:18:c5:36:77:98:b8:bc:20:1f:9f:d4:0d:45: eb:85:0a:36:71:41:2d:43:66:5c:0d:1a:12:05:b2:e3:99:18: 0c:01:2b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQh2ccRKrdX9IdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwYjRjMzgtMmNhNi00ZWRkLTgwZWYtMTE3M2E4ZDdl Zjg2MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk M2MwMDkxMjgtOTg0Yi00Yzc1LThkYjMtOGIyZjIzNjc2NWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13EzWadTE6pg7f2G9MU6WL3rriV9y7FpdC5V tCgBFt0IJ8VdzEcLqh9anoHkGU/jjegYYkaP17CpN8WMJ11Ejdwx3nkDL1WQLQOE kzdSXqyFriUjPvTJ9KWRdoaxM1FRCtoFNtKVx7JyC6LN9edcCNCZOBugDvnNNEK4 wqm+qvO1ia226HUgdt17B+c33k5Jjv6HpNQIVlFRfCNWAlTMUWEVjOx0G3jD1IsH sPEqIh8BMxn6lzo6EcqFECbsGej5YwYUKGbqQy0T7LiP/ov8rHXoA9znTkD8nEly AbKtlbSIaFMOGWYgwXiKg4mLze4VgSWqWAnxa89U8pveMZKUnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfpz2kxKkPEA8Rw8JFlz4aVmIz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NjBi NGMzOC0yY2E2LTRlZGQtODBlZi0xMTczYThkN2VmODYvMDA2MDlhMzUtYmVhZC0z MGNhLTkzMTUtNGViNjI3NDkxZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODYwYjRjMzgtMmNhNi00ZWRkLTgw ZWYtMTE3M2E4ZDdlZjg2Lzg2MGI0YzM4LTJjYTYtNGVkZC04MGVmLTExNzNhOGQ3 ZWY4Ni5jcmwwHwYDVR0jBBgwFoAUnBoKe0BtQfxOmXCKeMmGhJl8eI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NjBiNGMzOC0yY2E2LTRlZGQtODBlZi0xMTcz YThkN2VmODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9E0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzvgV/mbuodFdigrwGi3bb1HU/QJHE+BxjlpXmD2hr28InTk5Wv5RwA /AiLdE/sUEfXCccrL8Nr1+fuBQaYsgP1qFre3PLz3mSCHQsJfQxTYMLZvSvsdGB7 oucEo0Kv7ZtkjE55O4cnh/8aHoxT7eVCtWwFVAZkGLIt+6wTvhKnAJfkUNb7/aVF 0Ej9qhlA7nUIT3X8ms10Cuq3NhoQSsKjfFOL2r6CzmABd8JuDdBi1iXZhxgFimSG HJihCveiR+E7pdY7kKEWQX8RcJgBKsuokDEKfFy2rODTD/K4GMU2d5i4vCAfn9QN ReuFCjZxQS1DZlwNGhIFsuOZGAwBK5g= -----END CERTIFICATE-----Generated at Tue Sep 1 03:04:13 2026 by rpki-client