$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/0fbd2e0a-c9fe-3211-993b-520d6785da76.roa File: 0fbd2e0a-c9fe-3211-993b-520d6785da76.roa (raw, json) Hash identifier: WB8jhB5j0UVMp3suqvOgDiTYLXR0I8y66MPeYfoA8cU= Subject key identifier: 61:2E:CB:D8:0C:FA:15:AD:C6:46:4E:E1:15:84:4A:30:7A:8F:D0:37 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F4AD7E109A9DB641F1336CB00 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/0fbd2e0a-c9fe-3211-993b-520d6785da76.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 16740 IP address blocks: 69.60.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:e1:09:a9:db:64:1f:13:36:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=b9d21daf-3ba0-4f78-9734-ba0f7a8f67a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:94:ba:9f:fd:7d:6e:d6:f7:cf:00:74:08:38: 46:9f:31:24:3a:9a:f2:60:e7:2d:92:7b:32:4d:fc: c0:fb:03:f5:11:75:5d:ee:4c:f7:6f:bd:aa:53:17: 76:49:85:a1:5d:1a:40:6d:93:b3:2c:04:50:c4:f5: ec:cc:89:e2:07:7a:ce:d2:25:18:29:a7:0f:b9:e7: 8a:72:29:3c:9c:9b:f8:3b:d1:a8:86:1f:5c:97:34: 2c:6a:02:fc:aa:92:d3:d3:d2:5e:03:5d:f1:43:98: 97:f8:07:3d:19:10:36:f3:19:da:48:13:cc:58:05: 1f:8a:17:7e:30:6b:65:06:b7:39:0d:a4:ce:bf:82: 56:3b:41:a2:54:e7:18:12:0d:67:e6:1e:54:0e:0a: 42:9f:ce:74:e2:26:ad:27:05:91:1e:b3:44:e9:84: 88:d2:82:a1:e2:29:8d:bc:75:96:32:06:de:aa:4c: 6b:72:c8:e8:86:55:0b:4d:6a:ec:3f:4a:ef:dc:17: f2:20:fd:2e:77:bf:72:95:28:9a:83:44:5d:66:ea: 0b:02:3d:67:3f:62:e2:64:0f:86:ba:ea:69:ff:fe: cf:19:72:6e:73:8a:9d:18:85:1d:48:80:0c:3d:a2: b5:06:c5:06:85:48:e6:46:bb:d9:6f:2e:12:60:d3: 5f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2E:CB:D8:0C:FA:15:AD:C6:46:4E:E1:15:84:4A:30:7A:8F:D0:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/0fbd2e0a-c9fe-3211-993b-520d6785da76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 69.60.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ee:fc:4a:27:66:d8:ca:7e:d2:8a:7d:6a:17:e6:c6:b0:b4: bd:11:bf:73:22:23:39:63:0b:af:49:b8:32:dc:72:45:18:a2: 9c:75:4b:0f:27:aa:23:91:93:24:21:c3:bd:98:e1:39:5c:88: 52:71:cd:99:3c:9b:f4:0b:12:7d:a5:59:42:1c:05:f8:49:ec: 8f:f9:91:fe:27:d2:ee:62:c6:db:e9:d5:bd:a6:3c:82:78:b5: b9:f4:6a:53:4d:67:0b:cb:91:9a:b4:a3:89:8d:2b:ca:0a:64: ee:fe:71:a4:11:29:d7:f9:25:66:db:b5:d1:b8:d8:19:10:42: 5e:70:be:b7:9a:7e:02:a8:a8:cf:73:3f:2a:92:1f:7f:4c:2c: d2:9f:c0:9d:1e:ef:35:2b:f3:b7:f0:b6:01:ff:07:01:f4:e2: ae:a6:8d:88:cd:20:f0:fc:58:76:da:c6:5e:5c:ba:68:cb:6d: 9e:c4:e3:58:64:a4:ce:32:53:5c:dd:f8:70:a9:1f:f4:85:9c: e1:25:fe:38:84:bd:ae:2b:07:71:ef:e1:a1:70:33:d7:b3:71: 3d:c8:d4:8d:9b:36:05:c1:a8:b0:bf:d5:71:8d:0e:44:68:84: a4:e3:f1:d6:be:9e:ba:d3:12:c7:c2:3b:17:ed:cc:69:c7:37: 62:46:7d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1+EJqdtkHxM2ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk YjlkMjFkYWYtM2JhMC00Zjc4LTk3MzQtYmEwZjdhOGY2N2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pS6n/19btb3zwB0CDhGnzEkOpryYOctknsy TfzA+wP1EXVd7kz3b72qUxd2SYWhXRpAbZOzLARQxPXszIniB3rO0iUYKacPueeK cik8nJv4O9Gohh9clzQsagL8qpLT09JeA13xQ5iX+Ac9GRA28xnaSBPMWAUfihd+ MGtlBrc5DaTOv4JWO0GiVOcYEg1n5h5UDgpCn8504iatJwWRHrNE6YSI0oKh4imN vHWWMgbeqkxrcsjohlULTWrsP0rv3BfyIP0ud79ylSiag0RdZuoLAj1nP2LiZA+G uupp//7PGXJuc4qdGIUdSIAMPaK1BsUGhUjmRrvZby4SYNNf4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEuy9gM+hWtxkZO4RWESjB6j9A3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMGZiZDJlMGEtYzlmZS0z MjExLTk5M2ItNTIwZDY3ODVkYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvu/EonZtjKftKKfWoX5sawtL0Rv3MiIzljC69JuDLcckUYopx1Sw8n qiORkyQhw72Y4TlciFJxzZk8m/QLEn2lWUIcBfhJ7I/5kf4n0u5ixtvp1b2mPIJ4 tbn0alNNZwvLkZq0o4mNK8oKZO7+caQRKdf5JWbbtdG42BkQQl5wvreafgKoqM9z PyqSH39MLNKfwJ0e7zUr87fwtgH/BwH04q6mjYjNIPD8WHbaxl5cumjLbZ7E41hk pM4yU1zd+HCpH/SFnOEl/jiEva4rB3Hv4aFwM9ezcT3I1I2bNgXBqLC/1XGNDkRo hKTj8da+nrrTEsfCOxftzGnHN2JGfQg= -----END CERTIFICATE-----Generated at Mon Oct 5 16:57:45 2026 by rpki-client