$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4db88655-361a-31ba-8128-7250ca2e9e68.roa File: 4db88655-361a-31ba-8128-7250ca2e9e68.roa (raw, json) Hash identifier: WRnlgh8LpesDjVjHLvdhIrw/M/8qzH+GwFBb6bV96sg= Subject key identifier: 3B:2C:EA:C7:0B:14:49:79:FE:F5:F7:8A:70:6D:EE:A8:41:D1:28:8F Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F4AD7DF82C318A5826AC19880 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4db88655-361a-31ba-8128-7250ca2e9e68.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 16740 IP address blocks: 69.60.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:df:82:c3:18:a5:82:6a:c1:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=4b228004-42b8-478a-aa00-81fd97f99901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fd:17:8f:f2:94:f9:ee:f5:0e:fd:1e:e0:4e: 19:8b:ad:e4:18:17:dc:91:8f:f7:03:6a:50:04:df: 1b:eb:d6:c0:33:ec:fb:bd:35:97:7b:51:60:c4:11: f0:37:33:56:9d:fd:fd:a7:5d:98:95:c6:ee:27:5e: 62:e5:84:41:df:6d:61:69:e1:4a:23:9d:67:cd:dc: 76:34:ac:2f:dd:15:a1:ff:12:a4:fd:83:d3:73:23: 3a:63:5c:d4:e0:1f:be:00:9e:f1:7c:35:0e:9e:73: 9e:1a:78:1b:8c:99:70:12:e7:a9:76:92:81:f9:31: 67:22:b2:9b:02:22:d9:50:e1:3f:52:70:e9:ae:c9: 09:68:f2:fb:88:3e:b5:64:35:7d:a7:67:c8:de:27: b4:24:c7:fe:f7:73:1b:e5:52:95:23:52:1e:23:dc: 5f:6e:f7:75:a4:38:e1:97:d7:70:38:82:76:34:fd: 88:32:20:58:a8:fd:64:59:b2:85:59:dc:82:1c:bf: ea:84:2f:58:8f:eb:64:32:d7:4f:89:ca:51:76:42: e1:5c:72:5d:0f:c4:dd:83:5b:77:dc:11:27:1c:bc: eb:8e:9a:31:2c:62:26:17:fb:58:ee:b1:f9:2d:9b: 59:3c:7b:a3:26:d0:88:10:ff:eb:ae:b4:2b:d4:21: 18:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2C:EA:C7:0B:14:49:79:FE:F5:F7:8A:70:6D:EE:A8:41:D1:28:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4db88655-361a-31ba-8128-7250ca2e9e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 69.60.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:18:e8:88:67:f1:f4:ed:c9:c4:93:d3:96:66:d2:42:b2:de: f3:ed:81:e3:c7:46:35:de:4c:af:ee:f0:b3:8b:a6:2c:69:ca: f9:04:28:d2:64:a4:c7:14:0e:95:de:29:03:96:29:01:05:10: 95:e8:96:47:e2:d1:e6:ad:35:22:94:de:cf:2f:52:fc:00:eb: 12:08:0c:60:96:73:a0:2d:0b:54:66:c6:56:af:94:45:ab:2b: 9d:a5:73:3e:1d:8b:7c:34:11:1e:11:39:5e:f8:d4:a5:92:27: 9b:cc:b8:19:28:2a:18:58:1a:be:b5:da:a0:8b:32:76:dc:b0: cb:ae:a4:ee:e0:c0:df:ae:79:e2:f8:f6:eb:00:4d:95:5d:bc: 1d:44:8d:f6:8a:1c:0e:1d:3c:3a:4b:fb:df:f7:4a:37:ce:ed: 71:c9:69:f5:e2:35:55:57:4d:4a:5d:9c:92:8d:83:eb:25:f5: b4:9a:bf:3f:0d:8b:0e:4d:68:d4:ca:c0:7b:fd:ec:da:7e:04: 32:d3:93:2b:d6:2a:75:6d:f0:4a:ff:08:1f:26:e0:94:94:67: 8d:70:80:f0:71:5f:cf:63:3b:41:46:0b:df:ce:ab:c1:d9:e6: 51:58:d9:83:35:b6:31:48:e4:10:4a:ff:16:d0:13:f0:17:2e: 42:a7:63:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K19+CwxilgmrBmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk NGIyMjgwMDQtNDJiOC00NzhhLWFhMDAtODFmZDk3Zjk5OTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP0Xj/KU+e71Dv0e4E4Zi63kGBfckY/3A2pQ BN8b69bAM+z7vTWXe1FgxBHwNzNWnf39p12YlcbuJ15i5YRB321haeFKI51nzdx2 NKwv3RWh/xKk/YPTcyM6Y1zU4B++AJ7xfDUOnnOeGngbjJlwEuepdpKB+TFnIrKb AiLZUOE/UnDprskJaPL7iD61ZDV9p2fI3ie0JMf+93Mb5VKVI1IeI9xfbvd1pDjh l9dwOIJ2NP2IMiBYqP1kWbKFWdyCHL/qhC9Yj+tkMtdPicpRdkLhXHJdD8Tdg1t3 3BEnHLzrjpoxLGImF/tY7rH5LZtZPHujJtCIEP/rrrQr1CEYswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDss6scLFEl5/vX3inBt7qhB0SiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNGRiODg2NTUtMzYxYS0z MWJhLTgxMjgtNzI1MGNhMmU5ZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcY6Ihn8fTtycST05Zm0kKy3vPtgePHRjXeTK/u8LOLpixpyvkEKNJk pMcUDpXeKQOWKQEFEJXolkfi0eatNSKU3s8vUvwA6xIIDGCWc6AtC1RmxlavlEWr K52lcz4di3w0ER4ROV741KWSJ5vMuBkoKhhYGr612qCLMnbcsMuupO7gwN+ueeL4 9usATZVdvB1EjfaKHA4dPDpL+9/3SjfO7XHJafXiNVVXTUpdnJKNg+sl9bSavz8N iw5NaNTKwHv97Np+BDLTkyvWKnVt8Er/CB8m4JSUZ41wgPBxX89jO0FGC9/Oq8HZ 5lFY2YM1tjFI5BBK/xbQE/AXLkKnY7Q= -----END CERTIFICATE-----Generated at Sun Oct 4 20:00:15 2026 by rpki-client