$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af38cd76-5b97-33c0-8986-98fd421cf7a1.roa File: af38cd76-5b97-33c0-8986-98fd421cf7a1.roa (raw, json) Hash identifier: +d+syoZS/ipL55S+0zqFBZTTXqBQazAglu9KtDCYxg8= Subject key identifier: DB:F1:D0:E4:2D:4D:45:AC:F2:C6:86:DD:F9:F3:25:13:F3:24:F3:45 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F4AD7E01EEC36AB21DB3E6980 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af38cd76-5b97-33c0-8986-98fd421cf7a1.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 16740 IP address blocks: 69.60.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:e0:1e:ec:36:ab:21:db:3e:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=6f9bbf29-a1b5-4607-81b6-5970da59338c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1c:b0:a9:4e:06:c2:02:0c:b2:db:71:c1:42: 33:d6:b4:3e:89:af:31:23:17:07:c4:33:85:8c:17: 2d:28:83:2f:18:ed:0c:09:34:c3:c0:f3:5f:65:c5: 52:c7:e9:42:1a:b8:be:2d:bb:ce:0d:96:02:a5:a0: 33:ca:a8:ef:81:0c:b7:7b:de:15:8b:71:d2:39:12: df:f6:dc:40:ed:70:8c:5a:19:64:d8:f7:a0:1d:90: 97:ba:ca:4d:dc:46:83:20:94:47:57:5d:18:8b:a0: 9c:8a:5b:ac:c6:60:ed:ae:9e:45:8b:7b:bd:7b:f2: 9d:a2:0a:75:28:cc:f5:ed:b3:22:1f:29:f6:f8:4e: dc:d4:27:25:40:84:68:99:da:22:f1:5e:91:18:30: 80:69:e0:f1:c2:9c:39:57:20:70:71:61:70:61:75: f4:39:b2:2c:a5:b3:ad:d1:53:b3:b8:8a:f8:35:22: 7b:db:8e:7f:b5:08:93:5d:69:e3:bd:76:9b:7d:99: 13:cd:a0:83:99:f5:3d:62:33:31:c8:81:51:1e:f8: e7:50:89:6a:f1:d1:d1:d3:cd:95:06:6e:c3:c8:41: 3f:e1:31:b2:b0:ce:29:fa:17:b9:45:ea:a9:63:99: da:57:39:66:09:21:78:41:89:a2:b5:92:35:b8:b6: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F1:D0:E4:2D:4D:45:AC:F2:C6:86:DD:F9:F3:25:13:F3:24:F3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af38cd76-5b97-33c0-8986-98fd421cf7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 69.60.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:81:be:9a:d6:c8:e0:83:0e:cd:7a:e6:8b:84:9d:d9:99:e4: ec:0e:f5:12:90:f1:22:61:6e:9a:14:63:16:af:1d:1f:29:f7: 4e:95:33:7a:ff:fa:35:fc:81:6e:c0:3b:a3:8b:81:4c:f9:ba: e4:95:14:8b:1f:11:20:d4:88:7d:98:65:95:60:f4:24:e2:57: 90:87:85:cb:70:a6:f0:85:e2:b1:b8:f5:d3:00:e5:d1:41:5c: a1:a7:00:61:9b:16:0a:58:7f:79:dc:d8:1e:69:e8:85:b4:50: bb:02:40:31:6f:55:fb:3e:0f:0f:d2:61:cf:10:b7:79:34:7d: 19:e7:3c:33:47:5a:36:d6:e2:f9:ad:e9:02:b6:63:26:55:e4: 72:44:61:3e:7f:b6:ff:a6:e7:70:fd:0b:2a:55:18:8a:72:48: 8f:7d:bb:9b:63:6d:11:13:9c:0f:50:b3:63:4b:7f:b0:db:1e: 62:5f:2e:71:48:ef:9c:38:5d:d7:4f:0d:9c:d2:c2:41:bb:54: 14:fb:8b:3b:e2:1b:e2:15:06:02:3a:fa:e0:2f:10:cf:b7:e0: 6c:02:80:cd:3c:3f:43:d6:17:66:48:ba:f5:56:1f:06:0a:1b: a3:63:f1:04:e5:3a:64:98:ec:bd:19:81:fd:2c:10:9c:98:dd: 65:5f:2d:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1+Ae7DarIds+aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk NmY5YmJmMjktYTFiNS00NjA3LTgxYjYtNTk3MGRhNTkzMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hywqU4GwgIMsttxwUIz1rQ+ia8xIxcHxDOF jBctKIMvGO0MCTTDwPNfZcVSx+lCGri+LbvODZYCpaAzyqjvgQy3e94Vi3HSORLf 9txA7XCMWhlk2PegHZCXuspN3EaDIJRHV10Yi6CcilusxmDtrp5Fi3u9e/Kdogp1 KMz17bMiHyn2+E7c1CclQIRomdoi8V6RGDCAaeDxwpw5VyBwcWFwYXX0ObIspbOt 0VOzuIr4NSJ7245/tQiTXWnjvXabfZkTzaCDmfU9YjMxyIFRHvjnUIlq8dHR082V Bm7DyEE/4TGysM4p+he5ReqpY5naVzlmCSF4QYmitZI1uLa8AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvx0OQtTUWs8saG3fnzJRPzJPNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYWYzOGNkNzYtNWI5Ny0z M2MwLTg5ODYtOThmZDQyMWNmN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTwNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6BvprWyOCDDs165ouEndmZ5OwO9RKQ8SJhbpoUYxavHR8p906VM3r/ +jX8gW7AO6OLgUz5uuSVFIsfESDUiH2YZZVg9CTiV5CHhctwpvCF4rG49dMA5dFB XKGnAGGbFgpYf3nc2B5p6IW0ULsCQDFvVfs+Dw/SYc8Qt3k0fRnnPDNHWjbW4vmt 6QK2YyZV5HJEYT5/tv+m53D9CypVGIpySI99u5tjbRETnA9Qs2NLf7DbHmJfLnFI 75w4XddPDZzSwkG7VBT7izviG+IVBgI6+uAvEM+34GwCgM08P0PWF2ZIuvVWHwYK G6Nj8QTlOmSY7L0Zgf0sEJyY3WVfLcY= -----END CERTIFICATE-----Generated at Tue Oct 6 04:03:32 2026 by rpki-client