$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa File: 443219a0-efe0-327e-b60e-0844a2070c85.roa (raw, json) Hash identifier: p/tbW0trqL4rkBDcsaAhfoWkt0P76xpPqYhvOZAF0Cs= Subject key identifier: 09:84:42:81:D6:35:AF:AE:6B:A0:65:43:D5:C2:3E:37:EC:4F:70:6F Certificate issuer: /CN=60853e5b-d7a9-4bc8-8250-635257ad49bd Certificate serial: 010D0C9F4328584F093CDE193B08EB539BDE5F00 Authority key identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 11996 IP address blocks: 192.189.147.0/24 maxlen: 24 207.251.48.0/20 maxlen: 24 208.64.92.0/22 maxlen: 24 216.243.96.0/20 maxlen: 24 2605:6800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:de:19:3b:08:eb:53:9b:de:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60853e5b-d7a9-4bc8-8250-635257ad49bd Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=aa609a1e-c2f0-4320-bbf5-b224f4c8f931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:7d:3e:9e:ea:07:ad:c2:39:dc:65:3a:49: 65:80:1d:31:56:81:89:1d:b3:9d:af:8a:36:b3:2f: d4:d6:40:6e:d0:62:79:dc:15:64:44:85:54:15:05: f2:ac:08:e9:3e:0f:86:43:b6:96:41:8b:3f:8b:87: 16:3d:d8:8b:5c:cc:81:6a:98:82:c5:a3:eb:5b:0b: 9f:9b:fb:68:a1:8b:cc:d7:a5:10:22:a3:fc:9c:2e: ce:a7:8b:d8:80:9a:97:73:34:ba:1c:9b:64:b2:11: 79:05:cf:f8:ca:fd:8d:97:f1:06:0f:47:ac:d4:e5: 51:9a:50:4c:d5:9d:74:4a:c1:2f:11:af:ee:a3:c3: 5f:61:de:5d:85:fb:a3:8d:68:23:df:9a:00:ea:81: bc:5c:ee:a4:f1:4b:15:62:37:31:4a:48:18:ff:da: df:15:2d:a3:dc:ad:12:c2:fc:20:8e:01:6d:00:33: e3:a4:92:ea:fb:e1:18:02:2e:fd:f3:97:a3:d3:ce: a7:c7:06:ad:4b:3c:c5:3c:3b:01:c5:1f:fa:a9:bb: 4f:90:16:be:1f:72:ef:15:db:59:04:37:d3:69:de: 87:69:3d:41:db:44:ce:fb:6b:1e:b5:b5:6a:ba:f3: ec:25:76:a6:99:ce:f1:ee:e3:f1:fb:0f:d5:59:08: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:84:42:81:D6:35:AF:AE:6B:A0:65:43:D5:C2:3E:37:EC:4F:70:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl X509v3 Authority Key Identifier: keyid:4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer sbgp-ipAddrBlock: critical IPv4: 192.189.147.0/24 207.251.48.0/20 208.64.92.0/22 216.243.96.0/20 IPv6: 2605:6800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6d:3e:d3:61:14:81:ca:3d:53:6c:15:07:00:c0:9d:c7:76: 61:11:79:a1:89:3d:87:e2:07:ba:f6:07:71:3a:a8:70:1e:8b: 46:60:d6:1d:92:57:08:a6:80:81:7d:15:ba:6a:ad:b1:1d:ff: 85:1d:2b:1f:08:4e:2c:4e:c6:18:90:ba:dc:7d:87:be:b8:3b: 2d:41:64:1a:d0:93:07:5e:39:1d:2d:82:76:f4:7f:5e:16:4b: 3b:78:d0:3f:c5:60:57:5b:2a:da:4c:38:42:ab:71:ae:37:5a: b0:16:f1:99:ae:6c:75:44:37:e1:9f:b0:52:ec:df:d7:90:08: 46:8d:f6:29:7c:26:4f:c4:00:a8:f7:99:0e:f7:3b:16:df:01: 9b:ce:6d:38:7c:45:4a:22:e7:44:cb:42:c8:7d:e3:1e:14:12: cc:23:36:c2:e5:23:f0:33:0e:46:88:87:0b:a1:1b:1d:00:fc: 4e:df:36:83:8a:3c:66:91:f1:d9:bd:3d:22:43:5a:9f:bd:72: 4e:42:85:ef:fa:b1:a8:fa:16:8a:38:44:a0:db:d2:f9:28:0f: 49:81:14:e9:98:60:15:b4:ec:9a:1f:4c:2e:9c:62:df:4f:71: 16:3b:c5:31:ad:f3:e7:0f:38:66:3f:c2:0d:6c:58:bb:8e:54: 19:2c:8f:56 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE8JPN4ZOwjrU5veXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA4NTNlNWItZDdhOS00YmM4LTgyNTAtNjM1MjU3YWQ0 OWJkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YWE2MDlhMWUtYzJmMC00MzIwLWJiZjUtYjIyNGY0YzhmOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/V9Pp7qB63COdxlOkllgB0xVoGJHbOdr4o2 sy/U1kBu0GJ53BVkRIVUFQXyrAjpPg+GQ7aWQYs/i4cWPdiLXMyBapiCxaPrWwuf m/tooYvM16UQIqP8nC7Op4vYgJqXczS6HJtkshF5Bc/4yv2Nl/EGD0es1OVRmlBM 1Z10SsEvEa/uo8NfYd5dhfujjWgj35oA6oG8XO6k8UsVYjcxSkgY/9rfFS2j3K0S wvwgjgFtADPjpJLq++EYAi7985ej086nxwatSzzFPDsBxR/6qbtPkBa+H3LvFdtZ BDfTad6HaT1B20TO+2setbVquvPsJXammc7x7uPx+w/VWQgIvQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFAmEQoHWNa+ua6BlQ9XCPjfsT3BvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDg1 M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUyNTdhZDQ5YmQvNDQzMjE5YTAtZWZlMC0z MjdlLWI2MGUtMDg0NGEyMDcwYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA4NTNlNWItZDdhOS00YmM4LTgy NTAtNjM1MjU3YWQ0OWJkLzYwODUzZTViLWQ3YTktNGJjOC04MjUwLTYzNTI1N2Fk NDliZC5jcmwwHwYDVR0jBBgwFoAUS6rgAPA5EjKMW8AEIsmsDzs1DygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDg1M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUy NTdhZDQ5YmQuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwL2TAwQE z/swAwQC0EBcAwQE2PNgMA0EAgACMAcDBQAmBWgAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD9tPtNhFIHK PVNsFQcAwJ3HdmEReaGJPYfiB7r2B3E6qHAei0Zg1h2SVwimgIF9FbpqrbEd/4Ud Kx8ITixOxhiQutx9h764Oy1BZBrQkwdeOR0tgnb0f14WSzt40D/FYFdbKtpMOEKr ca43WrAW8ZmubHVEN+GfsFLs39eQCEaN9il8Jk/EAKj3mQ73OxbfAZvObTh8RUoi 50TLQsh94x4UEswjNsLlI/AzDkaIhwuhGx0A/E7fNoOKPGaR8dm9PSJDWp+9ck5C he/6saj6Foo4RKDb0vkoD0mBFOmYYBW07JofTC6cYt9PcRY7xTGt8+cPOGY/wg1s WLuOVBksj1Y= -----END CERTIFICATE-----Generated at Mon Oct 5 05:20:50 2026 by rpki-client