$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa File: 60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa (raw, json) Hash identifier: jRnC1I+leZMjiMDFMTwQdLUsdv+9yF0cB24vnEdDkk0= Subject key identifier: 0C:D5:F3:28:EE:6F:B9:56:56:B4:27:32:9C:13:E2:98:C3:64:52:EC Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Certificate serial: 010D0C9F4328584F3FAD314DE2266125B918D240 Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 14299 IP address blocks: 207.135.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:31:4d:e2:26:61:25:b9:18:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=e7fef61b-bf65-4aae-b057-a8254f1f29fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:35:eb:18:54:a9:99:44:3f:b7:2e:36:eb: 6a:6d:2f:46:43:de:88:89:bd:8d:37:1c:7b:30:f5: 42:b1:bf:79:78:4e:03:30:6c:95:cc:11:a3:5f:dd: d3:e2:86:a8:bf:2c:9c:32:1c:d5:9b:71:d9:7c:fa: 0a:b7:68:02:d7:af:16:79:c3:bd:0d:c9:0b:3d:ed: a3:70:4f:21:0a:38:65:66:32:b9:d6:8d:4f:89:bb: b4:93:f0:d7:17:55:74:96:2c:a7:82:9e:9c:0a:e7: e7:da:1d:f1:c8:14:44:7a:55:b8:74:13:81:45:50: 0f:01:a7:a1:1b:8e:de:63:48:85:4c:2f:f6:ab:c5: 9e:b4:dc:55:e7:59:ab:0d:99:e5:8d:44:e8:36:58: ec:44:6d:b9:ab:2d:9f:7f:ea:90:4f:26:24:a8:82: 0a:15:ab:be:ee:be:ee:8f:cd:00:66:d4:64:37:8d: 8a:00:b5:cf:82:54:da:fc:2b:cc:10:c1:70:36:c2: c8:8b:90:3a:7c:52:1b:c7:d4:ca:23:04:8b:bf:c5: c8:d2:da:18:5b:0e:23:9f:9a:d2:7b:e8:9a:87:fe: 62:37:f8:33:52:cb:ff:32:8d:1f:38:2d:d6:ef:9b: 09:7f:e9:9f:f5:2f:b1:36:20:83:19:d9:a5:24:8f: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:F3:28:EE:6F:B9:56:56:B4:27:32:9C:13:E2:98:C3:64:52:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl X509v3 Authority Key Identifier: keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer sbgp-ipAddrBlock: critical IPv4: 207.135.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5d:7a:3b:89:a9:e2:2a:ed:4b:28:b6:4a:23:1b:b1:0a:2b: 22:d0:dc:ab:32:f8:a7:76:75:19:37:f8:2e:72:21:53:3b:98: 58:ca:b8:ed:44:2d:45:e5:6d:aa:35:0b:8e:6a:b0:aa:a4:93: 33:cd:76:b9:77:e9:b4:d8:b4:21:5a:83:ec:99:19:61:40:60: 4a:25:d6:ec:82:d9:92:e3:82:30:ee:c0:87:2f:a5:ae:46:bd: 38:ec:e6:39:8a:ea:6b:11:a0:d5:d2:32:8b:9a:56:35:4e:1a: 55:d2:4c:30:67:32:f9:e9:af:15:9f:a3:db:e2:df:0a:55:2d: 3b:b0:26:86:14:64:d9:71:2d:6c:f0:f3:f4:c8:af:b4:61:d8: 28:c3:97:a4:ea:17:9f:50:b2:a2:fe:f7:01:8a:9c:ce:2b:ee: d7:95:f3:3d:28:c5:34:ee:c3:d9:ec:59:31:34:2b:13:81:63: e2:5b:bc:01:85:c7:f4:b1:de:01:c2:ff:be:57:f2:d1:b0:8f: 6c:0a:23:87:09:e7:a0:df:cf:e8:de:a9:4c:b5:69:d3:9d:ca: 22:31:1f:05:d0:23:e3:e5:f8:fe:a8:86:3e:8d:93:02:66:1e: 36:df:02:6f:17:a5:fa:31:77:62:c1:57:f6:52:76:6a:10:32: 9d:ed:2d:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTFN4iZhJbkY0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll NWU3MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTdmZWY2MWItYmY2NS00YWFlLWIwNTctYTgyNTRmMWYyOWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy016xhUqZlEP7cuNutqbS9GQ96Iib2NNxx7 MPVCsb95eE4DMGyVzBGjX93T4oaovyycMhzVm3HZfPoKt2gC168WecO9DckLPe2j cE8hCjhlZjK51o1Pibu0k/DXF1V0liyngp6cCufn2h3xyBREelW4dBOBRVAPAaeh G47eY0iFTC/2q8WetNxV51mrDZnljUToNljsRG25qy2ff+qQTyYkqIIKFau+7r7u j80AZtRkN42KALXPglTa/CvMEMFwNsLIi5A6fFIbx9TKIwSLv8XI0toYWw4jn5rS e+iah/5iN/gzUsv/Mo0fOC3W75sJf+mf9S+xNiCDGdmlJI+ipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzV8yjub7lWVrQnMpwT4pjDZFLsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3 ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvNjBhYzgwMzYtOGZlZC0z Y2FhLWJkMzAtN2Q5ZWI3ZGU5ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5 NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5 ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk NTA5OWU1ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4ecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEddejuJqeIq7UsotkojG7EKKyLQ3Ksy+Kd2dRk3+C5yIVM7mFjKuO1E LUXlbao1C45qsKqkkzPNdrl36bTYtCFag+yZGWFAYEol1uyC2ZLjgjDuwIcvpa5G vTjs5jmK6msRoNXSMouaVjVOGlXSTDBnMvnprxWfo9vi3wpVLTuwJoYUZNlxLWzw 8/TIr7Rh2CjDl6TqF59QsqL+9wGKnM4r7teV8z0oxTTuw9nsWTE0KxOBY+JbvAGF x/Sx3gHC/75X8tGwj2wKI4cJ56Dfz+jeqUy1adOdyiIxHwXQI+Pl+P6ohj6NkwJm HjbfAm8Xpfoxd2LBV/ZSdmoQMp3tLW8= -----END CERTIFICATE-----Generated at Thu Oct 1 13:22:44 2026 by rpki-client