$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/2ceb2125-b615-3153-9b86-635de08cef36.roa File: 2ceb2125-b615-3153-9b86-635de08cef36.roa (raw, json) Hash identifier: rtpRkhXjUBwd7puEmED5Da/XwX5jgxfZRlz5aCdHVBc= Subject key identifier: 9D:17:26:D2:62:F5:8C:B0:13:DE:D8:42:EF:DB:04:14:26:57:4B:F4 Certificate issuer: /CN=60f833ba-8149-4ea8-a5bf-33d1da5a60d8 Certificate serial: 010D0C9F4328584F71EDB9330570DC28045A1500 Authority key identifier: 6E:41:05:F1:B9:56:0B:CE:E4:F0:22:7F:B8:91:CE:12:8B:E3:F9:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/2ceb2125-b615-3153-9b86-635de08cef36.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 10490 IP address blocks: 152.55.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b9:33:05:70:dc:28:04:5a:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f833ba-8149-4ea8-a5bf-33d1da5a60d8 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=e71c394c-9f10-42c2-a63c-dfafeb01fb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:8a:db:7d:f9:1f:fa:cf:7e:32:03:b6:cb: a7:4f:79:6c:a4:b1:ff:21:b4:7e:ea:c1:82:ed:b2: 46:ef:5f:61:2b:de:a9:7a:c5:5e:c7:3d:6c:70:eb: db:6a:1a:e1:ee:2b:e9:57:61:c3:18:08:1e:5e:c7: 5b:9e:45:78:c5:4e:e7:10:79:22:b7:23:34:b6:1d: 17:98:07:fb:2b:d1:55:9a:b2:81:18:0f:75:b6:95: 0b:58:97:ae:cc:e6:df:91:c0:92:0c:b7:64:6d:d8: 11:68:ad:ed:b6:49:8e:63:7e:3d:7c:f5:6c:f5:50: 2e:52:0a:c2:25:62:5c:9f:ae:50:2e:43:06:a0:dc: a0:bf:28:22:a2:f5:b8:4e:af:0a:55:5e:ee:b5:d2: c3:fb:e8:54:e2:2c:22:d0:30:89:6c:12:bf:22:2c: 4f:66:6b:31:9d:d1:6b:5f:0d:30:7f:a6:fe:13:56: fa:e9:ed:8b:92:d3:26:f8:d0:d9:42:41:22:57:1d: 9f:cb:93:26:45:2e:6e:da:41:ad:78:b8:47:04:e8: 54:55:38:be:6c:8c:29:69:b2:3d:54:97:1e:b4:78: 83:e2:4d:cc:f7:44:b4:7e:41:21:a8:71:21:b9:01: df:e8:d7:58:78:f9:1b:7f:f3:0f:db:da:5e:be:a1: db:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:17:26:D2:62:F5:8C:B0:13:DE:D8:42:EF:DB:04:14:26:57:4B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/2ceb2125-b615-3153-9b86-635de08cef36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.crl X509v3 Authority Key Identifier: keyid:6E:41:05:F1:B9:56:0B:CE:E4:F0:22:7F:B8:91:CE:12:8B:E3:F9:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.cer sbgp-ipAddrBlock: critical IPv4: 152.55.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e6:9e:a7:e3:7c:3f:2f:ac:29:69:e3:da:f4:a3:e2:c8:2b: ea:9c:9c:3f:a2:e8:91:1d:67:1b:f3:ad:bf:ab:e6:20:ef:b3: 29:31:ef:66:c1:f5:d4:74:fd:53:ae:42:95:cf:c3:46:80:47: a8:98:88:06:0a:eb:64:9b:21:11:34:21:af:51:26:0d:fe:1a: cc:e4:71:28:bb:d3:78:54:ee:76:31:36:d4:09:a7:51:dd:57: d3:58:ab:58:b0:b6:10:f4:9f:8b:b0:3e:5c:4c:4e:31:7c:b8: 0e:72:f0:24:a0:52:93:2d:7b:be:33:63:c5:69:89:a3:fc:ef: 17:78:27:50:e7:67:54:7d:1f:35:c6:1a:d7:90:ac:bf:fd:37: 89:ec:cf:03:66:03:43:77:80:f0:7f:2f:e2:6f:b6:58:bc:0a: 31:49:69:31:15:54:9d:8a:c2:25:d2:99:00:b1:f1:85:92:7d: e8:2b:ea:1f:b2:63:b1:09:e6:6d:0f:78:cc:03:4e:56:55:7d: f8:a9:a8:55:dc:95:1f:12:6e:53:01:a2:3d:be:5c:7b:71:98: 9d:d3:4f:b0:fb:e1:7b:c8:ce:3a:fe:6e:cf:54:c7:4a:f1:5b: db:fb:22:03:76:82:64:bd:20:3c:d3:2c:35:6c:54:90:77:95: 4f:09:c7:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bkzBXDcKARaFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmODMzYmEtODE0OS00ZWE4LWE1YmYtMzNkMWRhNWE2 MGQ4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZTcxYzM5NGMtOWYxMC00MmMyLWE2M2MtZGZhZmViMDFmYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmyK2335H/rPfjIDtsunT3lspLH/IbR+6sGC 7bJG719hK96pesVexz1scOvbahrh7ivpV2HDGAgeXsdbnkV4xU7nEHkityM0th0X mAf7K9FVmrKBGA91tpULWJeuzObfkcCSDLdkbdgRaK3ttkmOY349fPVs9VAuUgrC JWJcn65QLkMGoNygvygiovW4Tq8KVV7utdLD++hU4iwi0DCJbBK/IixPZmsxndFr Xw0wf6b+E1b66e2LktMm+NDZQkEiVx2fy5MmRS5u2kGteLhHBOhUVTi+bIwpabI9 VJcetHiD4k3M90S0fkEhqHEhuQHf6NdYePkbf/MP29pevqHbBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0XJtJi9YywE97YQu/bBBQmV0v0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGY4 MzNiYS04MTQ5LTRlYTgtYTViZi0zM2QxZGE1YTYwZDgvMmNlYjIxMjUtYjYxNS0z MTUzLTliODYtNjM1ZGUwOGNlZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjBmODMzYmEtODE0OS00ZWE4LWE1 YmYtMzNkMWRhNWE2MGQ4LzYwZjgzM2JhLTgxNDktNGVhOC1hNWJmLTMzZDFkYTVh NjBkOC5jcmwwHwYDVR0jBBgwFoAUbkEF8blWC87k8CJ/uJHOEovj+UQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGY4MzNiYS04MTQ5LTRlYTgtYTViZi0zM2Qx ZGE1YTYwZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmDeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbmnqfjfD8vrClp49r0o+LIK+qcnD+i6JEdZxvzrb+r5iDvsykx72bB 9dR0/VOuQpXPw0aAR6iYiAYK62SbIRE0Ia9RJg3+GszkcSi703hU7nYxNtQJp1Hd V9NYq1iwthD0n4uwPlxMTjF8uA5y8CSgUpMte74zY8VpiaP87xd4J1DnZ1R9HzXG GteQrL/9N4nszwNmA0N3gPB/L+Jvtli8CjFJaTEVVJ2KwiXSmQCx8YWSfegr6h+y Y7EJ5m0PeMwDTlZVffipqFXclR8SblMBoj2+XHtxmJ3TT7D74XvIzjr+bs9Ux0rx W9v7IgN2gmS9IDzTLDVsVJB3lU8JxxA= -----END CERTIFICATE-----Generated at Sun Nov 15 21:19:33 2026 by rpki-client