$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/2bbb99a0-9a60-3832-a878-2ec581cd6fff.roa File: 2bbb99a0-9a60-3832-a878-2ec581cd6fff.roa (raw, json) Hash identifier: CTv++EvVWZvkXGALljCTDVK0SN421/n6YC6AqP4mxKw= Subject key identifier: 69:68:41:33:FF:DA:22:20:F4:6E:47:BB:F8:18:3D:8D:F7:A2:5D:53 Certificate issuer: /CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3 Certificate serial: 010D0C9F4328584F4973F99C45D85A292A7AB9C0 Authority key identifier: 26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/2bbb99a0-9a60-3832-a878-2ec581cd6fff.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 17138 IP address blocks: 158.51.172.0/22 maxlen: 22 162.248.96.0/22 maxlen: 22 170.39.232.0/22 maxlen: 22 199.255.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f9:9c:45:d8:5a:29:2a:7a:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0e6e062d-c836-458c-b0e9-67f09a07272c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:ba:77:9b:5f:d7:70:c3:4f:86:a5:e4:86: 12:bc:28:31:e6:b6:e1:c6:4a:d7:08:a3:91:eb:7b: b7:e2:82:ba:b1:ba:13:32:1a:b9:8f:cd:31:f2:25: 13:9b:7f:81:db:68:a8:73:23:47:85:1c:57:ae:01: 42:52:9b:44:fe:28:22:af:1a:76:ef:22:81:14:e0: 0f:e8:94:53:3a:e5:a7:b8:70:f0:5e:21:db:51:74: 43:b7:2a:73:15:11:cf:8d:08:4c:83:7a:d3:b8:f4: 32:2f:a9:ab:b1:81:17:18:4e:e1:f6:f3:aa:dc:5e: 74:2e:e7:0d:f7:ac:64:18:49:d3:a5:17:00:5f:c8: 19:7e:1f:20:1c:87:d7:b0:91:9b:b3:6a:bd:c0:cf: 20:67:1c:33:00:7f:21:c1:e3:de:82:28:95:88:a6: ba:16:ab:8c:8b:2f:bd:a6:23:f4:57:5c:c5:97:71: c4:14:09:34:58:fa:88:f4:15:53:15:42:df:91:77: 11:fb:8c:db:f2:2f:ea:08:02:b9:66:2a:21:a8:7b: d5:93:35:00:74:12:eb:d1:5b:f1:7f:ea:75:d7:53: 3f:8a:28:bc:54:02:d0:9e:8a:bd:df:97:66:31:c6: 87:15:c9:1d:bf:35:f6:d1:78:1a:02:92:60:6a:2b: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:68:41:33:FF:DA:22:20:F4:6E:47:BB:F8:18:3D:8D:F7:A2:5D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/2bbb99a0-9a60-3832-a878-2ec581cd6fff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl X509v3 Authority Key Identifier: keyid:26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer sbgp-ipAddrBlock: critical IPv4: 158.51.172.0/22 162.248.96.0/22 170.39.232.0/22 199.255.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:3a:72:4e:aa:11:33:f7:83:bc:a5:69:8e:a9:10:ce:6a:62: 2f:f1:a8:20:ac:9a:7a:a1:3d:1c:04:9f:d4:4f:0d:e9:4a:0d: fe:7d:e7:67:81:d1:e6:78:7e:a4:bc:66:36:0e:e0:b3:95:ce: 00:c1:81:c7:f2:93:f5:ab:21:c5:fc:bd:3e:03:ac:b3:2d:f8: 30:25:1b:17:24:85:b2:3d:58:96:f3:29:24:36:74:d9:1a:a4: af:74:f1:8a:32:1c:e9:c1:46:01:03:c3:7f:9a:7a:8f:32:7d: 75:ea:42:4a:07:6a:1c:bd:3e:a7:63:9b:f8:6f:ca:be:b6:d0: cd:f1:93:1f:25:ed:d0:91:6e:c5:93:68:99:ed:0d:9c:30:76: 1d:51:64:70:63:5d:40:77:d0:73:ee:9b:9f:33:e4:bd:de:fb: bf:4f:8b:03:5f:b5:ab:c2:a6:a4:c2:72:30:ea:f8:cd:36:af: 57:b5:af:7b:35:9d:3c:b0:a4:76:0d:53:bb:ee:89:56:74:42: e4:df:8c:f7:9a:83:79:24:70:e5:39:4d:c7:68:df:13:8c:42: 2f:a1:30:f0:ab:49:c4:51:b0:00:98:ed:ef:11:1f:3e:3b:e3: 47:a3:3f:05:72:70:77:74:1f:30:f6:8e:e9:4b:9e:41:29:59: 96:cf:50:8c -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE9Jc/mcRdhaKSp6ucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwNDhiNWEtMmNhOC00MjUxLThlOTMtNWVhYWI3MmQ0 Y2MzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGU2ZTA2MmQtYzgzNi00NThjLWIwZTktNjdmMDlhMDcyNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyG6d5tf13DDT4al5IYSvCgx5rbhxkrXCKOR 63u34oK6sboTMhq5j80x8iUTm3+B22iocyNHhRxXrgFCUptE/igirxp27yKBFOAP 6JRTOuWnuHDwXiHbUXRDtypzFRHPjQhMg3rTuPQyL6mrsYEXGE7h9vOq3F50LucN 96xkGEnTpRcAX8gZfh8gHIfXsJGbs2q9wM8gZxwzAH8hwePegiiViKa6FquMiy+9 piP0V1zFl3HEFAk0WPqI9BVTFULfkXcR+4zb8i/qCAK5ZiohqHvVkzUAdBLr0Vvx f+p111M/iii8VALQnoq935dmMcaHFckdvzX20XgaApJgaismpQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFGloQTP/2iIg9G5Hu/gYPY33ol1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0 OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFhYjcyZDRjYzMvMmJiYjk5YTAtOWE2MC0z ODMyLWE4NzgtMmVjNTgxY2Q2ZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjAwNDhiNWEtMmNhOC00MjUxLThl OTMtNWVhYWI3MmQ0Y2MzLzYwMDQ4YjVhLTJjYTgtNDI1MS04ZTkzLTVlYWFiNzJk NGNjMy5jcmwwHwYDVR0jBBgwFoAUJrNx2C7TAlCegsXwq57lU90/7UgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFh YjcyZDRjYzMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCnjOsAwQC ovhgAwQCqifoAwQCx//gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBALM6ck6qETP3g7ylaY6pEM5qYi/xqCCs mnqhPRwEn9RPDelKDf5952eB0eZ4fqS8ZjYO4LOVzgDBgcfyk/WrIcX8vT4DrLMt +DAlGxckhbI9WJbzKSQ2dNkapK908YoyHOnBRgEDw3+aeo8yfXXqQkoHahy9Pqdj m/hvyr620M3xkx8l7dCRbsWTaJntDZwwdh1RZHBjXUB30HPum58z5L3e+79PiwNf tavCpqTCcjDq+M02r1e1r3s1nTywpHYNU7vuiVZ0QuTfjPeag3kkcOU5Tcdo3xOM Qi+hMPCrScRRsACY7e8RHz4740ejPwVycHd0HzD2julLnkEpWZbPUIw= -----END CERTIFICATE-----Generated at Sun Sep 27 00:33:02 2026 by rpki-client