$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa File: 860f6f79-fac8-315e-beb5-5809ef42de80.roa (raw, json) Hash identifier: sPJ7QkZRsdnwl7KG90KzBLKe7GGrL0U7XTHlNGf7cyg= Subject key identifier: A3:32:89:07:0D:5A:B0:D8:43:1F:5B:A0:67:0C:4D:FF:1F:12:E5:2A Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584F49875FF8D8AF1F1724FEE9F0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30058 IP address blocks: 66.90.106.0/24 maxlen: 24 67.159.11.0/24 maxlen: 24 2001:49f0:d0e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:5f:f8:d8:af:1f:17:24:fe:e9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3d3ffcb5-c2f4-45c2-a3f9-36d21489b3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:87:be:c8:00:51:8f:aa:a3:b6:1e:3b:f0:6e: cc:78:0d:e8:c3:fb:8c:f5:b4:5b:4a:4a:30:83:80: 0b:5d:92:93:32:27:ff:b9:b2:68:9d:16:18:d5:72: d0:5a:a8:07:d3:76:ca:b1:89:2b:ca:b9:78:9e:0a: 30:b6:d0:83:ef:c6:02:a3:6c:d9:2d:35:e0:ae:e3: 01:f5:59:c1:01:ee:9c:00:35:fd:41:4a:22:58:e8: 97:c2:36:12:71:70:38:28:bd:b2:ad:fc:fc:16:cc: 59:11:d6:83:06:2a:22:48:e1:bd:db:a7:69:66:2d: db:02:3b:ee:21:b9:40:59:46:03:14:b3:cc:77:c7: e1:73:8d:31:ea:a9:b5:46:34:bd:b4:d1:b3:36:0b: 2a:84:7e:d1:83:f8:7d:4e:cf:6b:79:72:fa:a8:e2: 35:d5:a5:f2:51:e0:ee:3c:f2:6f:3f:38:c7:d5:2b: 0f:9b:bb:e1:97:80:9e:f3:ec:4e:da:2a:75:f3:83: 2e:47:89:9a:09:e4:08:8d:59:87:bb:72:3c:2b:53: c7:bf:fd:90:ce:00:7f:24:ce:f0:43:49:e4:b6:88: 0d:94:83:ce:96:35:0d:0c:91:a1:33:5d:63:95:fc: 4c:7a:a1:24:a9:55:1b:7f:0f:b4:b8:2e:d8:15:8e: b9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:32:89:07:0D:5A:B0:D8:43:1F:5B:A0:67:0C:4D:FF:1F:12:E5:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.106.0/24 67.159.11.0/24 IPv6: 2001:49f0:d0e8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:27:3e:ea:5d:15:c8:d8:5f:e3:9e:9f:f6:26:fc:ea:18:97: 24:03:8f:2f:12:e6:72:ea:d3:86:a5:61:f5:38:b3:1c:dc:dd: c6:eb:94:2b:2b:aa:b5:27:c3:83:94:11:dc:69:be:4e:fd:be: 83:79:86:c6:76:33:9c:f2:86:9c:0c:5c:4b:34:7b:d5:3e:2a: 03:84:99:29:39:62:8e:fd:ab:c0:d0:ee:80:1b:76:a0:d6:27: 89:6b:44:d1:d1:3c:ba:de:7e:72:7c:ea:56:9a:17:97:f0:35: aa:6c:c7:d7:ad:8d:3d:e4:c3:83:eb:d5:dd:1b:8e:08:2a:01: c2:94:26:02:f4:19:a0:c1:ea:0d:62:12:64:f8:4d:45:81:ff: 83:b6:66:a1:2c:67:e9:ad:81:33:4b:98:d7:af:d3:1a:b6:90: 90:3b:33:eb:28:f4:5c:11:1f:bc:5d:8e:fe:96:fe:8c:0b:9c: 33:db:9e:c2:c0:92:5d:ab:87:35:09:b5:02:1a:75:62:73:21: e2:31:6c:3e:50:83:cc:3b:7d:23:3f:63:69:d7:86:e2:b5:37: 79:13:82:96:2f:0e:62:dc:de:c8:47:c1:d5:df:4c:51:2f:6d: f0:d2:91:89:61:cf:a4:fb:fd:e2:44:da:69:19:9a:62:d3:73: ab:ef:f6:cf -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE9Jh1/42K8fFyT+6fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2QzZmZjYjUtYzJmNC00NWMyLWEzZjktMzZkMjE0ODliM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4e+yABRj6qjth478G7MeA3ow/uM9bRbSkow g4ALXZKTMif/ubJonRYY1XLQWqgH03bKsYkryrl4ngowttCD78YCo2zZLTXgruMB 9VnBAe6cADX9QUoiWOiXwjYScXA4KL2yrfz8FsxZEdaDBioiSOG926dpZi3bAjvu IblAWUYDFLPMd8fhc40x6qm1RjS9tNGzNgsqhH7Rg/h9Ts9reXL6qOI11aXyUeDu PPJvPzjH1SsPm7vhl4Ce8+xO2ip184MuR4maCeQIjVmHu3I8K1PHv/2QzgB/JM7w Q0nktogNlIPOljUNDJGhM11jlfxMeqEkqVUbfw+0uC7YFY65gQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFKMyiQcNWrDYQx9boGcMTf8fEuUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODYwZjZmNzktZmFjOC0z MTVlLWJlYjUtNTgwOWVmNDJkZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAQlpqAwQA Q58LMA8EAgACMAkDBwAgAUnw0OgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvSc+6l0VyNhf456f9ib86hiX JAOPLxLmcurThqVh9TizHNzdxuuUKyuqtSfDg5QR3Gm+Tv2+g3mGxnYznPKGnAxc SzR71T4qA4SZKTlijv2rwNDugBt2oNYniWtE0dE8ut5+cnzqVpoXl/A1qmzH162N PeTDg+vV3RuOCCoBwpQmAvQZoMHqDWISZPhNRYH/g7ZmoSxn6a2BM0uY16/TGraQ kDsz6yj0XBEfvF2O/pb+jAucM9uewsCSXauHNQm1Ahp1YnMh4jFsPlCDzDt9Iz9j adeG4rU3eROCli8OYtzeyEfB1d9MUS9t8NKRiWHPpPv94kTaaRmaYtNzq+/2zw== -----END CERTIFICATE-----Generated at Mon Sep 28 21:14:43 2026 by rpki-client