$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/96d3ff68-52d7-3753-b9da-bee0c3a9cc06.roa File: 96d3ff68-52d7-3753-b9da-bee0c3a9cc06.roa (raw, json) Hash identifier: qCWwZtgoM67YK4K5yyV9+zNYoJbJzhLjcz5AMNc53Xo= Subject key identifier: F8:F4:33:93:F4:73:A8:9D:77:B0:B4:ED:61:D8:10:70:E1:55:49:C6 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584D4A8F9EAA676E12836BDF9118 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/96d3ff68-52d7-3753-b9da-bee0c3a9cc06.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 27475 IP address blocks: 198.160.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9e:aa:67:6e:12:83:6b:df:91:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=fd414f7d-e059-4166-af74-e9be485a8027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:2c:f4:ba:d5:3d:b1:67:d8:33:f2:bb:7f: 1f:d2:91:1b:4f:55:6a:4c:55:b4:09:c6:15:5d:d6: ce:e2:dd:04:cc:fb:66:f3:37:50:6b:20:4f:8e:8b: e6:8f:cf:cb:36:5f:e1:3e:2d:95:1e:8e:43:ee:c1: ee:30:49:1b:44:35:ea:25:74:cb:99:87:02:22:ec: f0:2b:36:c4:6e:14:35:23:fb:1f:cf:d4:23:47:9b: 6e:bd:25:1c:0c:0c:af:91:1d:03:75:e9:62:72:79: 0c:4e:66:e3:29:fe:2b:ce:f8:7d:08:f1:23:99:e9: 05:f0:be:d7:5f:3a:af:66:a6:bd:ce:79:b8:0f:a0: 73:9a:70:5d:83:3d:1c:a9:ab:fc:ed:4b:9d:73:78: 3f:c5:0d:c7:20:14:e5:fb:44:42:df:ba:ce:f4:37: 88:22:49:dd:98:1f:7d:49:f9:43:f8:b7:38:1a:6a: 28:3a:a6:6a:b8:e2:13:b6:94:95:6d:9c:5c:df:aa: 9c:3f:94:d7:a1:a2:70:8d:39:77:d7:eb:c5:31:cc: b5:a0:a2:63:78:71:5f:94:06:2c:61:52:99:76:9c: 6d:96:f2:db:d7:3e:a3:2c:55:9f:80:6a:19:12:5b: cd:65:7a:4b:8d:ff:fb:83:6c:c5:49:23:ff:b9:df: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F4:33:93:F4:73:A8:9D:77:B0:B4:ED:61:D8:10:70:E1:55:49:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/96d3ff68-52d7-3753-b9da-bee0c3a9cc06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 198.160.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6a:fe:77:27:62:c9:b2:e6:d4:36:a6:fa:67:98:ec:b2:24: 63:98:bb:dd:69:f6:91:aa:fe:88:8c:a9:45:d3:24:69:93:45: 0a:77:b2:72:f4:16:a7:88:df:93:b4:d1:7b:a1:6e:a8:80:fa: c0:51:67:d6:e6:b5:5a:3a:5c:7e:db:23:6c:28:fb:7f:27:fb: 98:a3:7a:17:ed:0f:7d:bc:3a:d4:07:c0:ca:40:7c:c6:3c:98: cc:71:70:5f:df:73:b7:64:1f:eb:db:cd:e1:47:01:07:95:89: 74:23:01:34:d2:0f:8a:61:0c:ca:dd:b8:52:73:88:bd:72:57: 36:02:b1:a6:2f:0b:e1:4b:b6:3c:5b:ad:df:e9:18:d2:eb:1a: ed:14:39:45:ce:52:77:6a:0a:f5:45:29:14:5e:e3:e1:e4:ad: d5:9f:f7:82:91:58:06:d2:c7:2a:82:2d:f2:b7:ef:d5:fb:24: a0:8c:90:6d:5b:bc:1f:36:60:78:9a:c9:68:07:2a:44:42:45: e1:8c:90:7d:60:08:12:88:84:3e:91:41:e7:2a:36:d4:1f:29: a5:59:25:38:d6:94:a9:81:df:f7:c0:e1:b1:88:e1:6c:a0:8b: 42:34:7c:c4:ab:b8:d5:e6:4a:d0:a7:93:f4:98:d5:b0:35:6d: 2f:d1:fd:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj56qZ24Sg2vfkRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZmQ0MTRmN2QtZTA1OS00MTY2LWFmNzQtZTliZTQ4NWE4MDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBAs9LrVPbFn2DPyu38f0pEbT1VqTFW0CcYV XdbO4t0EzPtm8zdQayBPjovmj8/LNl/hPi2VHo5D7sHuMEkbRDXqJXTLmYcCIuzw KzbEbhQ1I/sfz9QjR5tuvSUcDAyvkR0DdelicnkMTmbjKf4rzvh9CPEjmekF8L7X XzqvZqa9znm4D6BzmnBdgz0cqav87Uudc3g/xQ3HIBTl+0RC37rO9DeIIkndmB99 SflD+Lc4GmooOqZquOITtpSVbZxc36qcP5TXoaJwjTl31+vFMcy1oKJjeHFflAYs YVKZdpxtlvLb1z6jLFWfgGoZElvNZXpLjf/7g2zFSSP/ud9UKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj0M5P0c6idd7C07WHYEHDhVUnGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvOTZkM2ZmNjgtNTJkNy0z NzUzLWI5ZGEtYmVlMGMzYTljYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1q/ncnYsmy5tQ2pvpnmOyyJGOYu91p9pGq/oiMqUXTJGmTRQp3snL0 FqeI35O00XuhbqiA+sBRZ9bmtVo6XH7bI2wo+38n+5ijehftD328OtQHwMpAfMY8 mMxxcF/fc7dkH+vbzeFHAQeViXQjATTSD4phDMrduFJziL1yVzYCsaYvC+FLtjxb rd/pGNLrGu0UOUXOUndqCvVFKRRe4+HkrdWf94KRWAbSxyqCLfK379X7JKCMkG1b vB82YHiayWgHKkRCReGMkH1gCBKIhD6RQecqNtQfKaVZJTjWlKmB3/fA4bGI4Wyg i0I0fMSruNXmStCnk/SY1bA1bS/R/S4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:28:30 2026 by rpki-client