$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/04c67270-e110-38a9-8d5f-3dd78fa60be6.roa File: 04c67270-e110-38a9-8d5f-3dd78fa60be6.roa (raw, json) Hash identifier: qMpOBkoMne2iy1Xki72vYVwRHm5yRiSdz3gwcNBmKZQ= Subject key identifier: ED:80:6F:4E:E4:7E:9B:77:EF:10:4B:AA:41:E6:A0:B2:69:E9:9C:24 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F4AD7E03CBD0E4EDA39209B00 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/04c67270-e110-38a9-8d5f-3dd78fa60be6.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 16740 IP address blocks: 69.60.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:e0:3c:bd:0e:4e:da:39:20:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=1305574a-4b7d-4df6-9756-eed280741fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:aa:09:25:fa:e5:39:96:b0:84:a2:64:d3: 51:5d:d3:fd:44:be:6e:f3:ff:f7:ff:71:be:7c:cc: 65:3b:4d:00:38:6b:33:4c:23:9a:49:99:9e:16:67: 06:08:b6:1e:b1:6f:73:a3:04:a3:bf:8a:1a:22:f9: 29:e6:f6:91:a3:66:42:e3:3e:2b:b0:b7:eb:04:66: 35:40:7a:06:2d:90:17:79:45:9d:88:a8:2d:28:3b: de:87:09:bc:a6:81:31:18:08:99:81:2f:c8:8f:59: 27:02:f2:a3:81:ee:ed:1a:0c:0c:ac:71:60:bf:fc: b8:9d:32:fb:3d:2a:f5:f4:b3:86:06:8f:16:d0:ef: 1b:bb:2c:df:62:54:f2:7a:b5:90:ff:15:e3:62:d8: e2:a4:c5:a9:30:d4:89:90:d2:bf:30:f0:80:93:e2: 3e:9a:da:7c:76:83:ef:71:2c:5d:07:38:09:24:92: 97:63:56:9b:99:c3:fa:a0:dd:81:e1:cb:df:78:47: a8:99:a5:e0:11:57:c1:c1:ab:e4:93:fa:7b:c4:06: 72:0b:9a:11:a5:92:98:e5:f4:7e:34:ac:b9:c2:fa: 33:08:29:c4:8b:50:ea:26:0f:d6:91:cb:ea:21:77: 8c:5d:e7:cb:2c:88:be:46:7f:4e:d3:df:d7:e0:b4: 65:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:80:6F:4E:E4:7E:9B:77:EF:10:4B:AA:41:E6:A0:B2:69:E9:9C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/04c67270-e110-38a9-8d5f-3dd78fa60be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 69.60.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:6f:e8:2d:3a:e8:9b:cf:00:75:d1:6b:8e:97:aa:2a:f6:2c: 20:fb:32:8b:4d:ad:b0:37:0b:b4:da:06:0e:cf:58:48:43:87: 2e:0a:e9:93:c2:f5:f7:bc:52:51:bc:d0:4a:be:22:73:43:49: b7:26:db:5d:65:26:56:b6:b1:fe:6e:0c:03:da:7c:99:7d:53: 50:1c:d7:31:11:c9:4c:a9:27:12:80:fe:5d:45:65:54:be:c0: 40:57:19:59:32:1e:c8:38:74:86:70:5b:49:78:15:bb:09:30: 45:df:5d:5b:0d:d0:a5:79:9f:98:ef:3e:12:f8:c7:2b:56:84: 58:93:e2:b7:ec:ab:58:8e:17:f7:38:7e:ff:16:0b:67:ca:5b: 8e:8e:37:8a:34:39:1e:5e:4e:1f:1f:62:48:b9:bd:71:8b:1b: 74:ba:c4:85:ee:19:55:b8:60:f4:4f:9d:ed:12:5a:4f:eb:a8: d3:74:fb:6e:d9:d6:3c:2d:25:62:b6:4b:bc:f0:f8:af:b3:87: 7d:ee:57:af:e7:75:73:f8:bd:0d:70:38:12:0f:9c:9c:7f:66: dd:7f:c1:a5:d6:69:e4:e0:aa:49:4b:a4:77:97:9f:99:99:c1: 27:1c:80:09:83:53:49:55:fe:3d:ee:d7:ea:c0:4c:f9:14:68: 32:ff:78:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1+A8vQ5O2jkgmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk MTMwNTU3NGEtNGI3ZC00ZGY2LTk3NTYtZWVkMjgwNzQxZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZOqCSX65TmWsISiZNNRXdP9RL5u8//3/3G+ fMxlO00AOGszTCOaSZmeFmcGCLYesW9zowSjv4oaIvkp5vaRo2ZC4z4rsLfrBGY1 QHoGLZAXeUWdiKgtKDvehwm8poExGAiZgS/Ij1knAvKjge7tGgwMrHFgv/y4nTL7 PSr19LOGBo8W0O8buyzfYlTyerWQ/xXjYtjipMWpMNSJkNK/MPCAk+I+mtp8doPv cSxdBzgJJJKXY1abmcP6oN2B4cvfeEeomaXgEVfBwavkk/p7xAZyC5oRpZKY5fR+ NKy5wvozCCnEi1DqJg/WkcvqIXeMXefLLIi+Rn9O09/X4LRlNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2Ab07kfpt37xBLqkHmoLJp6ZwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMDRjNjcyNzAtZTExMC0z OGE5LThkNWYtM2RkNzhmYTYwYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTwPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9v6C066JvPAHXRa46Xqir2LCD7MotNrbA3C7TaBg7PWEhDhy4K6ZPC 9fe8UlG80Eq+InNDSbcm211lJla2sf5uDAPafJl9U1Ac1zERyUypJxKA/l1FZVS+ wEBXGVkyHsg4dIZwW0l4FbsJMEXfXVsN0KV5n5jvPhL4xytWhFiT4rfsq1iOF/c4 fv8WC2fKW46ON4o0OR5eTh8fYki5vXGLG3S6xIXuGVW4YPRPne0SWk/rqNN0+27Z 1jwtJWK2S7zw+K+zh33uV6/ndXP4vQ1wOBIPnJx/Zt1/waXWaeTgqklLpHeXn5mZ wSccgAmDU0lV/j3u1+rATPkUaDL/eMQ= -----END CERTIFICATE-----Generated at Sat Sep 26 01:55:43 2026 by rpki-client