$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3d1c8721-57e5-32ee-9117-74a09dfc5348.roa File: 3d1c8721-57e5-32ee-9117-74a09dfc5348.roa (raw, json) Hash identifier: YqfeO7B3cG7eBJ8lYMwKcZIOuv/0jHXILh59pVoBiKo= Subject key identifier: F2:F2:3D:E2:7B:F5:F3:02:BA:A6:0E:CF:DB:08:3A:8C:96:98:8C:BE Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F4AD7E118CD9E81FDC23A3160 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3d1c8721-57e5-32ee-9117-74a09dfc5348.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 16740 IP address blocks: 69.60.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:e1:18:cd:9e:81:fd:c2:3a:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=cd01b747-ed5d-432c-af8a-4fd632a7031c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ea:fc:23:42:db:ac:2f:8f:39:96:5c:e8:6c: 46:22:dd:7e:58:2f:c1:f0:1e:58:3e:3f:18:77:e4: 97:20:5c:41:1e:ab:08:46:cf:90:48:bc:03:e7:66: 56:15:77:28:a3:eb:54:f3:8b:1f:2e:5b:fe:e6:8f: b7:ee:54:97:07:c8:39:ab:20:f5:52:aa:65:76:72: 0d:15:f0:fd:79:24:d1:54:27:b7:f0:09:a4:2a:02: 07:84:71:c0:af:8f:ed:a7:39:7f:52:d3:4e:11:67: b8:9a:6e:f4:79:41:76:86:3c:96:51:04:dc:1b:ea: 77:ad:d9:2d:4c:e3:a5:9b:ca:74:51:11:f7:f1:77: 58:d1:ba:35:e9:3f:e0:ce:80:a7:69:68:d0:1d:00: 1e:e7:21:3f:d1:93:e7:62:1b:f7:9f:30:f7:58:28: 9c:c1:a1:86:c0:06:bd:3a:11:fd:60:04:79:16:ab: 07:38:fd:c3:6c:db:09:e2:1b:f8:e7:3e:ee:30:8b: 23:05:ca:1f:fb:e6:4d:2f:70:24:4e:df:d3:66:70: d4:84:48:c3:90:b1:39:6a:b8:7a:9f:c4:31:a6:46: 61:fe:c6:3d:b4:41:54:23:a9:70:d8:24:b0:2e:fd: 0f:cb:b2:29:78:b2:7c:0c:50:8c:19:98:8b:dd:88: 89:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F2:3D:E2:7B:F5:F3:02:BA:A6:0E:CF:DB:08:3A:8C:96:98:8C:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3d1c8721-57e5-32ee-9117-74a09dfc5348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 69.60.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f1:38:ee:90:51:24:4e:e9:8f:23:a9:a9:13:29:ed:4e:d6: e6:5f:1e:d9:73:83:9f:c6:de:80:06:28:3c:d2:6c:6a:10:ab: c8:d0:91:f2:c2:34:62:d4:8f:8a:88:62:01:08:7b:1e:a9:7e: 37:99:c6:c5:57:22:5d:df:cf:e8:62:47:0c:b3:5d:df:5e:86: 93:cf:66:db:45:d7:6d:4e:be:3f:bb:41:f5:12:29:dd:cd:09: 63:d0:79:f7:27:3a:71:a4:0e:af:9e:f8:53:7f:c3:6f:db:45: 00:c8:0f:fd:b8:92:34:05:f6:c6:a1:c3:04:40:92:d7:b5:31: cb:57:1e:e7:df:11:bf:f0:1f:ce:53:0d:77:4a:8f:fe:f2:90: 5e:1f:cf:21:ec:98:7e:7c:38:e0:0d:a8:a7:f9:55:0e:8c:12: b9:c0:db:67:9e:45:c2:89:9a:fa:96:90:c7:f2:33:9b:e4:5c: b2:5f:f7:c6:9c:75:1c:24:2f:27:e6:24:5d:db:88:b4:56:08: 41:fc:7e:40:a5:49:26:8e:9e:27:26:d3:a9:0f:5c:13:2a:ed: 0c:39:c9:87:f0:59:71:71:a6:49:13:51:fc:fb:c0:9f:0c:cb: b8:5d:11:bb:45:ba:6e:7f:2d:d2:b2:67:40:d8:8f:af:dd:ec: 42:f5:a9:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1+EYzZ6B/cI6MWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk Y2QwMWI3NDctZWQ1ZC00MzJjLWFmOGEtNGZkNjMyYTcwMzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgur8I0LbrC+POZZc6GxGIt1+WC/B8B5YPj8Y d+SXIFxBHqsIRs+QSLwD52ZWFXcoo+tU84sfLlv+5o+37lSXB8g5qyD1UqpldnIN FfD9eSTRVCe38AmkKgIHhHHAr4/tpzl/UtNOEWe4mm70eUF2hjyWUQTcG+p3rdkt TOOlm8p0URH38XdY0bo16T/gzoCnaWjQHQAe5yE/0ZPnYhv3nzD3WCicwaGGwAa9 OhH9YAR5FqsHOP3DbNsJ4hv45z7uMIsjBcof++ZNL3AkTt/TZnDUhEjDkLE5arh6 n8QxpkZh/sY9tEFUI6lw2CSwLv0Py7IpeLJ8DFCMGZiL3YiJ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLyPeJ79fMCuqYOz9sIOoyWmIy+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvM2QxYzg3MjEtNTdlNS0z MmVlLTkxMTctNzRhMDlkZmM1MzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTwdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXxOO6QUSRO6Y8jqakTKe1O1uZfHtlzg5/G3oAGKDzSbGoQq8jQkfLC NGLUj4qIYgEIex6pfjeZxsVXIl3fz+hiRwyzXd9ehpPPZttF121Ovj+7QfUSKd3N CWPQefcnOnGkDq+e+FN/w2/bRQDID/24kjQF9sahwwRAkte1MctXHuffEb/wH85T DXdKj/7ykF4fzyHsmH58OOANqKf5VQ6MErnA22eeRcKJmvqWkMfyM5vkXLJf98ac dRwkLyfmJF3biLRWCEH8fkClSSaOnicm06kPXBMq7Qw5yYfwWXFxpkkTUfz7wJ8M y7hdEbtFum5/LdKyZ0DYj6/d7EL1qSA= -----END CERTIFICATE-----Generated at Fri Sep 25 17:04:58 2026 by rpki-client