$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/dc95ed78-d536-3580-a3cd-4681085b8789.roa File: dc95ed78-d536-3580-a3cd-4681085b8789.roa (raw, json) Hash identifier: 2Lhn9kOy0dkVCtwqpkTpkTX3u4Jc8CiGWJH+Sv79xtU= Subject key identifier: B2:19:22:1A:BD:C0:4F:81:B9:D5:20:F1:12:98:06:16:1A:A3:D3:F4 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F4AD7E01154F314DC540A8970 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/dc95ed78-d536-3580-a3cd-4681085b8789.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 16740 IP address blocks: 69.60.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:e0:11:54:f3:14:dc:54:0a:89:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=d5cabfd4-40e4-4825-9423-18d20b87c8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:0e:97:9c:34:b1:58:45:1c:95:2c:a0:3c: a4:85:88:a7:99:fa:86:4a:51:b8:db:40:de:58:d2: 66:23:01:76:47:aa:8f:51:e7:49:ea:ad:05:d6:a6: 08:d8:a5:57:d7:7e:13:71:c4:09:ba:18:86:c1:1f: a5:74:c0:6d:34:59:82:75:11:1d:42:94:de:1a:42: 8e:59:ca:39:88:7b:8e:b7:e9:73:e6:7c:7f:29:ff: 7e:ae:cd:f5:fc:b8:90:23:46:aa:19:91:ad:de:46: 63:1d:b8:49:50:9c:2f:89:6a:3e:c5:72:66:79:d5: f5:c1:df:7f:96:06:6a:c1:2a:e4:a8:a0:b6:ee:f1: 19:cd:f2:6b:30:17:04:21:4d:4a:3f:88:1d:5c:e0: 86:e3:f1:81:a9:49:c0:41:0a:dc:6f:1d:1b:12:f0: 12:6b:de:37:0a:36:de:1b:cf:85:9b:d1:e9:42:be: 7d:18:d5:43:ee:a0:11:dd:9c:27:c2:a3:21:10:6c: 9e:df:eb:45:8b:f6:55:dc:7b:8b:12:cd:ba:97:ff: 12:de:76:98:fd:01:3d:b3:b8:d6:e9:09:5e:fd:f1: e7:52:00:d3:fe:3d:08:ec:c5:83:87:b1:5c:16:7a: a6:a0:39:47:6a:57:39:c7:9d:1c:e8:e1:b0:d1:94: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:19:22:1A:BD:C0:4F:81:B9:D5:20:F1:12:98:06:16:1A:A3:D3:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/dc95ed78-d536-3580-a3cd-4681085b8789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 69.60.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:10:ba:14:37:d6:d1:9b:43:2d:e6:b8:33:31:cf:fe:0e:d7: 81:f0:5b:22:fb:58:e1:80:7c:27:4b:31:8a:c2:6c:dc:f3:0c: 77:55:e8:c2:9c:c8:58:4a:29:6a:f7:24:08:fd:2b:cc:f1:2b: 9a:84:18:87:3e:40:4d:3e:7e:31:fb:c3:5e:e3:98:6c:c4:56: a1:c3:65:c8:fb:fd:4c:fe:ae:d8:5a:da:44:5b:0a:4a:ca:05: b1:e1:0d:f0:a6:0c:ca:df:5f:ce:75:46:dc:f1:7b:7c:07:20: 1d:fe:c2:aa:48:99:05:b7:cd:7f:0a:d1:93:6d:c2:b0:48:6e: 93:51:7b:f3:61:f0:ac:ed:10:ec:7d:fb:8d:d6:6c:fb:c5:e5: e1:51:3d:ad:42:da:63:b8:1d:4e:de:ba:a0:18:56:05:06:68: 3a:7c:c5:f7:95:10:e8:04:14:38:59:ef:d7:2f:83:a9:f1:3b: 0d:4f:67:98:64:e5:a4:5a:e8:e8:c8:c4:f0:5b:e7:11:08:58: 2f:fa:bb:35:6f:a6:55:8e:57:85:c8:e0:48:31:d0:3d:68:91: fa:b8:71:15:2e:82:d0:a1:ba:01:b1:8d:e5:ea:92:19:88:60: b4:dc:da:b3:57:92:03:d1:c2:4e:3e:1a:ab:c4:30:d6:9d:c2: c0:96:8a:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1+ARVPMU3FQKiXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk ZDVjYWJmZDQtNDBlNC00ODI1LTk0MjMtMThkMjBiODdjOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMYOl5w0sVhFHJUsoDykhYinmfqGSlG420De WNJmIwF2R6qPUedJ6q0F1qYI2KVX134TccQJuhiGwR+ldMBtNFmCdREdQpTeGkKO Wco5iHuOt+lz5nx/Kf9+rs31/LiQI0aqGZGt3kZjHbhJUJwviWo+xXJmedX1wd9/ lgZqwSrkqKC27vEZzfJrMBcEIU1KP4gdXOCG4/GBqUnAQQrcbx0bEvASa943Cjbe G8+Fm9HpQr59GNVD7qAR3ZwnwqMhEGye3+tFi/ZV3HuLEs26l/8S3naY/QE9s7jW 6Qle/fHnUgDT/j0I7MWDh7FcFnqmoDlHalc5x50c6OGw0ZRWaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIZIhq9wE+BudUg8RKYBhYao9P0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvZGM5NWVkNzgtZDUzNi0z NTgwLWEzY2QtNDY4MTA4NWI4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIQuhQ31tGbQy3muDMxz/4O14HwWyL7WOGAfCdLMYrCbNzzDHdV6MKc yFhKKWr3JAj9K8zxK5qEGIc+QE0+fjH7w17jmGzEVqHDZcj7/Uz+rtha2kRbCkrK BbHhDfCmDMrfX851Rtzxe3wHIB3+wqpImQW3zX8K0ZNtwrBIbpNRe/Nh8KztEOx9 +43WbPvF5eFRPa1C2mO4HU7euqAYVgUGaDp8xfeVEOgEFDhZ79cvg6nxOw1PZ5hk 5aRa6OjIxPBb5xEIWC/6uzVvplWOV4XI4Egx0D1okfq4cRUugtChugGxjeXqkhmI YLTc2rNXkgPRwk4+GqvEMNadwsCWikg= -----END CERTIFICATE-----Generated at Fri Sep 25 18:02:01 2026 by rpki-client