$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b60cba20-1a9a-3ab8-b15c-c03bacc5ad30.roa File: b60cba20-1a9a-3ab8-b15c-c03bacc5ad30.roa (raw, json) Hash identifier: BRg11OdT2nlpxPhtNJ4A3VjhXggTHJp9HO5n3xIlROE= Subject key identifier: 42:72:6D:42:00:CD:30:4C:08:80:F7:7D:AF:8D:7B:0C:90:72:35:91 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584F06723E1DC5DA1C3AF35E3640 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b60cba20-1a9a-3ab8-b15c-c03bacc5ad30.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 35911 IP address blocks: 209.226.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:3e:1d:c5:da:1c:3a:f3:5e:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=f00a6fca-6e7c-4228-80c6-59b1e5ee4ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:8e:fe:f4:5e:83:f4:14:0c:7c:db:a9:6d: 67:af:f0:8e:37:c5:73:17:3f:66:8a:15:94:07:c9: 25:f2:cf:03:b4:50:b8:dc:3c:54:8b:7d:fb:45:00: 07:cb:b8:e6:a9:45:a8:3b:b6:52:20:59:a7:3d:24: fd:c1:a7:af:c2:e8:a6:32:ce:9e:b8:51:43:a8:ed: ea:ea:ad:c4:6d:ea:04:3c:2c:d3:1b:d2:34:06:3a: f9:58:3b:5b:fc:53:f7:0e:b3:26:42:02:bf:2f:50: de:ca:ea:46:d4:7e:2c:88:a4:8a:24:ef:03:1a:4a: 2a:6b:fe:54:9a:12:88:55:06:bc:a4:a7:4f:e2:e6: eb:8f:61:f5:9c:e0:25:d0:c6:25:86:fb:00:58:19: 43:39:17:7e:8e:45:d4:be:da:87:33:68:5b:2e:d9: e3:29:bc:2e:bf:d5:f1:e6:5f:5f:66:0f:f4:38:dc: db:49:c0:0e:44:6c:6d:32:7e:4c:72:f4:8a:4f:8a: ef:90:b8:c4:0e:64:73:b5:10:1f:b9:dd:61:b7:3b: 28:ef:1e:2e:3e:ec:94:88:2d:40:b2:c1:70:bf:fc: 13:f2:42:e7:f4:dc:ef:15:c6:d3:6a:6d:e8:83:48: 42:2f:8e:59:d3:55:f8:b0:e3:10:d0:08:77:21:85: a0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:72:6D:42:00:CD:30:4C:08:80:F7:7D:AF:8D:7B:0C:90:72:35:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b60cba20-1a9a-3ab8-b15c-c03bacc5ad30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 209.226.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:28:06:f8:39:bd:ce:00:8c:60:bb:cf:3c:6c:73:73:a7:1c: 65:4d:e1:3d:f3:ed:66:81:2e:9f:39:c8:ff:b7:e3:7f:19:fd: c4:cd:de:77:69:de:94:8f:03:fb:8e:72:41:21:30:b2:ec:76: c5:8b:2b:0d:5b:2d:05:fd:aa:a7:83:b8:5b:64:6c:c4:ba:6d: 5d:16:5b:ef:32:5d:52:a3:bf:30:68:bd:78:73:1f:40:c3:0e: ce:7c:96:94:80:eb:1e:57:b7:ed:ab:08:c0:a4:58:e5:32:53: 8a:ea:e9:99:50:3f:7d:cd:03:ee:fd:cd:87:a4:4b:0a:32:ed: d0:b3:65:3a:8e:55:cd:96:81:23:2d:a8:3e:ef:e8:0e:2b:e1: 1b:33:03:b1:9c:f5:67:1d:b3:2c:ae:e7:7d:7f:e5:6c:f6:68: 66:cc:ea:81:48:0f:80:a8:71:c3:2a:b0:8b:c0:23:69:15:5d: 87:51:2d:24:ae:db:d5:26:02:ad:bc:0d:04:23:7d:93:27:2b: 05:ca:de:07:83:93:6f:0c:62:ee:ee:f3:78:b7:d9:00:03:ca: 4e:7e:57:f1:17:d4:e5:d8:d5:e4:a8:02:c7:7c:4e:fc:5e:02: fd:a5:87:01:9a:6b:ea:b7:de:cd:c2:25:57:29:c6:bb:04:d3: 71:2b:d0:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gcj4dxdocOvNeNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjAwYTZmY2EtNmU3Yy00MjI4LTgwYzYtNTliMWU1ZWU0ZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3CO/vReg/QUDHzbqW1nr/CON8VzFz9mihWU B8kl8s8DtFC43DxUi337RQAHy7jmqUWoO7ZSIFmnPST9waevwuimMs6euFFDqO3q 6q3EbeoEPCzTG9I0Bjr5WDtb/FP3DrMmQgK/L1DeyupG1H4siKSKJO8DGkoqa/5U mhKIVQa8pKdP4ubrj2H1nOAl0MYlhvsAWBlDORd+jkXUvtqHM2hbLtnjKbwuv9Xx 5l9fZg/0ONzbScAORGxtMn5McvSKT4rvkLjEDmRztRAfud1htzso7x4uPuyUiC1A ssFwv/wT8kLn9NzvFcbTam3og0hCL45Z01X4sOMQ0Ah3IYWgvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJybUIAzTBMCID3fa+NewyQcjWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjYwY2JhMjAtMWE5YS0z YWI4LWIxNWMtYzAzYmFjYzVhZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0eIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsoBvg5vc4AjGC7zzxsc3OnHGVN4T3z7WaBLp85yP+3438Z/cTN3ndp 3pSPA/uOckEhMLLsdsWLKw1bLQX9qqeDuFtkbMS6bV0WW+8yXVKjvzBovXhzH0DD Ds58lpSA6x5Xt+2rCMCkWOUyU4rq6ZlQP33NA+79zYekSwoy7dCzZTqOVc2WgSMt qD7v6A4r4RszA7Gc9Wcdsyyu531/5Wz2aGbM6oFID4CoccMqsIvAI2kVXYdRLSSu 29UmAq28DQQjfZMnKwXK3geDk28MYu7u83i32QADyk5+V/EX1OXY1eSoAsd8Tvxe Av2lhwGaa+q33s3CJVcpxrsE03Er0Fw= -----END CERTIFICATE-----Generated at Sat Oct 10 14:23:32 2026 by rpki-client