$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa File: e7af233e-fa26-3293-bcf8-b64f71a0e384.roa (raw, json) Hash identifier: lr2pOWThUjdD6oE2FRTgfZCQttNKrBaGo0m+RTtfLfY= Subject key identifier: FA:8F:DD:FC:6D:6A:73:B3:E0:58:C0:97:DE:53:B3:0A:E5:63:54:41 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584F067222626581CEA19BB02520 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 33017 IP address blocks: 207.61.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:22:62:65:81:ce:a1:9b:b0:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=47111b27-73b3-497c-88a1-06f103cc16d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a3:e9:4c:28:4b:50:ff:b8:5b:0f:7e:4d:bc: 15:38:60:15:51:79:09:7c:31:1e:e5:2e:20:66:5b: 0b:f9:c0:d1:3f:ab:ca:01:58:67:bd:7b:fb:36:a9: ec:66:e4:3c:04:48:96:0e:8f:86:55:da:d0:ae:f3: 4b:49:3a:85:2d:9a:b5:29:ab:aa:09:52:af:56:8a: 2f:b4:d7:73:e5:d9:06:2d:bd:34:e0:cc:10:c1:bb: a9:c2:44:29:f5:f3:6b:cf:78:a5:cb:bf:16:ff:07: 3b:c8:63:7d:3d:bd:26:bc:b6:01:4c:67:ee:e1:8e: 6e:88:ee:35:f0:16:e0:6a:fc:06:9e:75:ed:30:e4: 58:81:3f:1c:f4:0e:f8:f1:08:34:ee:52:ee:a5:ae: 3d:a3:e5:fc:56:62:4e:c4:3d:f5:c4:07:e7:95:81: 90:e2:2d:b9:94:35:61:b9:e3:04:04:58:82:fc:c2: b1:46:5a:b0:97:bf:92:0d:e4:e8:5c:38:00:cd:14: e6:81:b4:aa:ed:c0:2a:66:43:68:71:00:ab:ca:35: 41:77:b1:d2:83:f6:d7:9d:32:06:1d:af:5f:0d:dc: 47:fb:5a:8d:e9:0a:4c:f4:27:e0:52:a8:ad:d5:e6: 58:10:02:14:b8:0f:c6:96:f1:e2:eb:4b:8a:18:00: d2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8F:DD:FC:6D:6A:73:B3:E0:58:C0:97:DE:53:B3:0A:E5:63:54:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 207.61.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f0:ef:b8:1d:ff:83:59:4e:ac:75:85:d9:5d:79:be:b0:d6: a5:f1:57:4a:36:db:0e:16:17:5e:ad:49:61:92:6f:2a:35:4a: 04:a2:f2:91:5a:6e:ad:97:68:81:25:5c:ec:09:50:2a:20:23: 14:90:93:b6:68:96:b4:d8:fe:94:af:24:50:b3:8f:11:bc:82: 2f:06:ba:8d:84:32:0e:1f:89:40:03:71:22:9e:1e:9a:c4:df: 00:59:29:43:36:44:2b:65:f8:fe:dc:08:95:0e:6a:09:55:c9: 4b:dd:23:a4:10:ac:b2:e4:3c:a2:2e:12:e9:e8:b3:9b:1e:3e: e2:75:82:36:76:b4:45:1e:09:e0:a0:4b:b4:71:c3:e5:76:4a: 16:cf:ce:0e:be:b3:39:38:ed:7a:f3:d5:70:a7:ae:5a:13:13: be:15:87:1f:72:5a:1f:0c:f7:7d:a0:74:07:a0:f6:c4:de:bc: c2:e0:7b:3e:51:9b:e3:e5:60:69:83:9e:14:38:f9:bd:55:19: 4b:70:a7:36:90:35:67:01:96:8d:a8:28:c0:25:f7:5c:78:fe: 37:64:fa:ec:25:4b:f0:93:d9:3c:e4:ce:2a:b7:85:a3:8e:23: b3:76:5b:15:a1:0d:16:ab:8c:6f:b6:eb:45:f1:0b:47:43:70: 2f:7e:3d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GciJiZYHOoZuwJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDcxMTFiMjctNzNiMy00OTdjLTg4YTEtMDZmMTAzY2MxNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaPpTChLUP+4Ww9+TbwVOGAVUXkJfDEe5S4g ZlsL+cDRP6vKAVhnvXv7NqnsZuQ8BEiWDo+GVdrQrvNLSTqFLZq1KauqCVKvVoov tNdz5dkGLb004MwQwbupwkQp9fNrz3ily78W/wc7yGN9Pb0mvLYBTGfu4Y5uiO41 8BbgavwGnnXtMORYgT8c9A748Qg07lLupa49o+X8VmJOxD31xAfnlYGQ4i25lDVh ueMEBFiC/MKxRlqwl7+SDeToXDgAzRTmgbSq7cAqZkNocQCryjVBd7HSg/bXnTIG Ha9fDdxH+1qN6QpM9CfgUqit1eZYEAIUuA/GlvHi60uKGADSWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqP3fxtanOz4FjAl95TswrlY1RBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZTdhZjIzM2UtZmEyNi0z MjkzLWJjZjgtYjY0ZjcxYTBlMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzz08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbw77gd/4NZTqx1hdldeb6w1qXxV0o22w4WF16tSWGSbyo1SgSi8pFa bq2XaIElXOwJUCogIxSQk7ZolrTY/pSvJFCzjxG8gi8Guo2EMg4fiUADcSKeHprE 3wBZKUM2RCtl+P7cCJUOaglVyUvdI6QQrLLkPKIuEunos5sePuJ1gjZ2tEUeCeCg S7Rxw+V2ShbPzg6+szk47Xrz1XCnrloTE74Vhx9yWh8M932gdAeg9sTevMLgez5R m+PlYGmDnhQ4+b1VGUtwpzaQNWcBlo2oKMAl91x4/jdk+uwlS/CT2Tzkziq3haOO I7N2WxWhDRarjG+260XxC0dDcC9+PXE= -----END CERTIFICATE-----Generated at Mon Sep 28 20:46:31 2026 by rpki-client