$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa File: 4df6fcae-809c-334c-948c-a1db49d80779.roa (raw, json) Hash identifier: pFseuFgUYF7RWRZCE3AN+CeBnHjM0tfJwWLAP8PD3TY= Subject key identifier: 20:F7:92:AB:29:80:20:29:DD:E6:99:F1:3F:69:E5:86:39:24:72:F5 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F4328584F3CE2A0D6F4C57B4795BF1800 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 62952 IP address blocks: 172.82.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a0:d6:f4:c5:7b:47:95:bf:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=18f2b47c-c20a-4595-b70a-c51935818bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:6d:63:3c:9d:06:6b:e7:cc:72:01:e9:c0: a5:20:82:04:6d:fb:00:7f:4a:fe:d7:92:7c:3b:01: 48:76:c6:d3:5e:8c:a6:51:0e:2b:73:9a:56:5c:a7: 88:e6:e7:a6:ce:e3:b4:e6:5c:9f:95:05:84:cc:8f: a2:da:e8:fa:fa:3f:a8:f5:96:4d:68:c7:ad:29:a3: 58:d2:86:b4:1e:d7:b1:2f:40:a8:ed:09:39:70:04: aa:e6:ce:a1:b6:86:9b:a6:95:67:6f:ba:4a:9d:6a: 70:fe:2c:33:4a:b6:47:68:ed:8c:1e:6b:58:70:e5: 87:11:9f:66:eb:14:d5:5c:1b:a2:e1:b4:7d:69:26: 4e:8c:f7:19:cd:01:92:c0:f7:50:11:89:27:64:22: b5:96:69:7a:94:c9:19:2a:6e:54:b0:d3:22:4c:63: e4:72:45:a2:82:36:80:58:1b:d4:65:cc:11:bf:25: 3a:f9:c9:b7:b3:c1:8b:f2:c2:c1:f6:b5:62:96:05: a4:c6:d0:9b:64:9e:c0:ea:11:f0:fc:42:85:12:a6: 6c:fb:61:23:f4:94:11:84:ee:3f:16:f1:7f:94:30: 2c:35:62:b1:40:a7:5c:2a:fd:f3:b4:00:9c:14:b0: 86:4b:a2:0a:04:41:66:bc:c7:be:d7:b3:7c:61:72: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F7:92:AB:29:80:20:29:DD:E6:99:F1:3F:69:E5:86:39:24:72:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: 172.82.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:53:3b:a0:0b:b4:51:81:15:2e:58:e6:f9:bb:8d:9d:ef:88: 88:b5:3a:3c:27:2d:f6:45:d0:b0:93:93:d8:bc:f4:12:a1:2c: 2f:3c:83:4b:57:30:1b:0f:13:9b:64:11:32:f1:87:7b:9d:66: ee:8a:3a:79:66:93:64:16:6e:43:c6:18:9c:3e:0f:a7:09:05: 78:90:5f:36:03:6e:fb:51:59:53:6e:1d:d2:36:38:7a:05:36: 27:54:31:9d:f2:f1:c1:7a:d2:16:7c:4c:eb:a4:7d:03:05:09: 88:7b:40:cd:39:f1:2a:2d:db:f3:07:0d:51:89:7b:a4:a2:d5: ec:2a:f2:c6:43:ca:c8:fc:7d:77:b4:f7:b9:6e:e9:d0:de:43: 4d:52:1f:3d:55:fb:ca:00:97:28:81:52:08:4b:3a:2a:20:2c: 1e:24:32:4b:d3:e0:aa:02:c5:33:8e:c0:ef:f3:60:29:cc:1c: 59:c6:59:94:c5:66:8f:fb:9f:86:7a:d2:23:12:90:e9:2b:ca: b5:97:61:08:c3:ef:84:1e:a1:5a:7b:c5:a3:95:50:db:f0:9f: 3f:2b:12:de:7d:60:a5:25:a8:18:e1:bb:8c:58:1e:51:16:b8: 7f:ab:58:43:68:2b:ee:f3:d2:f2:4a:96:09:a4:7c:72:2c:18: e0:9b:68:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qDW9MV7R5W/GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MThmMmI0N2MtYzIwYS00NTk1LWI3MGEtYzUxOTM1ODE4YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSVtYzydBmvnzHIB6cClIIIEbfsAf0r+15J8 OwFIdsbTXoymUQ4rc5pWXKeI5uemzuO05lyflQWEzI+i2uj6+j+o9ZZNaMetKaNY 0oa0HtexL0Co7Qk5cASq5s6htoabppVnb7pKnWpw/iwzSrZHaO2MHmtYcOWHEZ9m 6xTVXBui4bR9aSZOjPcZzQGSwPdQEYknZCK1lml6lMkZKm5UsNMiTGPkckWigjaA WBvUZcwRvyU6+cm3s8GL8sLB9rVilgWkxtCbZJ7A6hHw/EKFEqZs+2Ej9JQRhO4/ FvF/lDAsNWKxQKdcKv3ztACcFLCGS6IKBEFmvMe+17N8YXJFHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD3kqspgCAp3eaZ8T9p5YY5JHL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvNGRmNmZjYWUtODA5Yy0z MzRjLTk0OGMtYTFkYjQ5ZDgwNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVTO6ALtFGBFS5Y5vm7jZ3viIi1OjwnLfZF0LCTk9i89BKhLC88g0tX MBsPE5tkETLxh3udZu6KOnlmk2QWbkPGGJw+D6cJBXiQXzYDbvtRWVNuHdI2OHoF NidUMZ3y8cF60hZ8TOukfQMFCYh7QM058Sot2/MHDVGJe6Si1ewq8sZDysj8fXe0 97lu6dDeQ01SHz1V+8oAlyiBUghLOiogLB4kMkvT4KoCxTOOwO/zYCnMHFnGWZTF Zo/7n4Z60iMSkOkryrWXYQjD74QeoVp7xaOVUNvwnz8rEt59YKUlqBjhu4xYHlEW uH+rWENoK+7z0vJKlgmkfHIsGOCbaOo= -----END CERTIFICATE-----Generated at Tue Sep 22 20:19:58 2026 by rpki-client