$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/3a95f593-e731-35cb-b93b-c968d9be4e7e.roa File: 3a95f593-e731-35cb-b93b-c968d9be4e7e.roa (raw, json) Hash identifier: F6H+tKBksItR01PxO9pf4qAWkH2WweIE9YfqeEgZ7UU= Subject key identifier: 89:1A:92:03:DB:63:3B:FE:27:FA:D2:83:4D:1C:58:71:09:04:F1:AF Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584F331D1EB829B9EB6BC37F8C30 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/3a95f593-e731-35cb-b93b-c968d9be4e7e.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 198.23.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:1e:b8:29:b9:eb:6b:c3:7f:8c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=bc1bb702-a37a-46a2-80a1-1bcdc4521af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:7e:a7:22:6a:f7:c0:95:0d:1b:e6:fa:ad: 9f:00:f5:8d:8f:60:6a:fa:31:d6:52:0c:f3:40:fd: 9b:db:49:01:90:a4:1c:5b:4e:1c:6e:7f:be:f7:b4: ff:a0:e5:18:b5:43:18:3b:12:c2:78:b1:21:f2:1a: e2:3d:2b:46:2e:44:e2:ba:91:66:87:ac:60:79:d6: 30:a9:df:54:b3:b0:dc:70:34:4e:fc:b4:94:0d:ca: 96:c3:7e:47:52:39:e7:11:05:f2:aa:52:de:3b:e5: 13:d2:9f:73:94:9e:13:8d:17:4d:30:f0:2a:d2:c5: 81:5a:b3:d0:02:1d:ac:c0:12:2b:b5:2c:fe:86:22: 6f:91:01:d0:28:85:da:c0:f8:17:ed:ae:12:1d:69: 56:44:97:9e:00:66:d9:e4:39:43:d3:f6:e2:0d:28: b7:cf:1c:b6:be:5e:63:ff:51:73:45:3d:4e:5e:6a: 05:90:4d:d3:4b:bd:dc:65:fc:6a:de:db:78:40:d0: d7:d4:e1:0d:95:7a:b0:f8:8c:b0:4f:ee:93:28:64: 02:2d:fd:51:ba:b9:05:20:a6:62:39:8d:27:25:d4: 01:c9:1e:aa:c1:f4:42:47:72:d1:8e:77:92:6c:34: e8:3b:c4:1d:7d:11:28:94:33:f8:bc:03:99:2a:b6: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1A:92:03:DB:63:3B:FE:27:FA:D2:83:4D:1C:58:71:09:04:F1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/3a95f593-e731-35cb-b93b-c968d9be4e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 198.23.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:bf:b8:ba:25:8a:60:76:78:df:ad:73:02:ab:5e:3f:72:9c: 4e:2b:8a:2c:97:53:57:57:53:f2:13:50:ef:bf:bb:a1:3b:70: e5:3e:9f:bd:82:2b:79:17:6c:f2:fc:e9:3b:66:a6:b0:93:80: 13:12:b8:31:37:aa:ee:af:39:1b:5a:4b:a1:e1:a9:62:d0:95: 63:01:53:59:e0:05:c0:6e:0e:96:54:b7:dc:d9:ac:a7:05:cb: d2:34:e0:8e:fb:b0:55:bf:c3:e8:82:68:67:8e:a3:20:83:5b: 28:c6:89:6e:5d:9b:45:ed:cc:82:97:28:ae:22:d5:38:fa:d6: 0f:d7:34:ee:f9:f3:91:80:26:24:83:ee:af:2e:cf:d7:68:14: fd:03:cc:18:07:60:c7:31:62:6e:b7:7b:a5:45:cc:60:d1:4b: dd:57:84:96:42:df:2c:bb:83:bb:0b:ad:c3:65:61:4f:e3:5a: d5:a3:35:73:82:f7:58:62:c1:a4:8e:23:41:51:35:ba:5c:45: f0:2e:5f:97:35:ba:22:87:9f:f0:02:d7:b6:1f:a8:48:88:75: 2c:1f:34:c2:e9:2e:fc:5f:56:48:71:41:cf:83:20:71:a1:a2: be:29:ce:ef:02:0d:d6:c0:7f:37:4b:16:60:2a:e6:55:d8:27: db:c5:d4:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHR64Kbnra8N/jDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk YmMxYmI3MDItYTM3YS00NmEyLTgwYTEtMWJjZGM0NTIxYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Z+pyJq98CVDRvm+q2fAPWNj2Bq+jHWUgzz QP2b20kBkKQcW04cbn++97T/oOUYtUMYOxLCeLEh8hriPStGLkTiupFmh6xgedYw qd9Us7DccDRO/LSUDcqWw35HUjnnEQXyqlLeO+UT0p9zlJ4TjRdNMPAq0sWBWrPQ Ah2swBIrtSz+hiJvkQHQKIXawPgX7a4SHWlWRJeeAGbZ5DlD0/biDSi3zxy2vl5j /1FzRT1OXmoFkE3TS73cZfxq3tt4QNDX1OENlXqw+IywT+6TKGQCLf1RurkFIKZi OY0nJdQByR6qwfRCR3LRjneSbDToO8QdfREolDP4vAOZKrZ2AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkakgPbYzv+J/rSg00cWHEJBPGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvM2E5NWY1OTMtZTczMS0z NWNiLWI5M2ItYzk2OGQ5YmU0ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu/uLolimB2eN+tcwKrXj9ynE4riiyXU1dXU/ITUO+/u6E7cOU+n72C K3kXbPL86TtmprCTgBMSuDE3qu6vORtaS6HhqWLQlWMBU1ngBcBuDpZUt9zZrKcF y9I04I77sFW/w+iCaGeOoyCDWyjGiW5dm0XtzIKXKK4i1Tj61g/XNO7585GAJiSD 7q8uz9doFP0DzBgHYMcxYm63e6VFzGDRS91XhJZC3yy7g7sLrcNlYU/jWtWjNXOC 91hiwaSOI0FRNbpcRfAuX5c1uiKHn/AC17YfqEiIdSwfNMLpLvxfVkhxQc+DIHGh or4pzu8CDdbAfzdLFmAq5lXYJ9vF1Mc= -----END CERTIFICATE-----Generated at Sun Sep 20 18:23:24 2026 by rpki-client