$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa File: 1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa (raw, json) Hash identifier: bwak1ARSAJ4Dhwhh18ndfhlX+W81x6L4/SPqiRmqeSQ= Subject key identifier: 32:F8:D3:BB:76:7B:BF:75:9B:D3:AD:19:F6:99:DA:92:DA:F0:2D:7C Certificate issuer: /CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f Certificate serial: 010D0C9F4328584EF87CBA732EC8CE4E5DD1E980 Authority key identifier: 19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 397553 IP address blocks: 172.111.60.0/22 maxlen: 22 172.111.60.0/24 maxlen: 24 172.111.61.0/24 maxlen: 24 172.111.62.0/24 maxlen: 24 172.111.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:ba:73:2e:c8:ce:4e:5d:d1:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=7d016102-5942-4eb2-aff8-31018362d692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:79:10:34:4c:0a:5e:27:c2:97:bf:1f:a8:65: 3a:56:f2:98:9d:c1:4d:b0:cc:13:f5:0e:b2:90:86: 82:14:81:84:e5:d4:7e:0e:7a:9a:e0:25:64:be:db: 33:b7:62:e5:6f:db:25:4c:89:29:c3:4e:21:fd:4c: dc:55:94:71:5a:29:31:42:b7:3c:b9:f7:80:5f:9a: ca:ce:1e:30:cf:06:bd:3d:9b:4f:e0:99:0c:79:6a: a6:3d:0c:59:67:a1:76:58:08:bf:33:19:7e:ff:4e: 22:3e:dd:1d:0c:2a:70:b8:7f:14:80:09:70:0e:39: e7:92:7c:54:5e:e4:47:96:ef:84:6e:81:1b:28:f8: 4f:b8:1d:17:4c:dc:bf:83:c2:3e:0f:b3:27:d2:cb: 7f:ac:31:31:e6:d2:27:d9:17:f2:dc:9d:f2:be:21: 1b:72:73:1b:88:9c:fb:7b:71:77:d0:3f:d4:04:bb: 49:9f:d8:f9:3d:ba:5d:f0:e6:9f:4c:7f:fe:05:53: c0:4b:10:23:ea:68:85:72:6d:86:93:7c:4a:21:e8: 70:41:27:64:88:9d:4f:c7:e6:f9:29:62:12:ce:89: 84:f1:37:3b:0f:63:19:9d:fd:3d:7a:af:9f:4b:e4: 7a:c5:5a:e8:f3:c3:e4:18:c9:84:83:7f:7e:e9:fb: 93:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F8:D3:BB:76:7B:BF:75:9B:D3:AD:19:F6:99:DA:92:DA:F0:2D:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl X509v3 Authority Key Identifier: keyid:19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer sbgp-ipAddrBlock: critical IPv4: 172.111.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e1:a5:d2:23:8c:25:3e:b7:f8:fb:c6:7f:2d:53:d9:a3:cb: dc:7d:ee:5e:54:b4:55:02:5c:75:23:e8:2d:c3:de:47:fd:ea: bc:e9:b2:51:6c:68:17:5c:d5:7f:d3:47:cc:6e:c3:68:77:bc: 64:1d:0c:f7:a2:97:56:8c:b8:6b:fe:5d:46:c4:ad:f1:d5:ae: 3d:98:74:5c:88:46:a3:83:7c:94:d3:21:67:e9:9a:44:58:e9: a5:c9:75:fd:a6:71:fe:99:0c:8b:a0:54:2c:ea:50:4b:53:0a: 45:21:87:c7:8c:0c:c4:89:56:2f:1d:ab:fc:7a:74:85:31:74: 8d:21:bf:db:96:23:f9:12:c1:d2:f7:df:3b:e9:25:c7:65:1a: 80:c4:f2:40:6b:ef:cc:8b:c4:2e:ab:b3:67:48:96:73:60:0d: 95:4e:ab:5a:3e:8f:63:be:8c:a0:65:c0:ed:d0:51:cb:f8:5a: 1a:b7:da:a2:89:ac:4f:ef:9d:74:e7:01:6f:87:07:a2:92:fc: 1e:81:7f:0d:53:10:96:98:d0:d6:c4:bc:ba:f6:d5:59:d8:ac: 9d:ce:bb:67:88:a5:5e:18:78:3f:cc:e3:07:c1:e7:34:0e:4e: 36:5b:22:65:45:7b:a9:d3:8d:92:b8:40:b5:8f:cc:aa:4e:11: 27:50:94:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLpzLsjOTl3R6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTY2NWZmNjAtNTQ3Ny00ZjdiLWFmZTYtMzUwYzJmZDVh ZjhmMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk N2QwMTYxMDItNTk0Mi00ZWIyLWFmZjgtMzEwMTgzNjJkNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3kQNEwKXifCl78fqGU6VvKYncFNsMwT9Q6y kIaCFIGE5dR+Dnqa4CVkvtszt2Llb9slTIkpw04h/UzcVZRxWikxQrc8ufeAX5rK zh4wzwa9PZtP4JkMeWqmPQxZZ6F2WAi/Mxl+/04iPt0dDCpwuH8UgAlwDjnnknxU XuRHlu+EboEbKPhPuB0XTNy/g8I+D7Mn0st/rDEx5tIn2Rfy3J3yviEbcnMbiJz7 e3F30D/UBLtJn9j5Pbpd8OafTH/+BVPASxAj6miFcm2Gk3xKIehwQSdkiJ1Px+b5 KWISzomE8Tc7D2MZnf09eq+fS+R6xVro88PkGMmEg39+6fuTvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL407t2e791m9OtGfaZ2pLa8C18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNjY1 ZmY2MC01NDc3LTRmN2ItYWZlNi0zNTBjMmZkNWFmOGYvMWFkMzE4NTktMmU5ZC0z MTU5LTgxZTAtOGRjYzdhMjFlOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTY2NWZmNjAtNTQ3Ny00ZjdiLWFm ZTYtMzUwYzJmZDVhZjhmLzE2NjVmZjYwLTU0NzctNGY3Yi1hZmU2LTM1MGMyZmQ1 YWY4Zi5jcmwwHwYDVR0jBBgwFoAUGQdZZtQpW7do6cewWgstMn5Gqq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNjY1ZmY2MC01NDc3LTRmN2ItYWZlNi0zNTBj MmZkNWFmOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfhpdIjjCU+t/j7xn8tU9mjy9x97l5UtFUCXHUj6C3D3kf96rzpslFs aBdc1X/TR8xuw2h3vGQdDPeil1aMuGv+XUbErfHVrj2YdFyIRqODfJTTIWfpmkRY 6aXJdf2mcf6ZDIugVCzqUEtTCkUhh8eMDMSJVi8dq/x6dIUxdI0hv9uWI/kSwdL3 3zvpJcdlGoDE8kBr78yLxC6rs2dIlnNgDZVOq1o+j2O+jKBlwO3QUcv4Whq32qKJ rE/vnXTnAW+HB6KS/B6Bfw1TEJaY0NbEvLr21VnYrJ3Ou2eIpV4YeD/M4wfB5zQO TjZbImVFe6nTjZK4QLWPzKpOESdQlIE= -----END CERTIFICATE-----Generated at Sat Oct 3 06:26:41 2026 by rpki-client