$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/1d7ec476-957f-3da3-a375-fa4872209277.roa File: 1d7ec476-957f-3da3-a375-fa4872209277.roa (raw, json) Hash identifier: KzRb6B+IXWoxOYJzK6LTsl22gCQxcwbAVDqWkdgoT5U= Subject key identifier: B7:11:14:D2:F2:4F:4B:47:57:0E:83:63:85:60:78:99:A8:38:8C:DC Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F6E1AFFBD5D51A63D8C1E6C00 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/1d7ec476-957f-3da3-a375-fa4872209277.roa Signing time: Thu 08 Oct 2026 04:08:46 +0000 ROA not before: Thu 08 Oct 2026 04:08:46 +0000 ROA not after: Wed 06 Jan 2027 05:08:46 +0000 asID: 7270 IP address blocks: 169.132.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6e:1a:ff:bd:5d:51:a6:3d:8c:1e:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 8 04:08:46 2026 GMT Not After : Jan 6 05:08:46 2027 GMT Subject: CN=70dfd64b-2739-477f-9a1b-19ea083a37d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:19:d8:d5:18:ff:3b:d7:df:28:00:4b:a5:a9: 54:8f:df:eb:72:20:3d:b2:b2:3c:66:e5:47:c0:01: 07:2b:68:95:35:6a:a5:3a:30:a2:7f:b8:e2:e1:12: 95:6c:9d:5e:aa:48:59:5b:b7:89:83:98:23:25:29: 3a:aa:2c:ca:ce:77:26:48:a7:17:36:31:99:d4:21: 1a:cd:bd:bf:c0:c8:5c:f2:47:5c:84:39:85:76:78: 10:8e:e7:8a:bb:3e:e9:0c:ff:15:79:f5:3b:5e:29: 74:eb:ac:fc:49:a0:10:cf:9e:e6:85:ea:0d:53:f3: dd:a9:82:e6:ae:59:8a:f4:a7:c7:0d:93:b9:3c:f4: 98:32:20:2c:65:e6:99:d6:a1:74:de:bb:8a:80:1a: 71:79:f0:4a:b8:fe:e1:65:35:36:4e:e9:87:fd:9a: ca:b4:9a:8f:60:64:7b:c5:16:49:a8:a4:77:63:e4: db:44:cf:58:92:b1:46:9e:ca:1f:87:04:82:f8:2f: ee:2e:59:f2:52:7f:97:7e:19:55:c9:16:b2:a4:d2: 23:05:ac:11:76:6f:b7:8f:bc:8f:26:41:9e:63:c9: af:1d:98:86:1d:b8:78:37:54:41:52:e1:af:d7:cc: 8b:50:90:2c:73:9e:96:18:3d:77:42:62:f3:aa:e4: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:14:D2:F2:4F:4B:47:57:0E:83:63:85:60:78:99:A8:38:8C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/1d7ec476-957f-3da3-a375-fa4872209277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 169.132.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:53:3e:4e:cc:14:8e:a1:10:33:64:7a:7e:83:a5:df:1b:81: 4b:62:94:de:e2:e9:25:5f:53:c9:f1:34:5f:82:b6:b1:f5:77: 81:94:fb:ab:41:14:09:2a:dd:41:52:b3:e6:35:96:cf:e9:d7: de:df:3a:a3:ab:7e:98:0b:df:1e:63:2f:c1:13:05:26:38:9e: 73:65:63:2d:4a:84:96:f3:46:10:02:63:2d:d7:cd:67:3b:c8: d7:a3:10:d1:be:de:fe:ff:43:38:03:23:4a:b7:bf:c5:a9:2d: 7a:2e:9e:52:3d:c9:98:8b:20:fa:93:fe:46:d2:c6:91:78:bb: 0d:3f:4c:33:97:04:da:31:c4:6f:73:0d:25:c3:96:d9:66:50: 95:6d:aa:8b:12:18:e5:ce:b9:cd:ef:9a:76:12:c0:56:6e:ae: 9f:5e:f9:99:2c:20:44:23:39:f0:b3:88:02:98:ea:fc:93:98: 35:48:5b:ef:aa:4b:2d:f1:bd:85:f6:d4:a9:d4:e3:3d:a6:b7: 58:55:55:26:ef:df:2c:6a:b4:a9:82:cc:2f:24:91:49:0c:ea: b4:d6:86:ad:de:c2:25:76:b4:2f:6b:9b:68:0d:8f:d4:07:53: 8b:31:61:78:f6:51:58:d5:de:93:24:24:2c:ec:18:64:25:bd: 92:b4:00:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9uGv+9XVGmPYwebAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MTAwODA0MDg0NloXDTI3MDEwNjA1MDg0NlowLzEtMCsGA1UEAxMk NzBkZmQ2NGItMjczOS00NzdmLTlhMWItMTllYTA4M2EzN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxnY1Rj/O9ffKABLpalUj9/rciA9srI8ZuVH wAEHK2iVNWqlOjCif7ji4RKVbJ1eqkhZW7eJg5gjJSk6qizKzncmSKcXNjGZ1CEa zb2/wMhc8kdchDmFdngQjueKuz7pDP8VefU7Xil066z8SaAQz57mheoNU/PdqYLm rlmK9KfHDZO5PPSYMiAsZeaZ1qF03ruKgBpxefBKuP7hZTU2TumH/ZrKtJqPYGR7 xRZJqKR3Y+TbRM9YkrFGnsofhwSC+C/uLlnyUn+XfhlVyRaypNIjBawRdm+3j7yP JkGeY8mvHZiGHbh4N1RBUuGv18yLUJAsc56WGD13QmLzquSL6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcRFNLyT0tHVw6DY4VgeJmoOIzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMWQ3ZWM0NzYtOTU3Zi0z ZGEzLWEzNzUtZmE0ODcyMjA5Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhTPk7MFI6hEDNken6Dpd8bgUtilN7i6SVfU8nxNF+CtrH1d4GU+6tB FAkq3UFSs+Y1ls/p197fOqOrfpgL3x5jL8ETBSY4nnNlYy1KhJbzRhACYy3XzWc7 yNejENG+3v7/QzgDI0q3v8WpLXounlI9yZiLIPqT/kbSxpF4uw0/TDOXBNoxxG9z DSXDltlmUJVtqosSGOXOuc3vmnYSwFZurp9e+ZksIEQjOfCziAKY6vyTmDVIW++q Sy3xvYX21KnU4z2mt1hVVSbv3yxqtKmCzC8kkUkM6rTWhq3ewiV2tC9rm2gNj9QH U4sxYXj2UVjV3pMkJCzsGGQlvZK0ABA= -----END CERTIFICATE-----Generated at Thu Oct 8 10:08:34 2026 by rpki-client