$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/00609a35-bead-30ca-9315-4eb627491d30.roa File: 00609a35-bead-30ca-9315-4eb627491d30.roa (raw, json) Hash identifier: +QopIV2o6FrUIk/1gWmiEtm6stegtlPcZD+bipLA7eU= Subject key identifier: DD:1A:30:13:16:6B:2D:DB:7D:D3:FB:48:11:F3:B3:A5:50:48:78:35 Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Certificate serial: 010D0C9F4328584D7F9A7D0D7004480676CDB100 Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/00609a35-bead-30ca-9315-4eb627491d30.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 20326 IP address blocks: 67.209.52.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:7d:0d:70:04:48:06:76:cd:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=e4e3eeff-d417-47ea-a8d5-091d3479f404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:d0:c0:70:cf:be:84:71:52:d8:b3:a5:f2: 20:84:91:d2:80:70:50:b6:d4:52:bc:83:71:db:87: 6b:34:8b:49:55:4b:55:c1:6f:4f:99:a2:99:d4:c7: 05:91:21:19:02:e2:85:04:85:53:a3:2e:6d:0d:c1: e3:ec:ff:8f:22:8c:78:b7:80:0f:f4:4e:f4:8a:45: de:73:7c:8f:f8:86:70:ec:71:b0:ec:65:f1:76:b1: fc:47:27:84:90:f1:4c:99:37:94:56:92:12:d8:d8: 61:5a:e0:89:df:0f:3d:4b:19:f9:54:a8:03:fe:b2: e8:06:26:57:60:c0:c8:46:20:9d:6c:bd:67:d8:60: 07:b4:77:84:84:63:e7:93:51:04:37:08:50:96:1e: 0d:e6:58:9f:c0:c4:8d:b3:44:a7:a0:b9:a9:8f:d0: 10:87:00:3e:a4:c2:7d:30:69:f5:bb:27:cc:a0:f9: d6:66:1c:4f:59:b4:24:a9:ab:5b:8f:7c:d6:d1:c7: 37:ba:8c:9a:ed:e4:dd:e8:d9:de:68:54:5c:61:45: 4a:e0:c4:3e:f4:ad:1e:e0:09:ab:38:01:51:0a:9d: 04:52:17:22:73:30:a8:e4:d4:51:da:23:b6:fb:50: 4b:82:50:f4:a0:84:54:f1:7f:98:22:d6:a7:b0:36: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1A:30:13:16:6B:2D:DB:7D:D3:FB:48:11:F3:B3:A5:50:48:78:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/00609a35-bead-30ca-9315-4eb627491d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl X509v3 Authority Key Identifier: keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer sbgp-ipAddrBlock: critical IPv4: 67.209.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:18:46:8f:52:eb:fa:e5:4f:21:8c:f1:e2:14:ca:8e:d1:42: 97:1d:aa:52:88:ea:6c:f3:91:e0:ce:3a:9a:b5:af:eb:17:22: 70:3a:31:4a:be:71:8c:56:ea:0e:c6:71:ee:11:24:75:a3:61: 0d:a5:9e:9e:eb:9f:83:d9:a9:a3:ca:8b:1b:ab:e7:be:38:9d: b4:b7:92:cc:e9:62:49:87:b1:a6:1d:95:66:61:9d:fc:5f:e8: 9c:e4:0e:48:09:05:f1:af:45:9d:34:f6:39:5c:41:41:ce:98: 32:19:0c:5a:ac:be:8f:8a:8b:7e:a7:bf:6f:61:2b:02:9a:cc: 93:d8:b0:04:b7:bb:b2:67:20:73:98:a7:07:7d:de:a3:c3:54: 02:8c:b2:50:94:33:fa:0a:16:4c:23:1b:79:7b:2e:cf:5c:45: 74:f7:8d:6c:a3:c4:61:37:79:41:36:75:72:c5:d0:4b:93:05: 39:81:be:f9:6b:1d:74:45:21:0a:ca:34:78:53:8f:ec:bb:5c: 50:f3:d9:5b:52:ee:c9:7f:97:6e:79:39:65:20:97:09:19:5a: 77:84:42:3a:52:06:d7:52:34:df:dd:15:68:f1:5b:48:e7:6a: fe:2f:11:cc:30:60:6c:11:a2:cf:bd:ce:84:d6:a9:87:7a:a6: 18:9d:52:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mn0NcARIBnbNsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwYjRjMzgtMmNhNi00ZWRkLTgwZWYtMTE3M2E4ZDdl Zjg2MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZTRlM2VlZmYtZDQxNy00N2VhLWE4ZDUtMDkxZDM0NzlmNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ/QwHDPvoRxUtizpfIghJHSgHBQttRSvINx 24drNItJVUtVwW9PmaKZ1McFkSEZAuKFBIVToy5tDcHj7P+PIox4t4AP9E70ikXe c3yP+IZw7HGw7GXxdrH8RyeEkPFMmTeUVpIS2NhhWuCJ3w89Sxn5VKgD/rLoBiZX YMDIRiCdbL1n2GAHtHeEhGPnk1EENwhQlh4N5lifwMSNs0SnoLmpj9AQhwA+pMJ9 MGn1uyfMoPnWZhxPWbQkqatbj3zW0cc3uoya7eTd6NneaFRcYUVK4MQ+9K0e4Amr OAFRCp0EUhciczCo5NRR2iO2+1BLglD0oIRU8X+YItansDZ3cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0aMBMWay3bfdP7SBHzs6VQSHg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NjBi NGMzOC0yY2E2LTRlZGQtODBlZi0xMTczYThkN2VmODYvMDA2MDlhMzUtYmVhZC0z MGNhLTkzMTUtNGViNjI3NDkxZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODYwYjRjMzgtMmNhNi00ZWRkLTgw ZWYtMTE3M2E4ZDdlZjg2Lzg2MGI0YzM4LTJjYTYtNGVkZC04MGVmLTExNzNhOGQ3 ZWY4Ni5jcmwwHwYDVR0jBBgwFoAUnBoKe0BtQfxOmXCKeMmGhJl8eI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NjBiNGMzOC0yY2E2LTRlZGQtODBlZi0xMTcz YThkN2VmODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9E0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgYRo9S6/rlTyGM8eIUyo7RQpcdqlKI6mzzkeDOOpq1r+sXInA6MUq+ cYxW6g7Gce4RJHWjYQ2lnp7rn4PZqaPKixur5744nbS3kszpYkmHsaYdlWZhnfxf 6JzkDkgJBfGvRZ009jlcQUHOmDIZDFqsvo+Ki36nv29hKwKazJPYsAS3u7JnIHOY pwd93qPDVAKMslCUM/oKFkwjG3l7Ls9cRXT3jWyjxGE3eUE2dXLF0EuTBTmBvvlr HXRFIQrKNHhTj+y7XFDz2VtS7sl/l255OWUglwkZWneEQjpSBtdSNN/dFWjxW0jn av4vEcwwYGwRos+9zoTWqYd6phidUsc= -----END CERTIFICATE-----Generated at Fri Apr 17 14:29:30 2026 by rpki-client