$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa File: a569e485-6b37-3b02-a56e-74b826b6659a.roa (raw, json) Hash identifier: br3x9DgpI72MEtVQ3wkJJ6ezsI0muTphO28RvgsGylw= Subject key identifier: EE:7B:01:C2:37:A8:A7:AD:34:3E:43:17:23:70:9C:DB:8D:D6:22:34 Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Certificate serial: 010D0C9F4328584F20F7AC2CFD252BAEE84A2080 Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20326 IP address blocks: 208.91.104.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ac:2c:fd:25:2b:ae:e8:4a:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=778a4ff2-5082-4a44-b0c2-53b0ca527f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:f8:08:83:ec:07:4c:22:de:77:71:f5:12: 34:75:16:8c:cf:c7:b3:d9:b0:3f:50:30:f6:d8:5d: 6c:5a:16:9b:f8:a3:c0:0f:21:a9:4d:7c:19:96:84: 5a:67:62:57:28:09:0e:2a:d7:33:6e:d5:38:a7:cd: cd:4f:0a:d1:18:68:0b:0e:ef:7d:7b:18:ea:ca:f9: 14:92:e5:da:7b:4e:b4:14:96:17:ff:78:cc:e1:26: 3a:dc:e6:9d:db:be:10:39:53:ed:2c:00:f4:20:4d: 3a:59:1f:d8:52:76:d5:17:bd:bb:ec:14:81:fe:cf: 41:b9:b2:9e:18:9e:fd:9e:a9:55:bd:ca:d6:14:69: 69:8c:bc:8b:1d:b2:c2:e1:03:d1:9a:92:2e:59:e4: b5:94:ef:69:84:17:e3:1c:81:9b:bd:1f:14:6b:d6: d7:e2:b9:43:fe:89:d5:d4:15:86:12:18:89:f5:2b: 39:8b:dd:6e:af:c1:95:1b:c0:5d:83:0a:02:5c:a3: 30:f8:fb:b7:cf:0e:48:98:ed:bb:eb:25:7f:ed:a7: a2:eb:f9:7d:27:5d:39:83:89:23:3f:11:ca:9d:a1: ae:73:eb:e1:fa:b7:a4:1d:df:28:15:f3:af:b2:ea: c2:26:f9:60:fc:58:16:44:b0:d7:13:f4:da:ef:be: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7B:01:C2:37:A8:A7:AD:34:3E:43:17:23:70:9C:DB:8D:D6:22:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl X509v3 Authority Key Identifier: keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer sbgp-ipAddrBlock: critical IPv4: 208.91.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:34:d8:51:5b:8c:16:67:df:36:74:43:4f:91:27:1e:1c:4b: d4:31:9d:e2:ad:34:e5:7f:43:4e:cc:97:a9:d4:3a:a5:6d:f6: 51:2e:99:ac:ba:00:bc:d1:e6:d4:cd:47:d6:47:15:39:37:6e: 76:7a:07:f5:b6:4e:79:6b:fe:96:b1:9e:ea:7f:42:02:ce:f1: 00:51:7b:36:39:b2:d2:96:1e:42:3a:0a:f2:ee:12:5e:d5:d1: 58:0e:76:c9:a5:83:85:6a:7c:00:f3:8c:3f:7b:28:d9:16:20: 34:8c:9f:08:bd:e1:0a:d8:07:b6:e2:20:cd:ea:31:72:8f:ef: 28:d0:3f:7f:39:02:3e:c8:16:bb:91:3c:2f:59:cc:e7:d0:5d: 56:b6:85:5b:f1:f8:ac:71:2d:6e:96:34:9e:a6:7d:5f:53:7c: 1c:06:00:99:f6:9b:41:cc:3b:6e:af:1f:0c:4a:62:95:7f:5e: ab:6e:2f:9a:d2:33:51:31:dd:00:d1:c1:91:5c:76:e3:29:ed: 60:30:c6:c1:b4:27:54:35:14:0f:13:dc:56:95:91:5f:90:c0: c0:f8:19:4f:c2:d1:ce:d9:b5:2f:47:cc:06:db:9f:4e:3e:ab: 50:d1:45:79:d4:7a:44:8c:40:0d:51:75:92:41:24:7a:4f:d0: ef:55:fe:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96ws/SUrruhKIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwYjRjMzgtMmNhNi00ZWRkLTgwZWYtMTE3M2E4ZDdl Zjg2MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk Nzc4YTRmZjItNTA4Mi00YTQ0LWIwYzItNTNiMGNhNTI3ZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY/4CIPsB0wi3ndx9RI0dRaMz8ez2bA/UDD2 2F1sWhab+KPADyGpTXwZloRaZ2JXKAkOKtczbtU4p83NTwrRGGgLDu99exjqyvkU kuXae060FJYX/3jM4SY63Oad274QOVPtLAD0IE06WR/YUnbVF7277BSB/s9BubKe GJ79nqlVvcrWFGlpjLyLHbLC4QPRmpIuWeS1lO9phBfjHIGbvR8Ua9bX4rlD/onV 1BWGEhiJ9Ss5i91ur8GVG8BdgwoCXKMw+Pu3zw5ImO276yV/7aei6/l9J105g4kj PxHKnaGuc+vh+rekHd8oFfOvsurCJvlg/FgWRLDXE/Ta775JpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO57AcI3qKetND5DFyNwnNuN1iI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NjBi NGMzOC0yY2E2LTRlZGQtODBlZi0xMTczYThkN2VmODYvYTU2OWU0ODUtNmIzNy0z YjAyLWE1NmUtNzRiODI2YjY2NTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODYwYjRjMzgtMmNhNi00ZWRkLTgw ZWYtMTE3M2E4ZDdlZjg2Lzg2MGI0YzM4LTJjYTYtNGVkZC04MGVmLTExNzNhOGQ3 ZWY4Ni5jcmwwHwYDVR0jBBgwFoAUnBoKe0BtQfxOmXCKeMmGhJl8eI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NjBiNGMzOC0yY2E2LTRlZGQtODBlZi0xMTcz YThkN2VmODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU02FFbjBZn3zZ0Q0+RJx4cS9QxneKtNOV/Q07Ml6nUOqVt9lEumay6 ALzR5tTNR9ZHFTk3bnZ6B/W2Tnlr/paxnup/QgLO8QBRezY5stKWHkI6CvLuEl7V 0VgOdsmlg4VqfADzjD97KNkWIDSMnwi94QrYB7biIM3qMXKP7yjQP385Aj7IFruR PC9ZzOfQXVa2hVvx+KxxLW6WNJ6mfV9TfBwGAJn2m0HMO26vHwxKYpV/XqtuL5rS M1Ex3QDRwZFcduMp7WAwxsG0J1Q1FA8T3FaVkV+QwMD4GU/C0c7ZtS9HzAbbn04+ q1DRRXnUekSMQA1RdZJBJHpP0O9V/rk= -----END CERTIFICATE-----Generated at Sun Sep 20 12:54:36 2026 by rpki-client