$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/d6ccdc92-dde3-3509-b29c-cf10d7dc2353.roa File: d6ccdc92-dde3-3509-b29c-cf10d7dc2353.roa (raw, json) Hash identifier: gaHES7tZTKbzfiYEizHxNwpZN6DuE6ljJcfBuLpCxZA= Subject key identifier: C3:DA:47:BE:B7:4D:B7:B1:A2:98:71:8E:21:7C:88:B7:60:9E:A4:30 Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Certificate serial: 010D0C9F4328584CA5F749A4CD702836E411B340 Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/d6ccdc92-dde3-3509-b29c-cf10d7dc2353.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 20326 IP address blocks: 198.13.128.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:49:a4:cd:70:28:36:e4:11:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=c34dae66-c6c1-4228-ab18-c29434fdf700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:69:64:62:dd:be:06:ac:6f:a2:df:8e:f1:3b: 94:57:15:11:dd:08:af:d9:ec:71:8b:37:c7:12:97: 31:33:5c:f0:b5:c3:75:56:8d:72:dc:42:31:12:82: ad:0f:2e:2a:d8:12:18:46:86:ea:e4:02:69:70:80: 99:0b:1e:0a:a2:84:3c:1c:0e:5c:1b:6e:b3:93:10: 34:dc:72:fa:b4:82:c0:b3:ee:ad:7e:0b:81:7d:5f: 96:aa:a1:f0:16:40:98:a1:b0:6b:92:ce:c5:c2:73: 50:4a:f0:c6:11:93:8b:bf:cb:5c:d8:4f:36:95:0c: e7:28:3f:89:7e:ea:fa:35:de:23:77:88:43:0a:e1: 0a:53:b4:4f:59:c4:03:83:17:2b:24:7a:64:af:67: bb:5e:14:5f:3b:48:22:8b:1d:11:7f:5b:95:53:3e: 2e:55:f3:35:84:61:e9:d6:2d:87:04:19:76:6b:ad: 87:17:87:da:7f:ba:83:ed:d0:69:d6:df:2e:5a:47: b9:99:67:42:a2:9a:0c:fa:69:48:db:4b:71:89:14: 64:ed:1d:84:f2:a5:4b:c7:71:eb:93:85:a5:a9:cf: e2:5b:c5:fa:5b:1a:68:6c:23:fc:3a:49:5f:c7:fe: 8f:9c:1b:f4:e9:22:b9:18:59:25:8c:41:86:4a:72: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DA:47:BE:B7:4D:B7:B1:A2:98:71:8E:21:7C:88:B7:60:9E:A4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/d6ccdc92-dde3-3509-b29c-cf10d7dc2353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl X509v3 Authority Key Identifier: keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer sbgp-ipAddrBlock: critical IPv4: 198.13.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:85:7b:34:5e:b4:89:c8:9d:cf:fa:54:72:b4:52:49:76:7e: 3b:53:69:c5:38:a2:57:c5:67:b9:db:82:30:3a:3e:59:63:15: d7:31:d8:75:1d:e0:35:d3:0c:39:39:5c:dd:7b:b8:af:bb:38: a8:56:0e:78:cf:ba:b6:b3:93:ff:77:bf:c8:60:ea:c7:90:92: 38:a3:76:58:04:24:3c:65:31:cd:eb:47:16:93:3b:62:cf:29: e8:0c:54:b0:d4:07:4b:35:99:f7:3e:aa:5c:b2:08:88:bd:ed: 69:ca:6d:b2:22:92:ad:c8:5b:bc:95:43:d5:f5:09:09:04:b9: 6f:07:f0:e9:3b:86:2f:e7:45:1a:a2:3b:a5:bd:bd:2e:06:42: 70:d6:34:5d:3b:7d:d9:e0:4b:ca:37:4a:a4:fc:6a:6d:46:49: ee:1d:e6:f0:8f:01:5b:ce:ce:dc:b4:ac:6f:4d:e3:e2:9b:80: 0c:1c:38:f3:52:7d:0b:22:ee:27:05:2f:a0:f7:55:5f:cc:21: 05:48:ba:fa:0e:f1:b3:fd:1f:b4:44:54:c7:8e:79:a8:9b:7f: 2f:09:9c:02:5a:51:8e:c2:68:61:9a:17:2b:df:e9:d1:c6:c1: 59:91:35:54:89:d4:12:db:83:2c:54:5b:2e:84:b6:05:44:d6: 87:e6:12:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90mkzXAoNuQRs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwYjRjMzgtMmNhNi00ZWRkLTgwZWYtMTE3M2E4ZDdl Zjg2MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YzM0ZGFlNjYtYzZjMS00MjI4LWFiMTgtYzI5NDM0ZmRmNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WlkYt2+Bqxvot+O8TuUVxUR3Qiv2exxizfH EpcxM1zwtcN1Vo1y3EIxEoKtDy4q2BIYRobq5AJpcICZCx4KooQ8HA5cG26zkxA0 3HL6tILAs+6tfguBfV+WqqHwFkCYobBrks7FwnNQSvDGEZOLv8tc2E82lQznKD+J fur6Nd4jd4hDCuEKU7RPWcQDgxcrJHpkr2e7XhRfO0giix0Rf1uVUz4uVfM1hGHp 1i2HBBl2a62HF4faf7qD7dBp1t8uWke5mWdCopoM+mlI20txiRRk7R2E8qVLx3Hr k4Wlqc/iW8X6WxpobCP8Oklfx/6PnBv06SK5GFkljEGGSnIIPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPaR763TbexophxjiF8iLdgnqQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NjBi NGMzOC0yY2E2LTRlZGQtODBlZi0xMTczYThkN2VmODYvZDZjY2RjOTItZGRlMy0z NTA5LWIyOWMtY2YxMGQ3ZGMyMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODYwYjRjMzgtMmNhNi00ZWRkLTgw ZWYtMTE3M2E4ZDdlZjg2Lzg2MGI0YzM4LTJjYTYtNGVkZC04MGVmLTExNzNhOGQ3 ZWY4Ni5jcmwwHwYDVR0jBBgwFoAUnBoKe0BtQfxOmXCKeMmGhJl8eI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NjBiNGMzOC0yY2E2LTRlZGQtODBlZi0xMTcz YThkN2VmODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaFezRetInInc/6VHK0Ukl2fjtTacU4olfFZ7nbgjA6PlljFdcx2HUd 4DXTDDk5XN17uK+7OKhWDnjPurazk/93v8hg6seQkjijdlgEJDxlMc3rRxaTO2LP KegMVLDUB0s1mfc+qlyyCIi97WnKbbIikq3IW7yVQ9X1CQkEuW8H8Ok7hi/nRRqi O6W9vS4GQnDWNF07fdngS8o3SqT8am1GSe4d5vCPAVvOzty0rG9N4+KbgAwcOPNS fQsi7icFL6D3VV/MIQVIuvoO8bP9H7REVMeOeaibfy8JnAJaUY7CaGGaFyvf6dHG wVmRNVSJ1BLbgyxUWy6EtgVE1ofmEiw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:58:44 2026 by rpki-client