$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/d6ccdc92-dde3-3509-b29c-cf10d7dc2353.roa File: d6ccdc92-dde3-3509-b29c-cf10d7dc2353.roa (raw, json) Hash identifier: xodhrZRey7PwN/LHwPuGv7+MSBpbcLlyHQSKgCi5Gc4= Subject key identifier: 00:CF:E4:13:17:1A:4E:63:B3:C9:72:5F:59:D8:DD:09:0C:47:8F:4E Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Certificate serial: 010D0C9F4328584F093CE0B85EE6DB065FAE6D00 Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/d6ccdc92-dde3-3509-b29c-cf10d7dc2353.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 20326 IP address blocks: 198.13.128.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e0:b8:5e:e6:db:06:5f:ae:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=404f528e-dc8b-4e85-97f8-6f0e224fe82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:a9:a6:bc:4e:39:b6:6b:18:fa:39:da:09: ea:93:69:e0:fb:f0:c1:a7:96:b3:1e:04:07:b4:24: b8:ef:a5:ad:14:35:72:95:3b:1b:0c:ca:6d:13:48: 1b:7c:d1:68:b1:8e:81:23:13:d7:c9:3c:da:d0:13: 42:a8:b4:59:eb:81:5c:3a:64:70:e4:fd:2e:ff:5d: ae:ea:5a:0f:64:d6:77:f1:3c:9a:a5:9a:32:e4:5b: 90:ff:b7:2c:1d:36:27:07:0e:f0:7e:49:a2:4b:cb: 70:cd:cb:40:3f:57:e1:23:1b:de:cc:98:05:c9:56: e4:ea:94:34:d7:3b:c0:05:89:9c:57:d7:82:c8:21: bc:e7:c3:cb:2f:32:75:4d:00:b7:38:63:28:a6:48: eb:3f:4f:0a:c8:bf:d1:34:b9:48:9a:d6:6b:90:4c: f5:bf:69:5e:fb:62:30:a9:ee:c8:63:5f:48:cf:9d: 4c:6e:fc:18:4b:85:15:86:f9:f8:f7:f8:df:d3:5b: a1:0a:7b:4c:36:74:65:33:6a:9c:ab:33:b8:c0:f0: 3b:af:62:15:c9:83:52:5f:a9:25:ef:11:9b:23:7a: 7d:61:c2:3a:15:db:76:e5:6c:8b:0d:0a:a1:06:89: de:bd:31:50:1a:68:32:4a:b8:19:fc:3a:98:c7:ef: 37:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CF:E4:13:17:1A:4E:63:B3:C9:72:5F:59:D8:DD:09:0C:47:8F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/d6ccdc92-dde3-3509-b29c-cf10d7dc2353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl X509v3 Authority Key Identifier: keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer sbgp-ipAddrBlock: critical IPv4: 198.13.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ac:dc:ad:a7:62:cd:af:f8:f4:e5:5e:63:c7:31:43:8d:96: 95:2a:45:a7:24:5f:a8:86:a3:e8:32:17:b0:77:e4:5c:1c:ba: e2:31:f6:2a:c6:15:2e:1f:ea:99:a4:50:a0:76:56:55:6a:84: 20:f1:8f:29:88:c5:9c:43:bf:ae:55:b1:9d:0f:2c:fb:b3:7f: b6:1b:7f:4a:d1:cd:16:a6:9a:a2:17:50:2b:75:e9:b5:f7:13: a3:f2:9e:e1:1b:0a:ad:5b:5d:d0:af:d1:ee:60:80:8d:54:7a: f8:ed:c4:69:d1:ad:6d:b9:07:97:97:c3:b3:c6:a0:1d:90:82: 2f:6a:4e:1e:14:11:26:6f:5f:3c:9f:23:91:41:66:55:76:59: 6e:2c:7d:44:f9:e2:d5:ae:c4:50:9b:7e:ab:eb:ec:ca:d4:d6: d2:1a:63:f1:58:a2:11:7c:b9:d2:16:0d:36:e2:1a:62:7c:86: 59:dd:d3:84:29:3c:8b:b7:a9:44:51:87:0c:79:d7:59:8b:50: e0:b7:4b:7c:06:af:0b:82:89:73:83:33:b8:b4:13:e4:05:fb: 20:53:23:6c:46:86:e6:04:eb:dc:8b:92:7f:a1:1e:9a:ae:14: 3d:11:ff:46:f9:f8:e5:79:55:09:01:e4:11:67:2e:67:cd:be: cc:4b:b9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOC4XubbBl+ubQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwYjRjMzgtMmNhNi00ZWRkLTgwZWYtMTE3M2E4ZDdl Zjg2MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NDA0ZjUyOGUtZGM4Yi00ZTg1LTk3ZjgtNmYwZTIyNGZlODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyipprxOObZrGPo52gnqk2ng+/DBp5azHgQH tCS476WtFDVylTsbDMptE0gbfNFosY6BIxPXyTza0BNCqLRZ64FcOmRw5P0u/12u 6loPZNZ38TyapZoy5FuQ/7csHTYnBw7wfkmiS8twzctAP1fhIxvezJgFyVbk6pQ0 1zvABYmcV9eCyCG858PLLzJ1TQC3OGMopkjrP08KyL/RNLlImtZrkEz1v2le+2Iw qe7IY19Iz51MbvwYS4UVhvn49/jf01uhCntMNnRlM2qcqzO4wPA7r2IVyYNSX6kl 7xGbI3p9YcI6Fdt25WyLDQqhBonevTFQGmgySrgZ/DqYx+83FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADP5BMXGk5js8lyX1nY3QkMR49OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NjBi NGMzOC0yY2E2LTRlZGQtODBlZi0xMTczYThkN2VmODYvZDZjY2RjOTItZGRlMy0z NTA5LWIyOWMtY2YxMGQ3ZGMyMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODYwYjRjMzgtMmNhNi00ZWRkLTgw ZWYtMTE3M2E4ZDdlZjg2Lzg2MGI0YzM4LTJjYTYtNGVkZC04MGVmLTExNzNhOGQ3 ZWY4Ni5jcmwwHwYDVR0jBBgwFoAUnBoKe0BtQfxOmXCKeMmGhJl8eI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NjBiNGMzOC0yY2E2LTRlZGQtODBlZi0xMTcz YThkN2VmODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKs3K2nYs2v+PTlXmPHMUONlpUqRackX6iGo+gyF7B35FwcuuIx9irG FS4f6pmkUKB2VlVqhCDxjymIxZxDv65VsZ0PLPuzf7Ybf0rRzRammqIXUCt16bX3 E6PynuEbCq1bXdCv0e5ggI1UevjtxGnRrW25B5eXw7PGoB2Qgi9qTh4UESZvXzyf I5FBZlV2WW4sfUT54tWuxFCbfqvr7MrU1tIaY/FYohF8udIWDTbiGmJ8hlnd04Qp PIu3qURRhwx511mLUOC3S3wGrwuCiXODM7i0E+QF+yBTI2xGhuYE69yLkn+hHpqu FD0R/0b5+OV5VQkB5BFnLmfNvsxLuf8= -----END CERTIFICATE-----Generated at Sun Sep 20 20:45:50 2026 by rpki-client