$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa File: d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa (raw, json) Hash identifier: MJcGHHcX4EP8mDsLKhAkXCMOWzGSSDwpCP+506lLbe0= Subject key identifier: E4:08:2A:51:FE:64:33:82:99:AD:EA:6D:F2:EA:EF:EC:27:D6:66:52 Certificate issuer: /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25 Certificate serial: 010D0C9F4328584F0ED23619887BB7268850A680 Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 216.24.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:36:19:88:7b:b7:26:88:50:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=cf6fc1d2-2fec-4cbe-802c-46e923d10525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:4b:18:eb:c3:67:82:b5:d9:cd:62:07:d3: 62:d0:fe:9d:af:26:1e:4c:3e:e4:f2:4e:22:79:74: 18:c2:76:12:de:76:9f:bf:0e:05:e2:6a:3d:56:3b: 71:d9:35:46:b4:d6:ff:ae:5a:2c:60:09:b9:8a:16: 76:b8:42:db:ad:3d:28:27:69:8d:58:d2:d6:20:7e: 18:ac:d5:cd:6f:63:dc:15:82:4b:1e:92:e7:b2:fa: b9:e5:b6:fe:f2:31:16:37:55:f3:04:ed:7f:78:ae: 48:59:a5:4a:a9:96:63:52:25:2e:38:fe:ff:a8:b8: 6f:0a:4a:28:6d:9a:7a:5e:72:b3:0b:d7:bb:02:27: e1:32:49:2e:f0:1c:db:26:d5:f4:f5:77:10:32:06: d2:7a:3f:e0:bf:1c:09:6a:3a:da:9b:13:26:99:3f: 6a:e8:13:d6:5a:3b:71:8b:be:b4:43:81:21:46:bd: 51:23:e0:61:02:9c:c8:89:a1:75:5a:b9:1a:cb:b3: a5:e0:3f:0e:19:3f:c0:95:fe:c8:74:17:40:d3:f1: cf:a1:61:32:c1:ef:3f:99:55:91:b5:dd:1f:9b:e8: 57:66:99:9b:97:87:37:d9:22:23:58:94:99:9e:1c: 0b:5e:7e:f7:fd:af:c4:92:f0:f7:ed:04:bd:b8:ac: c5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:08:2A:51:FE:64:33:82:99:AD:EA:6D:F2:EA:EF:EC:27:D6:66:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl X509v3 Authority Key Identifier: keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer sbgp-ipAddrBlock: critical IPv4: 216.24.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:78:dd:ea:ce:d0:19:e1:61:82:37:0f:da:f4:f7:4a:5c:da: 69:9b:7a:23:07:49:eb:e0:4b:c7:18:17:ff:6a:bb:8b:b5:ed: 4a:be:10:21:ee:40:1b:38:b7:5d:21:6d:1c:d2:15:ae:dc:c7: ba:b0:45:02:3c:40:96:ec:fc:d3:2d:b9:d7:5a:3b:a1:28:a6: 07:be:c9:c4:25:3d:87:26:68:d6:a0:7f:0a:f6:64:07:2c:2a: b1:cf:3c:73:c7:d5:2a:8e:d7:f0:99:c7:2d:07:2e:28:e6:02: 19:d2:bd:9c:0a:f7:24:20:9e:de:0d:9d:15:12:7c:a5:bc:96: 07:ae:3c:ea:a5:0c:f8:da:71:88:a3:db:23:44:11:77:e8:65: f3:8c:22:38:31:f8:2f:60:c2:db:50:82:7d:96:91:85:9f:ea: 47:95:27:40:d7:76:e7:10:6a:ee:f4:be:a3:68:a7:15:01:f1: 4a:17:d9:fd:0e:d3:28:7c:e5:33:c3:a0:69:d5:50:df:2a:e0: f7:04:52:df:2c:34:f9:5f:02:95:ba:39:e5:4f:52:14:37:90: 75:ef:7d:7c:d2:ca:ea:1e:0e:aa:5e:11:ca:9f:08:95:a4:3b: f5:e2:b8:65:ed:4d:12:0a:ab:f7:4e:13:1d:de:e3:96:37:cf: ab:f8:8d:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jYZiHu3JohQpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2MWVmMjgtZmUwMy00NWJiLWEzOGYtMTdlNDcyNWI2 YzI1MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y2ZmMxZDItMmZlYy00Y2JlLTgwMmMtNDZlOTIzZDEwNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskRLGOvDZ4K12c1iB9Ni0P6dryYeTD7k8k4i eXQYwnYS3nafvw4F4mo9Vjtx2TVGtNb/rlosYAm5ihZ2uELbrT0oJ2mNWNLWIH4Y rNXNb2PcFYJLHpLnsvq55bb+8jEWN1XzBO1/eK5IWaVKqZZjUiUuOP7/qLhvCkoo bZp6XnKzC9e7AifhMkku8BzbJtX09XcQMgbSej/gvxwJajramxMmmT9q6BPWWjtx i760Q4EhRr1RI+BhApzIiaF1Wrkay7Ol4D8OGT/Alf7IdBdA0/HPoWEywe8/mVWR td0fm+hXZpmbl4c32SIjWJSZnhwLXn73/a/EkvD37QS9uKzFRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQIKlH+ZDOCma3qbfLq7+wn1mZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZTYx ZWYyOC1mZTAzLTQ1YmItYTM4Zi0xN2U0NzI1YjZjMjUvZDI3NmFjNWQtMThiMy0z ODhkLTliZGYtNGY3YWNhNGNhYmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU2MWVmMjgtZmUwMy00NWJiLWEz OGYtMTdlNDcyNWI2YzI1L2FlNjFlZjI4LWZlMDMtNDViYi1hMzhmLTE3ZTQ3MjVi NmMyNS5jcmwwHwYDVR0jBBgwFoAUrJzdGWT6kVB3yp/f4VMWa1NaLLYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZTYxZWYyOC1mZTAzLTQ1YmItYTM4Zi0xN2U0 NzI1YjZjMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Bg8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF943erO0BnhYYI3D9r090pc2mmbeiMHSevgS8cYF/9qu4u17Uq+ECHu QBs4t10hbRzSFa7cx7qwRQI8QJbs/NMtuddaO6Eopge+ycQlPYcmaNagfwr2ZAcs KrHPPHPH1SqO1/CZxy0HLijmAhnSvZwK9yQgnt4NnRUSfKW8lgeuPOqlDPjacYij 2yNEEXfoZfOMIjgx+C9gwttQgn2WkYWf6keVJ0DXducQau70vqNopxUB8UoX2f0O 0yh85TPDoGnVUN8q4PcEUt8sNPlfApW6OeVPUhQ3kHXvfXzSyuoeDqpeEcqfCJWk O/XiuGXtTRIKq/dOEx3e45Y3z6v4jWY= -----END CERTIFICATE-----Generated at Sun Sep 27 00:39:41 2026 by rpki-client