$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f12323c-5fd1-37a6-acce-132960ca17c7.roa File: 0f12323c-5fd1-37a6-acce-132960ca17c7.roa (raw, json) Hash identifier: 47kLaAGq13dS93WInoS3NjoDqwdw6TwSndbJkFMG+r4= Subject key identifier: 69:88:1C:A6:F7:42:DC:89:A1:88:AD:FE:03:CB:1C:95:3F:70:4A:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DBA146B146C6DDDCE3B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f12323c-5fd1-37a6-acce-132960ca17c7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 66.249.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ba:14:6b:14:6c:6d:dd:ce:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=3978edc8-f969-4106-a33c-dd3e7d3bf6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:47:13:48:b4:a8:9d:ce:15:bc:71:02:10: 98:40:e1:eb:a5:cd:1d:34:ad:ca:63:d8:47:65:51: fe:9a:e9:26:f1:31:d0:2c:74:3f:f3:e8:a0:5b:36: fa:3d:7d:2b:1c:38:17:af:32:a4:86:45:1a:62:76: 20:93:cb:d5:8b:5b:1b:44:47:a4:aa:38:d4:fb:76: 18:f1:20:2a:55:6f:05:dd:1e:2a:19:5a:a8:96:ce: fc:85:f8:f5:cb:4e:83:1a:7d:c6:59:ba:13:ae:c7: 59:16:a9:71:a7:3e:30:c0:d5:46:5a:8d:50:20:7e: 29:87:86:e2:4d:56:52:4f:54:74:e7:2d:e7:3b:fb: 98:96:01:4b:3b:88:11:a3:e7:bb:7a:c7:1c:cf:66: 87:f9:b5:9f:43:1a:87:ac:70:12:28:9f:02:5c:5d: 05:b5:28:3d:f4:78:0c:79:df:0b:fb:72:46:51:b7: ef:41:46:ef:ab:87:f1:ed:8c:8e:a7:e0:08:6c:1a: 69:4f:58:da:5d:51:de:f1:67:f5:0d:0b:23:9f:4f: c6:13:e0:c3:48:67:30:e6:52:d7:f1:8e:fb:b0:74: 0a:6d:31:49:11:d7:52:32:ca:fd:09:fc:2e:c6:10: 93:4a:65:8f:72:a5:60:59:f4:09:a6:2b:5f:3d:0e: 70:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:88:1C:A6:F7:42:DC:89:A1:88:AD:FE:03:CB:1C:95:3F:70:4A:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f12323c-5fd1-37a6-acce-132960ca17c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:97:49:27:84:07:46:9d:5a:ac:65:a5:1f:1e:a7:4b:2b:52: e9:a4:17:fc:a7:6e:ab:d8:f0:05:59:8c:30:d4:ff:e3:97:dd: df:66:87:8b:2c:7b:08:b8:26:e4:73:6f:c1:e1:a7:1e:b2:ae: 84:47:0f:b0:1d:2f:fe:a7:67:12:68:19:91:c3:d9:30:a3:43: 9d:89:d5:d7:9d:11:62:46:0f:8d:7b:68:13:6c:c9:5d:97:e7: 03:e2:55:3e:a1:99:06:49:4d:86:53:d7:8c:ef:a1:cd:74:ef: 21:2c:62:d5:38:94:92:f0:4a:2a:7f:aa:db:e4:93:c3:97:70: eb:07:32:79:fb:32:b7:78:b1:7f:03:29:3b:84:e5:d7:92:b1: e3:c1:2d:8d:04:43:51:0b:be:6b:b7:3f:b2:90:68:84:89:66: 9e:8e:83:5a:e6:3a:23:86:57:dc:5f:7e:d4:21:65:d6:79:a6: 5a:a2:6d:e6:4b:f9:98:48:a9:c8:72:8d:91:80:10:c2:67:74: ab:25:6e:0f:88:c3:eb:e6:28:f7:52:6f:03:da:0a:25:45:71: a4:42:bf:60:b8:0f:87:69:90:0b:f1:61:cb:6a:16:39:c2:bf: 0e:a4:03:ae:59:36:6e:ea:37:e4:76:ae:1d:54:c5:dc:c4:71: a2:dd:af:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPboUaxRsbd3OOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Mzk3OGVkYzgtZjk2OS00MTA2LWEzM2MtZGQzZTdkM2JmNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5FHE0i0qJ3OFbxxAhCYQOHrpc0dNK3KY9hH ZVH+mukm8THQLHQ/8+igWzb6PX0rHDgXrzKkhkUaYnYgk8vVi1sbREekqjjU+3YY 8SAqVW8F3R4qGVqols78hfj1y06DGn3GWboTrsdZFqlxpz4wwNVGWo1QIH4ph4bi TVZST1R05y3nO/uYlgFLO4gRo+e7esccz2aH+bWfQxqHrHASKJ8CXF0FtSg99HgM ed8L+3JGUbfvQUbvq4fx7YyOp+AIbBppT1jaXVHe8Wf1DQsjn0/GE+DDSGcw5lLX 8Y77sHQKbTFJEddSMsr9CfwuxhCTSmWPcqVgWfQJpitfPQ5wlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmIHKb3QtyJoYit/gPLHJU/cEqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGYxMjMyM2MtNWZkMS0z N2E2LWFjY2UtMTMyOTYwY2ExN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeXSSeEB0adWqxlpR8ep0srUumkF/ynbqvY8AVZjDDU/+OX3d9mh4ss ewi4JuRzb8Hhpx6yroRHD7AdL/6nZxJoGZHD2TCjQ52J1dedEWJGD417aBNsyV2X 5wPiVT6hmQZJTYZT14zvoc107yEsYtU4lJLwSip/qtvkk8OXcOsHMnn7Mrd4sX8D KTuE5deSsePBLY0EQ1ELvmu3P7KQaISJZp6Og1rmOiOGV9xfftQhZdZ5plqibeZL +ZhIqchyjZGAEMJndKslbg+Iw+vmKPdSbwPaCiVFcaRCv2C4D4dpkAvxYctqFjnC vw6kA65ZNm7qN+R2rh1UxdzEcaLdrwY= -----END CERTIFICATE-----Generated at Sun Nov 15 17:55:00 2026 by rpki-client