$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15618664-5e1d-3074-b22e-97a267c85d9e.roa File: 15618664-5e1d-3074-b22e-97a267c85d9e.roa (raw, json) Hash identifier: tbKa5mfPkl+B86JH0fi6M0xKcnAAjtx4bnqQMIKikgM= Subject key identifier: 2D:23:51:6E:35:50:10:57:F4:07:CF:07:99:F9:BE:55:93:D4:B4:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984F49B522E639401F0F9F4 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15618664-5e1d-3074-b22e-97a267c85d9e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 173.194.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:f4:9b:52:2e:63:94:01:f0:f9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=38dd346f-8675-4890-b5ca-855c769c1871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:15:67:dc:ae:f4:67:fd:ce:ef:81:46:1a:83: ac:f7:a7:12:4e:ea:45:05:38:39:bd:c1:78:fa:f3: 5e:33:ac:1e:a4:5e:c9:f8:2a:16:e8:5a:17:b9:62: fc:0c:88:1e:31:26:8a:86:22:47:a1:5e:15:8b:bf: 91:af:78:f8:7f:9e:39:c2:89:f7:46:16:64:5b:61: 70:f2:88:49:6c:76:fe:c1:3d:f4:86:9c:d7:b4:74: 81:ed:60:e2:e8:7c:d6:72:93:a6:cd:16:b7:56:55: 51:6d:5b:35:9a:c2:d1:ff:33:b4:91:01:87:ac:ee: 02:00:30:7a:82:98:f1:8d:09:b4:95:fa:30:26:70: e2:c5:07:27:e0:3d:a6:6f:29:75:b4:14:22:48:79: 89:08:ef:27:94:0e:d0:42:3e:23:fb:2c:dc:3d:05: b9:15:ef:b6:61:ea:f3:f1:dc:00:4c:7c:05:fb:b3: 10:19:93:88:89:75:44:a9:97:db:f4:ce:25:6a:86: 55:49:f5:38:5a:03:e9:31:a2:c5:ce:7c:d1:0d:48: bb:66:e1:00:d9:ef:08:91:5a:82:73:1b:88:db:de: 4a:b4:32:c4:52:e3:8a:3e:f1:2f:9d:e5:02:93:fb: 2b:ca:a4:0f:8c:2e:b9:a2:be:62:2a:4e:8b:3e:98: aa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:23:51:6E:35:50:10:57:F4:07:CF:07:99:F9:BE:55:93:D4:B4:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15618664-5e1d-3074-b22e-97a267c85d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:85:14:6f:23:6a:52:48:af:09:a3:8e:b6:65:06:11:d6:3e: aa:d8:dd:10:2c:03:75:00:78:c5:10:1b:94:62:00:a2:14:e4: 24:c2:25:36:7b:98:75:22:ac:f2:54:ac:0f:5f:0e:dd:9d:51: 4e:6d:5a:ce:0c:3a:f1:42:a3:02:fc:f2:87:03:5b:f3:a8:3f: 9c:4e:2e:8f:a5:cd:80:6d:15:6f:ba:55:78:ea:84:c0:1f:8b: 6f:4e:dd:18:98:47:4b:4c:42:4d:97:10:f9:eb:68:f6:a7:cf: 27:7d:cd:2f:1e:9e:54:6b:89:b2:50:b5:16:dc:ae:79:09:3b: 33:12:71:2c:ac:74:25:72:4b:0f:f9:67:d0:6f:9b:ac:d3:e2: 2e:a2:67:67:49:01:95:b8:81:ff:2e:0a:9b:de:55:2c:17:91: c8:a5:ca:ff:66:c9:6d:b7:cf:d1:e4:83:b5:a1:9c:5b:de:a3: ba:6d:57:8e:aa:53:8c:42:8a:ad:5b:10:1f:cc:77:15:dd:14: 33:93:d0:98:9f:06:fa:37:55:cd:11:74:54:58:b4:71:cc:f2: 78:eb:26:9d:49:e6:b0:5c:0d:00:7c:b2:13:5d:c7:de:e2:ea: 8b:4c:56:b0:93:32:3f:eb:2a:34:e9:00:e6:5c:e9:0e:b5:b0: 06:08:48:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPSbUi5jlAHw+fQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzhkZDM0NmYtODY3NS00ODkwLWI1Y2EtODU1Yzc2OWMxODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBVn3K70Z/3O74FGGoOs96cSTupFBTg5vcF4 +vNeM6wepF7J+CoW6FoXuWL8DIgeMSaKhiJHoV4Vi7+Rr3j4f545won3RhZkW2Fw 8ohJbHb+wT30hpzXtHSB7WDi6HzWcpOmzRa3VlVRbVs1msLR/zO0kQGHrO4CADB6 gpjxjQm0lfowJnDixQcn4D2mbyl1tBQiSHmJCO8nlA7QQj4j+yzcPQW5Fe+2Yerz 8dwATHwF+7MQGZOIiXVEqZfb9M4laoZVSfU4WgPpMaLFznzRDUi7ZuEA2e8IkVqC cxuI295KtDLEUuOKPvEvneUCk/sryqQPjC65or5iKk6LPpiqYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0jUW41UBBX9AfPB5n5vlWT1LQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTU2MTg2NjQtNWUxZC0z MDc0LWIyMmUtOTdhMjY3Yzg1ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6FFG8jalJIrwmjjrZlBhHWPqrY3RAsA3UAeMUQG5RiAKIU5CTCJTZ7 mHUirPJUrA9fDt2dUU5tWs4MOvFCowL88ocDW/OoP5xOLo+lzYBtFW+6VXjqhMAf i29O3RiYR0tMQk2XEPnraPanzyd9zS8enlRribJQtRbcrnkJOzMScSysdCVySw/5 Z9Bvm6zT4i6iZ2dJAZW4gf8uCpveVSwXkcilyv9myW23z9Hkg7WhnFveo7ptV46q U4xCiq1bEB/MdxXdFDOT0JifBvo3Vc0RdFRYtHHM8njrJp1J5rBcDQB8shNdx97i 6otMVrCTMj/rKjTpAOZc6Q61sAYISNY= -----END CERTIFICATE-----Generated at Fri Sep 25 09:00:49 2026 by rpki-client