$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa File: 224a8eaf-90ca-3555-ba36-8b880b90fb50.roa (raw, json) Hash identifier: 3lMLLfH7hFLtJboUKFkfIL9GiSAXSuqjr4Vcc+sig0k= Subject key identifier: B2:E4:C5:19:54:FD:E9:1F:BF:99:AA:CF:69:90:15:93:A9:45:74:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49852897EA3CD3EE20D31640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 173.194.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:28:97:ea:3c:d3:ee:20:d3:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3272a322-bd1f-4216-8811-c4177640b69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:4e:aa:be:c0:d4:8f:11:0e:3c:eb:e0:25: ff:08:6c:41:7d:8d:9c:d3:7d:45:75:5e:1d:db:83: f4:ad:96:81:5a:da:2d:c9:a4:c4:42:c8:53:2c:d7: 61:a8:1c:27:0f:4f:a2:6c:1b:51:ba:1d:1f:9b:da: a8:7e:a3:db:e3:99:e4:13:11:ca:2a:58:ad:da:7c: 6b:76:47:bd:b3:c1:d0:e4:aa:7e:1d:d9:c5:89:ef: ea:fa:ee:cb:bf:a4:e9:27:af:2e:35:ba:66:7b:ef: eb:d1:e7:6d:6a:42:f3:63:ca:2b:c2:5e:40:ef:a0: 5a:71:d0:f2:a6:2f:85:78:37:a7:6f:05:d4:2b:80: 68:1c:51:40:ce:7c:29:aa:7e:5f:39:c6:20:da:0e: ae:09:3c:69:e9:7d:da:d4:a2:92:17:a6:8d:d7:4b: 4c:f0:22:cb:f5:b1:94:50:ca:a4:da:03:f7:49:cf: 16:ed:4b:44:4e:2f:ac:d4:a0:27:f9:00:9d:14:c7: 05:a0:75:72:d2:09:7c:8e:35:56:78:22:a8:47:48: 74:3f:14:93:23:9a:ef:e1:8c:f2:fa:6c:bd:1e:8a: d5:45:17:00:26:52:c4:f7:f3:6f:d5:19:e7:19:d0: a5:5d:b5:c8:59:3e:2c:de:7c:3c:eb:8f:be:b6:31: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E4:C5:19:54:FD:E9:1F:BF:99:AA:CF:69:90:15:93:A9:45:74:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:52:7e:ef:fe:1e:37:7e:3c:de:28:7d:d8:2b:a9:89:9a:5f: 1c:14:a7:cf:01:a7:12:71:43:aa:e5:2e:70:8f:ef:f2:21:56: bb:46:e0:57:c6:af:16:00:00:9e:81:d4:8e:8e:b3:fb:79:62: 2b:cf:18:7b:37:5a:41:25:ee:7d:9f:50:fe:c2:f4:4d:b3:65: f0:e4:f3:df:08:01:f3:35:0a:db:48:0a:76:c3:21:4f:0e:ff: a9:62:ad:fa:91:93:cc:be:b7:3a:ad:fb:cc:53:f8:19:16:13: b2:bd:a5:90:22:a2:2b:ca:95:40:b7:2c:1c:cf:57:b9:14:d8: 5f:55:63:f5:fc:fb:f8:e4:4d:d8:e1:65:3e:86:9d:54:23:fd: f9:2c:6f:ed:f9:42:1b:f2:9e:b7:9c:bb:ba:85:8c:1e:28:ab: c7:5b:98:ad:5e:a8:dc:ff:4b:84:1a:eb:0b:ce:07:45:91:f6: 6f:cd:af:dc:d1:b5:4d:e6:fa:bf:90:5d:d2:03:60:8b:a3:90: b8:44:55:f2:27:3e:55:32:90:b3:9d:85:57:94:88:a4:5c:c1: 29:3f:86:c9:60:42:46:aa:13:6c:ce:8d:86:5f:05:8c:36:2f: a9:12:7e:9b:53:4d:77:eb:24:27:8e:91:5c:c2:be:bc:d7:08: 1b:e8:0c:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhSiX6jzT7iDTFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzI3MmEzMjItYmQxZi00MjE2LTg4MTEtYzQxNzc2NDBiNjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa5Oqr7A1I8RDjzr4CX/CGxBfY2c031FdV4d 24P0rZaBWtotyaTEQshTLNdhqBwnD0+ibBtRuh0fm9qofqPb45nkExHKKlit2nxr dke9s8HQ5Kp+HdnFie/q+u7Lv6TpJ68uNbpme+/r0edtakLzY8orwl5A76BacdDy pi+FeDenbwXUK4BoHFFAznwpqn5fOcYg2g6uCTxp6X3a1KKSF6aN10tM8CLL9bGU UMqk2gP3Sc8W7UtETi+s1KAn+QCdFMcFoHVy0gl8jjVWeCKoR0h0PxSTI5rv4Yzy +my9HorVRRcAJlLE9/Nv1RnnGdClXbXIWT4s3nw864++tjHHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLkxRlU/ekfv5mqz2mQFZOpRXQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjI0YThlYWYtOTBjYS0z NTU1LWJhMzYtOGI4ODBiOTBmYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRSfu/+Hjd+PN4ofdgrqYmaXxwUp88BpxJxQ6rlLnCP7/IhVrtG4FfG rxYAAJ6B1I6Os/t5YivPGHs3WkEl7n2fUP7C9E2zZfDk898IAfM1CttICnbDIU8O /6lirfqRk8y+tzqt+8xT+BkWE7K9pZAioivKlUC3LBzPV7kU2F9VY/X8+/jkTdjh ZT6GnVQj/fksb+35Qhvynrecu7qFjB4oq8dbmK1eqNz/S4Qa6wvOB0WR9m/Nr9zR tU3m+r+QXdIDYIujkLhEVfInPlUykLOdhVeUiKRcwSk/hslgQkaqE2zOjYZfBYw2 L6kSfptTTXfrJCeOkVzCvrzXCBvoDCc= -----END CERTIFICATE-----Generated at Fri Sep 25 09:02:11 2026 by rpki-client