$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa File: 2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa (raw, json) Hash identifier: tvpZqGqn02u1kNoM1ZeH9X0wFPo2HIO19S5uTTwkqFM= Subject key identifier: A0:7D:B2:B7:D4:23:00:B6:78:44:9F:8B:DF:9A:57:18:EC:9A:5F:D3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498505F43D05FF112A682700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 173.194.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:05:f4:3d:05:ff:11:2a:68:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=df15de4c-0933-4245-bfc4-5589d3fd24a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:82:be:87:db:1e:11:cf:85:d8:03:c0:d7:45: ca:7a:3e:75:78:df:b8:92:cc:e5:c3:e6:aa:ad:2f: e2:3b:93:85:ec:59:21:55:2c:77:af:74:b6:78:e2: b2:54:77:b0:3b:51:5f:9e:3b:ca:76:42:d8:e2:22: 2a:a8:6b:56:43:a0:51:14:ef:4f:2a:15:5b:7e:4e: 67:45:b6:eb:2c:6a:1d:35:e9:38:34:90:b6:c2:c7: 0c:d0:6f:be:e1:c4:03:a4:54:18:12:b2:9b:a7:05: e4:e5:15:3d:a0:ec:2f:4b:bd:b3:88:c3:46:5b:7c: 7a:09:98:c8:4e:72:4d:55:63:b0:19:a6:6c:e2:2e: d4:ae:8a:7d:c4:73:90:05:b9:6f:09:62:1f:26:18: 30:95:c1:df:b4:04:10:00:82:a8:ca:b1:e8:eb:fa: 58:8d:d9:c3:9c:b1:f1:47:5e:40:2c:66:f9:dc:fa: b7:e9:29:05:f4:41:f1:ae:b5:50:53:a7:bc:dc:45: 02:1c:94:82:d3:d2:56:9c:0c:29:e6:a5:f4:b4:bc: 69:61:64:c2:65:53:f5:d3:5c:33:44:a6:4b:7b:61: b2:83:1d:b8:88:6d:40:9d:7e:f0:86:78:86:14:3a: 20:36:da:b2:98:52:d9:e7:99:ae:db:d3:e7:08:14: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7D:B2:B7:D4:23:00:B6:78:44:9F:8B:DF:9A:57:18:EC:9A:5F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:81:e6:fb:55:c5:3b:5e:ae:94:9c:27:b9:2b:91:b0:12:f3: ed:ca:c0:2a:fc:8f:75:3a:ad:d4:f0:77:cd:02:89:5b:9e:a4: c1:8e:59:dd:a0:1a:80:97:e9:10:1d:f4:26:8b:7b:bd:35:00: ea:c3:39:dd:96:0c:ec:2f:17:4b:79:b8:c0:ca:44:9f:8a:76: e6:79:75:cc:39:87:85:89:4e:42:8c:69:69:d5:fc:55:41:b7: 15:8c:fa:78:f0:f6:62:cf:68:0e:4a:54:f1:eb:07:48:25:b3: ac:73:11:81:2a:f2:7d:5c:fd:dd:84:75:db:1a:22:32:ca:7b: 94:d4:9f:33:ee:a7:cc:a0:23:2f:d9:27:e4:87:16:a1:1b:a8: 97:bb:e7:c0:e4:38:84:be:53:b5:71:15:b5:6d:a4:d0:fc:84: c7:18:5b:ed:d0:3e:65:91:42:85:61:44:78:2e:0a:09:19:e4: 50:f8:f3:2f:f7:35:1e:26:b2:c4:c5:6b:32:64:45:39:8c:d9: d4:da:e1:f4:b2:07:27:f2:93:28:19:e2:65:3a:11:16:97:52: cf:b6:a2:fa:77:a9:dc:35:aa:7c:ee:4f:1a:01:2f:52:6e:e3: 0d:72:d0:d9:a1:94:bd:89:c2:00:a9:18:ca:62:a3:8f:6f:65: 15:9c:ce:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQX0PQX/ESpoJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGYxNWRlNGMtMDkzMy00MjQ1LWJmYzQtNTU4OWQzZmQyNGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4K+h9seEc+F2APA10XKej51eN+4kszlw+aq rS/iO5OF7FkhVSx3r3S2eOKyVHewO1FfnjvKdkLY4iIqqGtWQ6BRFO9PKhVbfk5n RbbrLGodNek4NJC2wscM0G++4cQDpFQYErKbpwXk5RU9oOwvS72ziMNGW3x6CZjI TnJNVWOwGaZs4i7Urop9xHOQBblvCWIfJhgwlcHftAQQAIKoyrHo6/pYjdnDnLHx R15ALGb53Pq36SkF9EHxrrVQU6e83EUCHJSC09JWnAwp5qX0tLxpYWTCZVP101wz RKZLe2Gygx24iG1AnX7whniGFDogNtqymFLZ55mu29PnCBRzHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB9srfUIwC2eESfi9+aVxjsml/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg5MmQ1ZTItZDhiMy0z ZWI4LWFiODEtOTcyMDQ2ZmQyOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyB5vtVxTterpScJ7krkbAS8+3KwCr8j3U6rdTwd80CiVuepMGOWd2g GoCX6RAd9CaLe701AOrDOd2WDOwvF0t5uMDKRJ+KduZ5dcw5h4WJTkKMaWnV/FVB txWM+njw9mLPaA5KVPHrB0gls6xzEYEq8n1c/d2EddsaIjLKe5TUnzPup8ygIy/Z J+SHFqEbqJe758DkOIS+U7VxFbVtpND8hMcYW+3QPmWRQoVhRHguCgkZ5FD48y/3 NR4mssTFazJkRTmM2dTa4fSyByfykygZ4mU6ERaXUs+2ovp3qdw1qnzuTxoBL1Ju 4w1y0NmhlL2JwgCpGMpio49vZRWczo0= -----END CERTIFICATE-----Generated at Fri Sep 25 20:36:27 2026 by rpki-client