$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7bb2e4c0-777d-3cb2-9d3c-709db2092ece.roa File: 7bb2e4c0-777d-3cb2-9d3c-709db2092ece.roa (raw, json) Hash identifier: 55nDLrOs6qKnVFjA7AbTGOu51rTpo2D2mIRlEAvWHpM= Subject key identifier: CD:0C:B1:E6:DB:4E:50:51:19:42:FF:31:FA:FD:8E:A6:57:48:58:7B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4989F46DD9B63E69FF4D3240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7bb2e4c0-777d-3cb2-9d3c-709db2092ece.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 173.194.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:f4:6d:d9:b6:3e:69:ff:4d:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ca1300a2-574c-4e7d-804a-0f772268237c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:bb:27:ab:42:2d:b1:b5:7d:ab:39:96:f4: 43:23:7d:4a:a2:65:b1:b0:e4:52:74:11:6c:7a:d8: 5c:b5:08:e5:e8:7c:cb:b8:f8:27:60:ce:75:67:41: 48:7d:eb:71:e3:ee:00:5f:38:26:2d:5b:6b:c5:bc: fe:d9:9a:68:a4:55:fb:cc:f1:aa:85:9b:05:77:af: f2:0e:5f:c8:5b:ee:35:ad:a2:62:c8:54:f5:7d:9b: 58:fd:ec:9c:ef:30:f5:4c:8d:9e:b9:a8:04:aa:02: 71:e2:f2:28:b6:63:e6:45:54:89:a1:b1:55:44:6f: 2e:be:88:0b:72:3f:31:86:91:8a:63:5b:09:3e:63: 4e:0c:22:49:a6:30:38:bb:bc:9d:7f:18:be:3f:d5: 26:ed:f9:75:a7:7d:ba:62:3d:a4:a8:f7:7d:8e:13: 28:26:b1:a2:e2:c4:16:95:6c:0a:6e:14:fa:eb:d0: 3c:c6:ef:74:3b:5a:71:2e:cc:e0:a5:72:63:52:87: 4d:7f:a8:43:aa:d5:7f:0e:ac:0f:19:75:4a:d9:d7: 2a:ae:ea:ef:b6:e1:e7:61:b8:a0:37:ba:33:44:d0: 0d:c5:cf:36:6d:18:96:b9:d0:15:7c:71:f7:83:7f: 8f:9a:3f:76:d4:ef:c2:8b:d0:3b:7d:a8:6d:38:6c: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0C:B1:E6:DB:4E:50:51:19:42:FF:31:FA:FD:8E:A6:57:48:58:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7bb2e4c0-777d-3cb2-9d3c-709db2092ece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:08:a9:b3:a3:bf:df:cb:9c:81:74:a3:aa:f1:66:1a:08:45: 00:d6:fc:70:d6:6b:3e:da:ca:6c:59:b1:18:a2:1e:65:98:e2: 70:a4:c5:bf:4b:c0:63:1f:02:bc:2b:bb:46:8c:54:3c:ce:51: 73:b4:c1:57:6e:ef:5c:0e:ff:87:82:03:ea:e5:07:0a:cc:28: 03:ec:bc:b7:3a:2a:18:36:63:ef:b1:c1:94:17:af:af:5a:7a: 06:01:15:87:af:10:11:b8:79:57:e7:4d:d4:0f:3d:b1:41:0b: bd:bf:3d:34:01:f5:fb:6b:e1:5c:7b:58:94:b7:65:7e:ae:45: 14:30:f6:b8:af:d0:ab:e7:e7:4c:ed:1f:20:a7:be:a1:5f:b2: b9:5c:2b:5e:5f:b1:bd:c5:37:8f:0f:49:c2:51:82:b8:81:a9: 4e:98:3b:8b:9d:25:d8:72:96:9d:c1:42:ba:75:b5:7f:24:a1: ae:62:d0:fd:9d:5b:76:f0:89:33:49:c7:d5:79:05:6a:49:d4: 88:cb:11:34:f1:4d:56:af:e0:05:ae:80:21:33:46:1a:89:b0: f0:d1:51:85:63:a1:69:0f:82:91:f7:8e:90:40:69:2e:da:c6: 81:5e:dd:49:0c:ca:48:d0:ca:e5:d5:4f:3a:31:32:e4:06:a4: 30:ab:a4:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JifRt2bY+af9NMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2ExMzAwYTItNTc0Yy00ZTdkLTgwNGEtMGY3NzIyNjgyMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApci7J6tCLbG1fas5lvRDI31KomWxsORSdBFs ethctQjl6HzLuPgnYM51Z0FIfetx4+4AXzgmLVtrxbz+2ZpopFX7zPGqhZsFd6/y Dl/IW+41raJiyFT1fZtY/eyc7zD1TI2euagEqgJx4vIotmPmRVSJobFVRG8uvogL cj8xhpGKY1sJPmNODCJJpjA4u7ydfxi+P9Um7fl1p326Yj2kqPd9jhMoJrGi4sQW lWwKbhT669A8xu90O1pxLszgpXJjUodNf6hDqtV/DqwPGXVK2dcqrurvtuHnYbig N7ozRNANxc82bRiWudAVfHH3g3+Pmj921O/Ci9A7fahtOGzreQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0MsebbTlBRGUL/Mfr9jqZXSFh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2JiMmU0YzAtNzc3ZC0z Y2IyLTlkM2MtNzA5ZGIyMDkyZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYIqbOjv9/LnIF0o6rxZhoIRQDW/HDWaz7aymxZsRiiHmWY4nCkxb9L wGMfArwru0aMVDzOUXO0wVdu71wO/4eCA+rlBwrMKAPsvLc6Khg2Y++xwZQXr69a egYBFYevEBG4eVfnTdQPPbFBC72/PTQB9ftr4Vx7WJS3ZX6uRRQw9riv0Kvn50zt HyCnvqFfsrlcK15fsb3FN48PScJRgriBqU6YO4udJdhylp3BQrp1tX8koa5i0P2d W3bwiTNJx9V5BWpJ1IjLETTxTVav4AWugCEzRhqJsPDRUYVjoWkPgpH3jpBAaS7a xoFe3UkMykjQyuXVTzoxMuQGpDCrpKU= -----END CERTIFICATE-----Generated at Fri Sep 25 08:48:26 2026 by rpki-client