$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa File: 89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa (raw, json) Hash identifier: aJaoQyRyTk+RG/ASkiLVd6RnoRGlwUtkA8XFv9+qdCE= Subject key identifier: 80:6D:0F:1A:60:C1:8E:77:13:6B:CE:B4:5B:F6:A3:C6:5E:6A:B0:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D9268B65935DEBA319C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 64.233.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:92:68:b6:59:35:de:ba:31:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ad4391f9-6664-4779-bc07-5f7d676bbc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:25:37:4f:8b:6b:d2:44:df:1e:52:9c:cb:f8: 94:d9:91:37:63:d3:61:d7:61:19:17:dc:52:6d:9d: 73:d1:4c:a3:26:3e:81:93:a1:c3:a3:6b:25:88:5c: 4b:bc:f7:cf:5d:ca:b2:9f:93:fc:74:f3:10:aa:0a: 27:24:b6:af:ee:7e:a4:7d:f8:91:a4:fa:30:06:5c: 1e:39:88:25:86:45:18:dc:5d:df:b6:c0:45:0a:ab: 2f:23:8e:12:d9:e9:6e:ed:cf:10:5b:d9:ad:d2:a3: c1:82:9d:98:cf:0e:e6:82:d1:56:9b:8d:ea:b9:90: ac:b5:ca:88:54:c8:6d:d2:e1:bc:f3:82:d6:c3:12: f5:f9:3b:9c:80:24:21:12:dd:9d:a3:67:00:d1:75: a0:40:af:30:38:8e:4f:34:73:b2:6f:1e:99:98:25: 77:19:0b:eb:5b:57:b5:8c:93:0d:27:4d:a9:a3:4a: 0f:62:8b:93:7b:6a:ad:cd:e6:94:ca:dc:ec:e2:98: 19:9a:06:71:38:64:90:4a:9f:17:19:e5:9e:9d:61: e2:9b:d1:0c:7f:35:d9:77:ad:2f:c5:15:f4:b8:e0: b0:12:cd:e0:ed:92:6d:89:24:7e:ac:2f:37:ad:a3: cd:af:bc:3f:f8:82:b2:78:26:60:9a:8d:88:22:f9: ab:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6D:0F:1A:60:C1:8E:77:13:6B:CE:B4:5B:F6:A3:C6:5E:6A:B0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c7:c2:62:63:78:e8:90:49:9c:e1:23:d7:28:d3:09:20:c7: 5f:9f:28:c9:50:fb:a4:d2:91:c6:56:7f:9e:ee:02:0e:1a:55: 55:ba:b5:38:ae:6c:86:9d:64:87:ca:73:31:b6:ae:c9:2a:56: 3e:1b:35:d9:41:6c:fe:58:70:8f:10:c6:25:8c:b1:d5:73:18: 52:df:23:9c:2d:ad:dd:37:69:c4:1c:76:ce:f9:2a:10:bb:c6: ac:78:fe:02:40:df:75:3d:a6:84:6f:5c:2b:d6:e2:5a:10:52: b2:5e:1c:0e:a1:a2:28:c2:b3:a6:0c:4e:3d:29:80:40:e1:2d: 6b:a8:1f:62:fc:d5:04:ea:c0:71:d4:20:eb:39:fc:41:95:42: 22:9c:ef:6f:33:1d:22:39:e0:8b:ce:d3:49:c5:da:e8:16:85: 23:a8:30:c7:82:05:5c:32:3f:bd:70:99:72:f7:9a:50:54:b0: c1:b5:07:6f:04:bd:3a:a1:43:71:eb:e8:ab:00:53:ff:3b:cd: 4c:0d:1b:e3:f4:7a:d5:3f:81:47:fa:bd:fb:6f:11:2c:3b:a0: 59:d6:f5:42:62:88:33:92:cd:0d:a1:df:f1:69:67:36:e1:b2: d7:51:15:23:a0:74:dd:2c:a4:46:5e:11:8a:18:db:32:c3:bd: 2a:f0:db:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZJotlk13roxnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWQ0MzkxZjktNjY2NC00Nzc5LWJjMDctNWY3ZDY3NmJiYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyU3T4tr0kTfHlKcy/iU2ZE3Y9Nh12EZF9xS bZ1z0UyjJj6Bk6HDo2sliFxLvPfPXcqyn5P8dPMQqgonJLav7n6kffiRpPowBlwe OYglhkUY3F3ftsBFCqsvI44S2elu7c8QW9mt0qPBgp2Yzw7mgtFWm43quZCstcqI VMht0uG884LWwxL1+TucgCQhEt2do2cA0XWgQK8wOI5PNHOybx6ZmCV3GQvrW1e1 jJMNJ02po0oPYouTe2qtzeaUytzs4pgZmgZxOGSQSp8XGeWenWHim9EMfzXZd60v xRX0uOCwEs3g7ZJtiSR+rC83raPNr7w/+IKyeCZgmo2IIvmrxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBtDxpgwY53E2vOtFv2o8ZearBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODlmZjlkYWMtZGYwYS0z ODM1LWFhMmMtYmQzZDk0Yjk4YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDHwmJjeOiQSZzhI9co0wkgx1+fKMlQ+6TSkcZWf57uAg4aVVW6tTiu bIadZIfKczG2rskqVj4bNdlBbP5YcI8QxiWMsdVzGFLfI5wtrd03acQcds75KhC7 xqx4/gJA33U9poRvXCvW4loQUrJeHA6hoijCs6YMTj0pgEDhLWuoH2L81QTqwHHU IOs5/EGVQiKc728zHSI54IvO00nF2ugWhSOoMMeCBVwyP71wmXL3mlBUsMG1B28E vTqhQ3Hr6KsAU/87zUwNG+P0etU/gUf6vftvESw7oFnW9UJiiDOSzQ2h3/FpZzbh stdRFSOgdN0spEZeEYoY2zLDvSrw21Q= -----END CERTIFICATE-----Generated at Sat Sep 26 09:01:29 2026 by rpki-client