$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa File: 8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa (raw, json) Hash identifier: kZg7HdQJaXwh34+c8QnmOYg3ydfxG+j2B5OLQhDDr6E= Subject key identifier: 9E:1F:53:B3:8E:F7:7D:D4:6C:39:36:67:85:6F:75:55:60:ED:CA:E9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CF54080F579F3306036C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 173.194.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:f5:40:80:f5:79:f3:30:60:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bfc44084-4308-4a64-af7a-c7d8e96751b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8c:f6:65:ae:40:fb:f9:91:da:62:a3:40:43: 3b:46:13:7c:3d:ee:a9:c1:8e:50:fa:ea:24:7b:cf: d8:9c:67:32:6c:8a:22:2c:30:fe:d8:02:e5:60:e8: 24:e0:f9:52:72:31:4b:6d:7b:48:44:75:5b:9b:ee: ae:17:0b:84:d4:d7:25:04:9d:0d:7c:de:d1:86:de: 7a:8b:b5:bc:18:83:25:4d:00:9b:ef:b6:56:c7:d8: 2c:da:5a:ca:cb:77:61:78:e5:0c:64:74:39:f4:90: f7:2f:a7:44:ae:0f:48:d4:66:b3:f4:fb:e5:62:5e: b3:2f:ca:8f:9d:c4:bb:2e:ab:76:3f:57:34:90:14: 44:40:60:08:5f:ef:77:8a:a1:6d:d5:7a:b4:9f:7a: 85:ed:90:d9:21:59:e6:19:75:27:52:55:3e:ed:2a: 18:d4:17:1c:44:e9:d6:cd:20:4d:b7:d3:ce:0e:62: 7d:63:a8:bd:40:62:46:bc:5d:f3:f1:db:80:a2:b6: 1b:db:77:d9:5a:a7:ef:b7:50:08:ca:0f:ea:0a:7f: 99:3f:5a:18:40:fc:89:ac:ca:bc:a9:64:c5:59:03: 44:e8:2a:49:ea:8d:6c:69:c4:59:08:5b:55:45:f3: 75:21:62:aa:bc:84:c4:82:22:71:65:61:d9:99:cf: 19:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1F:53:B3:8E:F7:7D:D4:6C:39:36:67:85:6F:75:55:60:ED:CA:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:70:d4:54:a9:98:e9:9d:60:f9:0a:15:f6:e1:32:7d:2b:7b: d7:14:99:09:61:57:02:55:58:76:ae:c9:0c:7f:c6:19:ec:f5: d1:f3:bd:9c:42:c9:29:c8:1c:19:f0:bf:56:1c:d8:a0:65:53: 1c:d1:b5:7a:2e:30:39:06:b6:fa:be:8c:42:5f:cd:c6:e8:ac: cc:05:e3:cd:11:52:57:6e:ad:00:da:ba:97:3c:05:af:0d:f7: a4:07:34:9d:b3:e2:92:d6:05:68:5a:94:29:b8:10:6f:b3:a9: 10:d4:f6:e7:8e:44:a3:5f:9c:89:a0:90:26:ab:2f:ad:ab:62: ce:14:aa:ba:9a:02:b2:e1:b3:04:a6:4c:6d:a5:ca:c3:5d:c6: f6:81:7a:68:16:fe:2c:d8:f9:e3:e8:52:49:4d:d4:67:6a:aa: 9e:db:1f:ff:1e:85:5d:59:e5:81:ec:21:22:d1:41:c9:72:ee: 31:3b:02:54:b6:c3:4e:35:28:31:f6:98:fa:73:06:e8:d6:dd: 08:44:b5:f9:ff:ff:dd:c8:46:73:d6:80:52:d1:38:60:79:94: 70:0d:d7:22:44:51:76:c1:ed:24:6f:d0:c6:da:21:9f:01:eb: a0:9c:e5:8c:df:f9:48:69:4c:b9:4a:71:76:5c:53:40:7a:b4: 70:6f:4e:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfPVAgPV58zBgNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmZjNDQwODQtNDMwOC00YTY0LWFmN2EtYzdkOGU5Njc1MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoz2Za5A+/mR2mKjQEM7RhN8Pe6pwY5Q+uok e8/YnGcybIoiLDD+2ALlYOgk4PlScjFLbXtIRHVbm+6uFwuE1NclBJ0NfN7Rht56 i7W8GIMlTQCb77ZWx9gs2lrKy3dheOUMZHQ59JD3L6dErg9I1Gaz9PvlYl6zL8qP ncS7Lqt2P1c0kBREQGAIX+93iqFt1Xq0n3qF7ZDZIVnmGXUnUlU+7SoY1BccROnW zSBNt9PODmJ9Y6i9QGJGvF3z8duAorYb23fZWqfvt1AIyg/qCn+ZP1oYQPyJrMq8 qWTFWQNE6CpJ6o1sacRZCFtVRfN1IWKqvITEgiJxZWHZmc8ZsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4fU7OO933UbDk2Z4VvdVVg7crpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGIzYzcxOTktOWQzMi0z MjBjLTg5ZDItMTY0Y2QwYmZjM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFw1FSpmOmdYPkKFfbhMn0re9cUmQlhVwJVWHauyQx/xhns9dHzvZxC ySnIHBnwv1Yc2KBlUxzRtXouMDkGtvq+jEJfzcborMwF480RUldurQDaupc8Ba8N 96QHNJ2z4pLWBWhalCm4EG+zqRDU9ueORKNfnImgkCarL62rYs4UqrqaArLhswSm TG2lysNdxvaBemgW/izY+ePoUklN1Gdqqp7bH/8ehV1Z5YHsISLRQcly7jE7AlS2 w041KDH2mPpzBujW3QhEtfn//93IRnPWgFLROGB5lHAN1yJEUXbB7SRv0MbaIZ8B 66Cc5Yzf+UhpTLlKcXZcU0B6tHBvTtE= -----END CERTIFICATE-----Generated at Fri Sep 25 15:43:47 2026 by rpki-client