$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9242d4d2-ae71-3199-b005-7f03715ae415.roa File: 9242d4d2-ae71-3199-b005-7f03715ae415.roa (raw, json) Hash identifier: Ad5dMSLpvqx0iaPAQuaQr0pkX62zBGCRE5vDme5mYow= Subject key identifier: B2:8E:0D:88:1A:9A:F1:F6:99:80:F6:3C:AE:3B:F8:3D:DD:29:0A:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DBB0A895A10CB983E1E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9242d4d2-ae71-3199-b005-7f03715ae415.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 64.233.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bb:0a:89:5a:10:cb:98:3e:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f1ef6d70-5399-4fe7-93c6-c15e02d90ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:92:d5:37:b2:e2:56:29:a2:92:f8:22:dd: b0:61:83:6c:c6:ec:ae:c7:80:b6:85:88:72:9a:9c: 02:89:1d:c8:5b:05:1c:98:85:2c:30:c6:ed:ae:9f: 8b:5c:9f:ca:16:20:fa:e8:30:86:48:43:f6:30:69: cc:dd:6d:e3:d6:82:0b:dc:c1:ba:e0:08:d6:f5:0d: cf:3e:df:98:69:c4:74:a5:9f:b1:be:a7:ff:89:c1: ec:5f:22:f6:1c:22:8a:87:bc:4a:cd:5d:4f:f1:c7: 2a:5a:30:d1:48:82:96:c9:4f:a9:e8:f8:61:0a:48: 23:62:58:59:6e:0f:b2:5e:b9:81:67:4f:fd:20:5a: 4d:3c:51:60:d0:ad:5a:02:a9:78:8e:0c:24:e7:18: 08:8a:b5:aa:5c:d4:d8:5c:52:0f:7c:6e:a7:b0:b7: b0:3a:22:e4:ab:16:17:3e:bb:ef:fb:a8:9a:dc:37: b6:a9:6d:69:7e:22:13:f3:51:bf:ba:79:2e:50:2c: 8c:9c:fe:4b:e9:56:95:68:ac:8a:10:de:ef:52:83: c6:cb:29:d4:99:f4:97:f3:b6:92:9a:50:34:f5:f5: 2a:74:66:b0:7c:f2:fc:ff:6f:b9:f1:0e:55:49:aa: 41:1f:e3:a9:94:80:ad:b4:02:60:d5:b5:2b:30:5b: d4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8E:0D:88:1A:9A:F1:F6:99:80:F6:3C:AE:3B:F8:3D:DD:29:0A:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9242d4d2-ae71-3199-b005-7f03715ae415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:45:95:2c:3e:83:5e:10:d3:ae:cb:4b:c7:ad:cb:c7:28:55: 5d:64:40:d8:c2:ec:86:97:2d:dd:1f:bf:97:54:f7:43:5b:bb: bf:a4:1d:5e:46:bb:90:25:51:59:54:52:f6:20:56:1d:48:d3: d7:fb:02:61:af:ed:02:a7:d4:12:49:b3:99:32:ca:a6:92:fd: a6:b3:49:b5:e6:3d:49:ad:67:06:d5:0e:9a:55:b8:f0:a5:48: c4:0d:39:4e:bc:c3:14:39:72:8a:bb:4a:e2:e4:10:6b:8d:6e: 0d:1c:29:59:67:72:79:a6:47:85:69:ae:f5:4b:7a:eb:d1:c4: b0:54:7a:bd:01:74:a5:ae:10:7b:2f:2c:30:75:4e:28:a1:bc: 54:b2:de:73:b5:c4:64:b6:f7:7f:ff:6c:a4:99:fc:73:80:98: bc:bb:79:b0:dc:2f:69:d1:70:9e:b3:a6:2d:6e:37:49:59:d4: bb:0a:ce:03:5f:f7:89:27:05:5b:11:e8:58:4a:70:cb:94:1c: ff:eb:23:af:a5:c5:39:19:fc:73:0c:0e:8a:11:13:40:53:79: 43:e6:69:b1:6b:d3:57:dc:95:99:17:9a:e0:7b:eb:64:3e:34: 8d:ad:e7:86:68:2a:1c:40:6e:9e:4d:58:bc:88:cd:fa:31:56: 30:65:43:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbsKiVoQy5g+HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjFlZjZkNzAtNTM5OS00ZmU3LTkzYzYtYzE1ZTAyZDkwYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEqS1Tey4lYpopL4It2wYYNsxuyux4C2hYhy mpwCiR3IWwUcmIUsMMbtrp+LXJ/KFiD66DCGSEP2MGnM3W3j1oIL3MG64AjW9Q3P Pt+YacR0pZ+xvqf/icHsXyL2HCKKh7xKzV1P8ccqWjDRSIKWyU+p6PhhCkgjYlhZ bg+yXrmBZ0/9IFpNPFFg0K1aAql4jgwk5xgIirWqXNTYXFIPfG6nsLewOiLkqxYX Prvv+6ia3De2qW1pfiIT81G/unkuUCyMnP5L6VaVaKyKEN7vUoPGyynUmfSX87aS mlA09fUqdGawfPL8/2+58Q5VSapBH+OplICttAJg1bUrMFvULwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKODYgamvH2mYD2PK47+D3dKQqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTI0MmQ0ZDItYWU3MS0z MTk5LWIwMDUtN2YwMzcxNWFlNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQOmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENFlSw+g14Q067LS8ety8coVV1kQNjC7IaXLd0fv5dU90Nbu7+kHV5G u5AlUVlUUvYgVh1I09f7AmGv7QKn1BJJs5kyyqaS/aazSbXmPUmtZwbVDppVuPCl SMQNOU68wxQ5coq7SuLkEGuNbg0cKVlncnmmR4VprvVLeuvRxLBUer0BdKWuEHsv LDB1TiihvFSy3nO1xGS293//bKSZ/HOAmLy7ebDcL2nRcJ6zpi1uN0lZ1LsKzgNf 94knBVsR6FhKcMuUHP/rI6+lxTkZ/HMMDooRE0BTeUPmabFr01fclZkXmuB762Q+ NI2t54ZoKhxAbp5NWLyIzfoxVjBlQzo= -----END CERTIFICATE-----Generated at Sun Nov 15 16:44:19 2026 by rpki-client