$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa File: c77f172a-1df8-31ea-92f6-569d849ec8b9.roa (raw, json) Hash identifier: yhDNtOK+0GJMiTWgV0wdaneuFK1/gylHQV0qbHe4Pio= Subject key identifier: A7:77:3A:EE:28:E2:13:CD:CD:2C:3A:16:03:EB:23:7B:70:80:6B:55 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D20DD1611E3F5B4298780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 209.85.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:20:dd:16:11:e3:f5:b4:29:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b05335a-a063-4d00-80e8-17882d3e4a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b2:ae:c0:be:3d:33:0d:91:e5:e1:3e:cb:03: f1:59:29:02:21:05:ba:17:25:2e:c5:e6:ab:c7:3a: 72:9f:18:b5:b8:39:8a:90:2f:59:8f:b5:fa:9f:69: 9e:0a:08:85:bc:46:f0:8d:ee:91:82:6f:bf:ad:c4: 3a:a3:f4:a2:33:58:c4:3f:e0:1e:68:11:37:28:55: 84:b5:49:ec:50:1f:f3:bb:e9:06:02:f4:4a:15:5a: 88:69:b8:3a:e9:27:07:ed:e8:89:07:f9:5d:bd:2c: 5a:77:d6:31:d0:04:de:d8:eb:07:d0:e9:d4:4e:8a: 12:51:c4:8a:5b:c9:4e:d4:0c:5d:91:a8:91:a9:68: 09:00:1d:1a:ed:9e:b6:10:58:05:ff:9b:b9:57:b0: 55:79:3d:5d:25:7f:48:47:0b:43:92:f3:60:47:01: b3:d5:6f:f6:27:1e:aa:4b:fb:c8:49:50:84:cf:b9: 23:ff:84:57:5a:ce:b8:69:4b:8b:fb:4e:28:a1:2a: 22:8c:84:9a:6f:49:9a:db:44:41:05:57:2e:71:5a: 6f:58:6a:ba:f2:3f:8c:af:1e:5b:97:f4:d0:2b:4f: ff:92:72:1a:6e:91:1f:9d:ca:d9:cd:f1:4f:27:55: 72:e3:be:f6:f0:0f:5a:a0:a3:21:fb:55:36:c7:94: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:77:3A:EE:28:E2:13:CD:CD:2C:3A:16:03:EB:23:7B:70:80:6B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:dc:fd:77:86:64:e8:1e:6f:3b:8b:42:83:2d:b7:5f:d2:ff: 32:3b:23:35:61:ed:68:f3:74:05:1a:39:3f:5b:9e:d8:68:b6: e1:22:17:b2:2f:83:5f:69:7a:2c:94:e0:a4:0f:6d:49:48:dd: 65:de:63:b1:11:d7:6b:10:93:89:16:83:6b:c4:3f:b4:09:0c: 96:df:b5:94:83:5d:0f:c1:0d:be:0c:e1:22:86:5b:ff:5b:be: b8:cc:d0:ca:e9:72:88:d5:ef:17:5c:ad:2e:b9:8a:31:2a:c8: d0:c1:39:e4:5b:2a:a0:fc:10:ae:f3:84:7b:1e:6a:19:34:a7: 92:10:c3:be:d0:36:6c:8f:f3:96:e6:7e:c3:4a:01:2e:53:2b: 06:b5:41:4a:1e:47:e7:4c:6a:90:23:75:61:62:f3:ef:4a:b3: 9e:09:cf:d6:dc:2c:43:8e:04:03:ee:48:d9:aa:3a:45:ff:3f: 19:b7:ea:41:09:15:7c:35:a7:82:7e:9f:eb:13:17:33:f1:68: 8a:18:0e:96:fb:e0:97:09:4b:8a:8f:63:58:5f:35:e9:e2:e0: 8e:bb:9c:b0:6f:2a:38:28:4b:b2:28:35:0f:7e:15:b9:0d:d6: 7b:61:10:e1:ce:d4:7a:13:a2:60:00:15:52:bf:36:c0:99:f9: 7d:4d:78:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfSDdFhHj9bQph4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGIwNTMzNWEtYTA2My00ZDAwLTgwZTgtMTc4ODJkM2U0YTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLKuwL49Mw2R5eE+ywPxWSkCIQW6FyUuxear xzpynxi1uDmKkC9Zj7X6n2meCgiFvEbwje6Rgm+/rcQ6o/SiM1jEP+AeaBE3KFWE tUnsUB/zu+kGAvRKFVqIabg66ScH7eiJB/ldvSxad9Yx0ATe2OsH0OnUTooSUcSK W8lO1AxdkaiRqWgJAB0a7Z62EFgF/5u5V7BVeT1dJX9IRwtDkvNgRwGz1W/2Jx6q S/vISVCEz7kj/4RXWs64aUuL+04ooSoijISab0ma20RBBVcucVpvWGq68j+Mrx5b l/TQK0//knIabpEfncrZzfFPJ1Vy47728A9aoKMh+1U2x5T32QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd3Ou4o4hPNzSw6FgPrI3twgGtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzc3ZjE3MmEtMWRmOC0z MWVhLTkyZjYtNTY5ZDg0OWVjOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLc/XeGZOgebzuLQoMtt1/S/zI7IzVh7WjzdAUaOT9bnthotuEiF7Iv g19peiyU4KQPbUlI3WXeY7ER12sQk4kWg2vEP7QJDJbftZSDXQ/BDb4M4SKGW/9b vrjM0MrpcojV7xdcrS65ijEqyNDBOeRbKqD8EK7zhHseahk0p5IQw77QNmyP85bm fsNKAS5TKwa1QUoeR+dMapAjdWFi8+9Ks54Jz9bcLEOOBAPuSNmqOkX/Pxm36kEJ FXw1p4J+n+sTFzPxaIoYDpb74JcJS4qPY1hfNeni4I67nLBvKjgoS7IoNQ9+FbkN 1nthEOHO1HoTomAAFVK/NsCZ+X1NeGA= -----END CERTIFICATE-----Generated at Fri Sep 25 05:42:06 2026 by rpki-client