$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc04f597-48fd-3668-9e04-24f3a053b7e3.roa File: fc04f597-48fd-3668-9e04-24f3a053b7e3.roa (raw, json) Hash identifier: m5JZnvkJE5AXa8kmMyq9Mc3UNIE4yVCr8kh2Ms8+GKY= Subject key identifier: 19:CE:39:40:34:C2:44:CB:9B:49:4E:70:DC:B5:19:78:73:8B:D5:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CF23722A6C69674F7E480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc04f597-48fd-3668-9e04-24f3a053b7e3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.239.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:f2:37:22:a6:c6:96:74:f7:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8c91485a-9de9-480c-a936-a41061a5bfd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fc:3a:b9:46:12:1b:3f:a7:2d:4b:43:46:b0: d9:af:e8:a1:e7:b5:08:eb:c0:a3:62:73:c1:01:62: 8a:ab:e5:6e:03:be:d0:8a:f7:b7:af:3c:d2:f8:50: 88:1b:e6:b0:00:51:be:25:ee:d2:29:c6:e1:04:68: d6:7b:43:3b:96:f5:98:17:f9:e5:bb:8a:b1:11:9a: 9f:b6:0c:6b:99:4d:17:af:cf:4c:06:dc:1b:5d:9b: 74:00:cc:70:c3:29:81:77:6d:60:f3:2c:9b:2a:4e: 54:28:73:79:a3:81:99:3a:e5:9e:3d:59:fd:1e:eb: 8f:69:da:2a:f1:91:6d:2c:32:28:a9:39:42:c0:7e: e6:8a:0b:65:ae:67:e2:c2:6d:59:77:cc:7b:ae:fa: 57:9d:51:47:2d:5e:ba:b9:7b:f5:8b:ce:2e:89:77: 95:07:f3:b4:84:32:c9:87:25:b8:b2:f0:12:c4:57: c7:c9:c5:99:75:62:a7:31:85:94:16:97:52:cd:d0: ad:f4:94:27:c9:a4:02:c8:b3:e5:02:bc:b2:f2:7c: 25:a1:56:85:3c:80:f1:8c:dd:17:5d:ff:12:52:2c: e6:0b:69:4b:05:4f:02:33:36:d5:14:7c:60:dd:4e: 16:51:df:60:08:16:65:e4:2a:bb:07:1f:9b:96:12: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CE:39:40:34:C2:44:CB:9B:49:4E:70:DC:B5:19:78:73:8B:D5:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc04f597-48fd-3668-9e04-24f3a053b7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2e:5b:da:9e:36:15:39:39:a5:5e:0e:56:23:85:33:f4:e6: 71:18:e2:e4:a0:bf:d9:77:75:a4:48:b1:33:86:8f:b5:18:f7: 96:c1:23:7b:37:5f:0c:36:6b:6a:8b:fa:ea:90:06:88:e7:2a: 44:f0:7b:6a:cf:f9:54:02:ad:18:94:12:6a:f4:cc:a0:ee:f4: 45:a4:8b:83:69:14:7f:09:61:2d:2e:ed:4f:f8:fe:f9:60:05: 4c:31:1c:72:5c:38:08:f1:2c:12:5b:d0:0f:05:8a:4d:7b:8f: 50:eb:21:5d:cc:20:ff:20:91:5f:f6:c5:21:2a:73:93:b3:e9: 45:0c:0f:0c:93:7f:97:d9:17:d0:cd:3c:f7:35:8a:4e:2c:4b: c1:72:92:8d:0f:80:f1:65:52:5a:4a:c7:26:d7:25:5e:e0:20: f9:4a:b4:be:cf:f0:4c:ca:a7:19:26:29:59:16:cd:a9:7e:f6: 41:59:bf:f8:e9:b3:1a:b7:88:d3:86:9f:41:2c:74:95:4a:63: a5:17:05:19:69:df:73:c0:63:1b:17:3c:3c:26:dd:70:4c:d1: 91:82:1e:9d:fd:9e:18:64:d8:6f:f1:2e:22:a2:0d:98:02:a2: 9d:b5:7e:6e:4d:5c:2f:b5:4b:42:df:87:d1:9f:9f:19:c2:39: 2e:ae:ba:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfPI3IqbGlnT35IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGM5MTQ4NWEtOWRlOS00ODBjLWE5MzYtYTQxMDYxYTViZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPw6uUYSGz+nLUtDRrDZr+ih57UI68CjYnPB AWKKq+VuA77Qive3rzzS+FCIG+awAFG+Je7SKcbhBGjWe0M7lvWYF/nlu4qxEZqf tgxrmU0Xr89MBtwbXZt0AMxwwymBd21g8yybKk5UKHN5o4GZOuWePVn9HuuPadoq 8ZFtLDIoqTlCwH7migtlrmfiwm1Zd8x7rvpXnVFHLV66uXv1i84uiXeVB/O0hDLJ hyW4svASxFfHycWZdWKnMYWUFpdSzdCt9JQnyaQCyLPlAryy8nwloVaFPIDxjN0X Xf8SUizmC2lLBU8CMzbVFHxg3U4WUd9gCBZl5Cq7Bx+blhJBTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnOOUA0wkTLm0lOcNy1GXhzi9UxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmMwNGY1OTctNDhmZC0z NjY4LTllMDQtMjRmM2EwNTNiN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGouW9qeNhU5OaVeDlYjhTP05nEY4uSgv9l3daRIsTOGj7UY95bBI3s3 Xww2a2qL+uqQBojnKkTwe2rP+VQCrRiUEmr0zKDu9EWki4NpFH8JYS0u7U/4/vlg BUwxHHJcOAjxLBJb0A8Fik17j1DrIV3MIP8gkV/2xSEqc5Oz6UUMDwyTf5fZF9DN PPc1ik4sS8Fyko0PgPFlUlpKxybXJV7gIPlKtL7P8EzKpxkmKVkWzal+9kFZv/jp sxq3iNOGn0EsdJVKY6UXBRlp33PAYxsXPDwm3XBM0ZGCHp39nhhk2G/xLiKiDZgC op21fm5NXC+1S0Lfh9GfnxnCOS6uuv8= -----END CERTIFICATE-----Generated at Fri Sep 25 17:15:50 2026 by rpki-client