$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa File: 0299a712-fc10-3ade-be7c-01c58b9e9b23.roa (raw, json) Hash identifier: YfmwTTvS1tIewYEk/rvR0G8WKt/TVx3jA3LshZR0MCc= Subject key identifier: 9F:24:9F:CF:27:96:C9:0C:A7:B6:75:EC:BF:3A:74:9A:87:59:DF:C9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984FBC3A739F09003BEE3C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.58.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:fb:c3:a7:39:f0:90:03:be:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e6b46c49-8fec-4204-9643-d6b4c990d74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:7b:97:b5:dd:96:54:25:68:c8:d7:3d:58: 83:30:11:d1:32:31:9c:56:11:1a:ca:2d:a6:ad:c6: 20:57:25:18:9a:a3:05:14:fe:70:64:cd:7e:74:0d: 19:87:7b:87:49:d0:01:74:83:ac:31:a4:e1:57:aa: 88:34:90:82:b1:49:5a:c7:d6:d3:79:3e:05:95:da: 00:ce:ac:7a:07:c1:9a:86:92:fc:94:92:58:77:c5: b4:89:f5:88:2a:d3:50:c5:98:92:82:2f:18:75:bc: 07:f5:cd:28:ad:1d:57:b7:8e:f5:67:a1:ce:dd:f7: b0:46:e7:ce:84:7d:21:f2:4a:7a:7d:62:27:55:cd: d9:df:85:55:04:b3:32:c1:08:f7:f0:ca:e2:2f:6f: 3a:9e:10:51:13:19:9e:cf:bb:ed:9e:fa:f8:df:46: 5f:31:43:7b:aa:89:b3:95:76:16:cf:b0:70:09:89: 03:b6:2c:ca:4d:20:d3:7c:d1:8e:23:ce:0d:8e:4a: d0:48:3a:f3:e3:6e:df:3a:f7:7d:12:b2:0b:c6:af: 12:7a:e0:b6:6e:f1:43:29:ab:31:9f:72:95:b9:2a: 64:6d:78:93:15:73:28:00:ef:b2:b0:df:b9:fc:db: 9c:7c:01:1e:f1:11:f3:9b:1a:1a:43:df:d8:ef:3a: 86:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:24:9F:CF:27:96:C9:0C:A7:B6:75:EC:BF:3A:74:9A:87:59:DF:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:82:14:dd:54:22:d8:d2:8b:ba:5d:ad:61:84:e8:97:16:99: 61:4c:90:d1:96:85:64:23:2b:78:38:43:a0:58:3a:dd:5b:e8: f1:f2:e0:0b:73:cc:34:0d:f9:8f:2b:41:73:80:53:70:c3:9d: 88:49:53:8d:6e:1c:fb:27:67:32:17:2f:b5:94:f0:a8:3a:eb: a7:a8:09:02:52:25:e5:9d:2f:a8:5d:25:89:17:49:c3:02:f5: b5:3c:8c:09:6d:4f:18:72:64:ba:2e:d3:5c:ab:bf:14:4d:74: c9:89:9e:64:36:ac:58:35:84:16:10:8f:d2:fe:f7:28:ce:15: 94:46:50:15:b3:de:bf:b2:3f:fb:b4:3e:28:c1:e0:7c:b1:6c: 8d:08:8e:19:ad:c8:bb:f9:ab:f2:5d:d1:c2:29:40:2d:7a:75: e6:55:15:9f:26:dd:07:92:be:92:9d:a5:68:24:e4:dd:c1:57: 9e:b7:15:a4:d9:50:be:be:90:3c:4a:0a:fa:e7:8c:31:52:ba: a0:74:f7:18:0d:84:15:47:29:e8:14:d0:c9:0a:70:74:f4:73: 88:6a:72:70:b1:d2:dd:af:d4:20:bc:0d:5e:41:c6:8a:85:d0: a1:e2:eb:00:61:b2:15:c9:3c:ac:f2:0d:00:8a:0c:de:c6:4f: f5:06:15:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPvDpznwkAO+48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTZiNDZjNDktOGZlYy00MjA0LTk2NDMtZDZiNGM5OTBkNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6N7l7XdllQlaMjXPViDMBHRMjGcVhEayi2m rcYgVyUYmqMFFP5wZM1+dA0Zh3uHSdABdIOsMaThV6qINJCCsUlax9bTeT4FldoA zqx6B8GahpL8lJJYd8W0ifWIKtNQxZiSgi8YdbwH9c0orR1Xt471Z6HO3fewRufO hH0h8kp6fWInVc3Z34VVBLMywQj38MriL286nhBRExmez7vtnvr430ZfMUN7qomz lXYWz7BwCYkDtizKTSDTfNGOI84NjkrQSDrz427fOvd9ErILxq8SeuC2bvFDKasx n3KVuSpkbXiTFXMoAO+ysN+5/NucfAEe8RHzmxoaQ9/Y7zqG7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8kn88nlskMp7Z17L86dJqHWd/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI5OWE3MTItZmMxMC0z YWRlLWJlN2MtMDFjNThiOWU5YjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyCFN1UItjSi7pdrWGE6JcWmWFMkNGWhWQjK3g4Q6BYOt1b6PHy4Atz zDQN+Y8rQXOAU3DDnYhJU41uHPsnZzIXL7WU8Kg666eoCQJSJeWdL6hdJYkXScMC 9bU8jAltTxhyZLou01yrvxRNdMmJnmQ2rFg1hBYQj9L+9yjOFZRGUBWz3r+yP/u0 PijB4HyxbI0IjhmtyLv5q/Jd0cIpQC16deZVFZ8m3QeSvpKdpWgk5N3BV563FaTZ UL6+kDxKCvrnjDFSuqB09xgNhBVHKegU0MkKcHT0c4hqcnCx0t2v1CC8DV5BxoqF 0KHi6wBhshXJPKzyDQCKDN7GT/UGFd0= -----END CERTIFICATE-----Generated at Fri Sep 25 17:01:52 2026 by rpki-client