$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ace4f3c-d27f-31f4-9281-08115ec9c3d1.roa File: 0ace4f3c-d27f-31f4-9281-08115ec9c3d1.roa (raw, json) Hash identifier: ODvYYpAmPpKGvjoS/Q5Of0jEsCaFYBdPboscZ1ma99k= Subject key identifier: 7D:D3:6F:A5:63:A4:5F:70:5E:BA:5C:09:5D:D6:90:8D:88:42:38:91 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CF7F6F37A39251502E900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ace4f3c-d27f-31f4-9281-08115ec9c3d1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.239.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:f7:f6:f3:7a:39:25:15:02:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec800cfa-e9df-411b-b7f5-a4182cd4dcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:d5:ef:85:ec:7e:37:4c:31:94:73:cf:ca: b3:82:a4:6b:a4:27:15:b6:39:53:0f:be:19:25:01: 9f:bd:2d:95:58:4f:5d:54:a0:80:1e:c4:6b:85:78: 59:50:59:7d:71:0b:9c:d6:bc:70:54:c2:ae:43:ab: 2a:30:b2:4b:e4:82:04:8b:7c:95:7d:68:56:00:6c: 5b:de:bf:bd:3b:a4:f6:4f:cf:21:18:20:11:cc:8b: 9d:4d:70:78:9d:e7:bf:76:1f:99:09:2a:34:4e:9d: 8d:14:68:a2:51:d3:3f:54:93:08:a7:dd:9e:ca:c7: 98:fd:57:f3:3f:ae:8f:50:a8:95:ba:61:9c:f2:bf: f3:a1:2e:4b:a2:9d:a6:29:61:c1:81:3a:89:b7:a6: 51:05:93:f3:36:d4:92:90:ea:bf:0f:48:c8:32:5a: cb:cc:74:fe:4f:c9:7c:6e:37:22:36:dc:5f:b7:09: cb:5b:1d:64:98:b3:da:4f:9a:60:04:79:a3:fd:04: 4c:b1:1d:7f:6d:34:a1:13:35:65:99:18:a7:77:8f: 33:0b:e6:e5:03:fd:e9:c2:06:84:66:f6:1c:0e:84: bd:20:f1:8c:4d:3e:98:7a:5e:a3:72:d2:08:ee:57: 03:86:94:eb:76:db:4e:67:a2:bb:ff:59:a0:13:06: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D3:6F:A5:63:A4:5F:70:5E:BA:5C:09:5D:D6:90:8D:88:42:38:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ace4f3c-d27f-31f4-9281-08115ec9c3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b0:ba:74:65:2c:02:6e:4a:71:bd:2e:a5:7f:a3:10:53:d3: a9:10:f0:33:15:7b:94:e6:02:a2:b4:03:47:b9:a0:12:e1:d6: 5c:74:e9:d1:cc:dd:85:03:23:ba:e4:04:c4:b3:91:8c:56:67: 2b:14:12:ef:54:c9:a8:3a:8c:2a:ab:cc:0d:50:92:a9:2c:3e: 47:f4:ef:f9:1c:07:7c:8a:8a:92:4c:82:ac:44:10:a4:76:f8: 49:1c:fc:12:e0:d4:8d:7d:98:67:ff:ce:a6:2b:ce:01:8d:4d: b5:72:48:dc:69:03:b4:6b:df:70:73:4b:7d:a5:13:40:97:6e: 42:4c:40:64:07:e8:de:51:c6:6e:2e:98:09:41:94:c1:e0:5d: 00:99:8b:f1:a6:72:13:5e:63:49:61:a9:6e:d7:71:65:37:dd: 6f:ec:b5:20:7c:6a:8b:05:73:e8:a3:6c:ae:b0:6f:0c:8b:f7: ca:af:2d:a8:2f:f5:7e:ba:c6:fa:53:e0:40:3d:bb:76:e7:9c: 6c:cf:89:ba:ce:29:cc:74:52:6b:90:69:ad:d9:a0:12:56:af: b6:a1:2d:fd:d6:dc:0f:a2:8f:c1:da:51:d8:db:58:07:27:06: 38:a6:3f:2b:72:4d:7e:0b:f8:d1:8d:47:0d:ef:ae:4f:28:51: e2:c8:7d:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfPf283o5JRUC6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWM4MDBjZmEtZTlkZi00MTFiLWI3ZjUtYTQxODJjZDRkY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1HV74XsfjdMMZRzz8qzgqRrpCcVtjlTD74Z JQGfvS2VWE9dVKCAHsRrhXhZUFl9cQuc1rxwVMKuQ6sqMLJL5IIEi3yVfWhWAGxb 3r+9O6T2T88hGCARzIudTXB4nee/dh+ZCSo0Tp2NFGiiUdM/VJMIp92eyseY/Vfz P66PUKiVumGc8r/zoS5Lop2mKWHBgTqJt6ZRBZPzNtSSkOq/D0jIMlrLzHT+T8l8 bjciNtxftwnLWx1kmLPaT5pgBHmj/QRMsR1/bTShEzVlmRind48zC+blA/3pwgaE ZvYcDoS9IPGMTT6Yel6jctII7lcDhpTrdttOZ6K7/1mgEwbzlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3Tb6VjpF9wXrpcCV3WkI2IQjiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFjZTRmM2MtZDI3Zi0z MWY0LTkyODEtMDgxMTVlYzljM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+wunRlLAJuSnG9LqV/oxBT06kQ8DMVe5TmAqK0A0e5oBLh1lx06dHM 3YUDI7rkBMSzkYxWZysUEu9Uyag6jCqrzA1QkqksPkf07/kcB3yKipJMgqxEEKR2 +Ekc/BLg1I19mGf/zqYrzgGNTbVySNxpA7Rr33BzS32lE0CXbkJMQGQH6N5Rxm4u mAlBlMHgXQCZi/GmchNeY0lhqW7XcWU33W/stSB8aosFc+ijbK6wbwyL98qvLagv 9X66xvpT4EA9u3bnnGzPibrOKcx0UmuQaa3ZoBJWr7ahLf3W3A+ij8HaUdjbWAcn BjimPytyTX4L+NGNRw3vrk8oUeLIfcM= -----END CERTIFICATE-----Generated at Sat Sep 26 01:46:58 2026 by rpki-client