$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa File: 0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa (raw, json) Hash identifier: e/JSJzuOqK1I6xZPKTsF/zajGyup5ZVR+gq6LHzWSiY= Subject key identifier: 57:67:A9:E1:7F:7B:2F:31:89:BA:C7:CD:A0:1C:E9:04:98:EE:78:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CF32A83377699CFFA11E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.58.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:f3:2a:83:37:76:99:cf:fa:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0c73433e-e4b6-47b4-b919-29b14dfe2acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c2:23:0b:f0:e2:62:89:44:af:0b:aa:49:05: 17:f5:aa:8e:14:11:9f:7d:84:7e:98:fa:d0:33:31: bd:90:02:39:f6:19:ac:b8:56:f5:48:14:cd:40:32: de:59:4b:c9:a4:f4:d4:a1:4e:10:57:6f:7e:04:b8: 23:8a:54:a7:81:97:6d:57:0c:aa:d1:f1:f3:2e:c5: c8:ac:7f:79:da:28:27:af:2c:43:3b:ac:2a:96:0d: dd:4e:dd:ed:a2:f6:d2:ba:e8:06:60:7d:21:aa:5b: 82:63:a6:26:73:74:97:df:21:1a:ec:04:49:b5:65: 9e:d7:d2:f3:90:60:b5:96:9f:f1:f3:02:65:51:c2: 86:2b:a9:ac:aa:b3:54:80:25:c6:e0:19:b5:38:67: c4:41:90:ff:b1:33:81:b4:48:c0:c8:b2:68:01:44: 49:9d:7d:0f:4f:69:72:d8:9c:07:13:ea:d2:15:4c: 5c:96:e2:a8:81:ee:30:d5:f7:3b:bd:e6:98:b5:2a: 89:b0:cb:96:c1:30:a5:0e:b5:94:2b:db:85:06:b3: 5b:c0:a7:89:40:56:bb:6f:a2:bb:3f:62:fc:3d:76: dc:2c:f8:eb:12:0c:e2:e5:87:97:ce:2f:82:8d:c3: 06:2d:81:eb:7f:34:66:51:cf:53:61:6c:e6:a5:9d: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:67:A9:E1:7F:7B:2F:31:89:BA:C7:CD:A0:1C:E9:04:98:EE:78:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:5a:c5:8f:8d:e7:4a:43:28:d5:e5:a6:88:74:9a:88:85:6c: f8:54:c3:72:c6:25:44:eb:11:7f:e0:4a:0b:17:66:cc:b8:57: df:92:47:5b:b7:31:25:8c:a1:47:3d:11:36:19:bd:2d:ff:91: 8d:c2:11:7c:71:1e:4c:b6:0d:0d:ba:93:f7:10:fd:ce:b3:a2: 08:8c:04:01:7d:aa:4c:51:b9:fa:ab:f7:07:92:fd:50:31:64: 74:d0:b8:89:45:bd:ec:81:e0:b0:89:cb:18:cd:5f:d1:f7:5d: 40:95:ad:23:52:72:8a:c2:ff:49:9e:33:1c:4c:42:45:48:e7: cc:d2:97:63:74:6f:53:02:ea:5e:7a:52:25:b7:53:3c:61:0f: 30:84:9f:02:de:bf:ee:a8:3a:f7:da:a3:88:8e:50:a9:25:85: 4f:9e:08:59:a5:fc:9b:39:1d:a1:ff:7b:5b:f7:e0:59:ac:3a: a3:f9:de:40:7f:04:41:71:d7:9a:8b:2d:3b:e1:35:da:0e:00: b0:83:4f:2f:ba:35:a1:0a:c5:db:4c:02:21:52:b5:29:6c:89: cc:f2:94:82:7d:29:74:68:5f:82:5a:54:03:c1:2b:23:6a:38: 89:e0:c4:3d:8a:cb:4d:72:35:c7:4d:74:4d:32:01:62:d2:b7: fb:21:b7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfPMqgzd2mc/6EeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGM3MzQzM2UtZTRiNi00N2I0LWI5MTktMjliMTRkZmUyYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcIjC/DiYolErwuqSQUX9aqOFBGffYR+mPrQ MzG9kAI59hmsuFb1SBTNQDLeWUvJpPTUoU4QV29+BLgjilSngZdtVwyq0fHzLsXI rH952ignryxDO6wqlg3dTt3tovbSuugGYH0hqluCY6Ymc3SX3yEa7ARJtWWe19Lz kGC1lp/x8wJlUcKGK6msqrNUgCXG4Bm1OGfEQZD/sTOBtEjAyLJoAURJnX0PT2ly 2JwHE+rSFUxcluKoge4w1fc7veaYtSqJsMuWwTClDrWUK9uFBrNbwKeJQFa7b6K7 P2L8PXbcLPjrEgzi5YeXzi+CjcMGLYHrfzRmUc9TYWzmpZ1ISwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdnqeF/ey8xibrHzaAc6QSY7nh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGY0YjcyNGItM2M4My0z NzdlLWEzZmEtNDljMTM0ZjkzZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVaxY+N50pDKNXlpoh0moiFbPhUw3LGJUTrEX/gSgsXZsy4V9+SR1u3 MSWMoUc9ETYZvS3/kY3CEXxxHky2DQ26k/cQ/c6zogiMBAF9qkxRufqr9weS/VAx ZHTQuIlFveyB4LCJyxjNX9H3XUCVrSNScorC/0meMxxMQkVI58zSl2N0b1MC6l56 UiW3UzxhDzCEnwLev+6oOvfao4iOUKklhU+eCFml/Js5HaH/e1v34FmsOqP53kB/ BEFx15qLLTvhNdoOALCDTy+6NaEKxdtMAiFStSlsiczylIJ9KXRoX4JaVAPBKyNq OIngxD2Ky01yNcdNdE0yAWLSt/sht2c= -----END CERTIFICATE-----Generated at Fri Sep 25 18:19:25 2026 by rpki-client