$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa File: 1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa (raw, json) Hash identifier: ENqlNnmqrBdphtc8eaDuQrknZntfbKHR+depmIb3rRk= Subject key identifier: 8E:C4:83:47:66:01:7C:91:7C:7A:75:AF:1A:74:58:90:5A:A7:76:C6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49853EF02A2A591F98CC1FA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 209.85.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:3e:f0:2a:2a:59:1f:98:cc:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=32d1d4fa-ffb1-45fc-9997-82f2522505b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c4:cc:b4:a8:bf:95:8c:5b:29:37:2b:c4:13: 34:9c:53:fd:57:af:9b:f6:4c:6b:5d:56:06:28:03: 8f:a7:3d:01:2c:e1:bb:e8:0e:83:2a:94:5d:80:30: 4b:e5:fd:b5:99:b0:f2:1a:87:e7:08:db:ae:ce:b3: 58:bc:d9:5b:61:29:f4:71:d6:11:26:50:82:0e:8c: f3:10:6b:5e:59:b9:c7:5e:41:0e:6a:5f:80:57:12: 2f:8e:d1:44:da:0a:21:52:9e:41:1e:e0:9d:6b:7d: d0:ee:ed:77:d3:24:6e:be:6a:ba:25:5e:2d:29:23: 95:1f:61:fa:c8:98:e3:b0:32:fc:7c:60:da:0b:75: 70:d6:10:8d:f8:7b:69:d5:2f:1b:d8:07:0a:49:c8: 23:43:73:41:62:8b:83:dd:c8:ec:a8:0d:f5:a5:5f: 27:66:53:ed:34:cd:6f:eb:d3:20:d9:ee:4c:e6:20: f6:d6:e1:bc:04:2a:f9:fe:a4:0e:92:f9:f4:92:f4: 12:f6:90:d5:eb:31:5d:32:c6:c0:39:a5:c0:28:53: 5b:9f:41:a1:52:d0:0f:05:e0:74:ab:d3:dc:3a:76: 2b:5a:a5:48:3a:bf:1c:3d:03:9c:e7:d5:d6:b9:89: 1c:0c:4e:d9:05:e3:11:9d:53:ae:5a:fb:69:c8:96: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C4:83:47:66:01:7C:91:7C:7A:75:AF:1A:74:58:90:5A:A7:76:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:18:45:9c:b0:36:6e:b7:51:f8:0e:b5:a4:9d:ff:16:fc:85: f9:ba:df:dc:70:6e:e3:d3:ff:d3:8d:62:88:37:a2:76:40:ee: cd:16:51:c8:69:69:9f:a7:21:1a:f1:ff:51:59:05:48:f0:da: e8:55:5c:e4:f0:86:a7:0a:12:b5:bf:5e:fb:d8:ae:d8:2e:f3: a7:2d:81:24:0d:c5:2b:ec:5a:aa:6a:77:34:b3:62:6b:8a:35: 64:8b:fa:60:54:fa:24:e6:42:fd:2d:20:d3:0e:22:b0:3f:a3: b4:8e:7a:b0:ea:7b:8e:fd:35:e1:07:b5:c2:0a:cf:91:c8:b0: 48:60:9e:e4:a1:b9:c8:51:df:6f:06:34:06:07:a8:08:9e:8d: ea:67:f3:06:a2:50:5f:d5:62:7d:12:e4:69:f5:18:15:71:b8: a0:e2:d2:e0:a6:4e:be:76:70:1e:4d:c6:d3:f6:ff:e5:47:4e: 44:89:21:56:be:b3:e5:b2:03:b0:e4:31:d1:9d:72:1d:11:a6: e8:4d:08:8d:c3:50:7c:fb:8d:58:94:83:fb:e7:ec:fa:86:a5: 96:fe:0a:83:7f:38:fa:e7:fb:03:65:c6:ed:ca:e6:7d:7d:ad: e5:69:37:ac:d7:96:9c:fc:b2:31:ad:d0:60:6a:48:31:b1:1f: 1a:0b:91:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhT7wKipZH5jMH6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzJkMWQ0ZmEtZmZiMS00NWZjLTk5OTctODJmMjUyMjUwNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosTMtKi/lYxbKTcrxBM0nFP9V6+b9kxrXVYG KAOPpz0BLOG76A6DKpRdgDBL5f21mbDyGofnCNuuzrNYvNlbYSn0cdYRJlCCDozz EGteWbnHXkEOal+AVxIvjtFE2gohUp5BHuCda33Q7u130yRuvmq6JV4tKSOVH2H6 yJjjsDL8fGDaC3Vw1hCN+Htp1S8b2AcKScgjQ3NBYouD3cjsqA31pV8nZlPtNM1v 69Mg2e5M5iD21uG8BCr5/qQOkvn0kvQS9pDV6zFdMsbAOaXAKFNbn0GhUtAPBeB0 q9PcOnYrWqVIOr8cPQOc59XWuYkcDE7ZBeMRnVOuWvtpyJagDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7Eg0dmAXyRfHp1rxp0WJBap3bGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTYzOGViNzYtN2YxMS0z ZWZlLTllMmItYTU2NjE2YjdlYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUYRZywNm63UfgOtaSd/xb8hfm639xwbuPT/9ONYog3onZA7s0WUchp aZ+nIRrx/1FZBUjw2uhVXOTwhqcKErW/XvvYrtgu86ctgSQNxSvsWqpqdzSzYmuK NWSL+mBU+iTmQv0tINMOIrA/o7SOerDqe479NeEHtcIKz5HIsEhgnuShuchR328G NAYHqAiejepn8waiUF/VYn0S5Gn1GBVxuKDi0uCmTr52cB5NxtP2/+VHTkSJIVa+ s+WyA7DkMdGdch0RpuhNCI3DUHz7jViUg/vn7PqGpZb+CoN/OPrn+wNlxu3K5n19 reVpN6zXlpz8sjGt0GBqSDGxHxoLkSY= -----END CERTIFICATE-----Generated at Fri Sep 25 20:59:09 2026 by rpki-client