$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa File: 23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa (raw, json) Hash identifier: Mkdu80CEHqpQbiipbATjMaWVP0sZ3h7dtUgM9ux8o/c= Subject key identifier: 3B:41:61:68:9A:02:72:68:A9:82:B2:4E:18:FD:81:C5:9A:8B:DB:3E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49853BFD0B0B81D66A9E5300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 173.194.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:3b:fd:0b:0b:81:d6:6a:9e:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a12aa4a1-0b83-45e6-a2f0-b698ad9a1297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ce:93:94:7e:b8:f8:0c:51:57:b8:cf:4d:66: 20:df:1a:ea:0a:77:6c:14:80:84:ae:e7:08:8d:99: e2:42:76:99:86:1b:03:06:8d:e5:ff:88:ee:34:5b: 69:1a:72:ed:72:0f:68:a6:27:f8:25:c7:18:56:5e: 8e:ad:3d:ff:40:74:42:76:a8:40:61:d5:4b:a9:cf: 1f:2c:82:05:73:71:cc:1b:5a:34:c6:2e:04:e8:60: 13:24:b3:36:f1:f9:85:31:ac:ea:2b:ce:70:d3:4b: 44:11:9e:c2:3b:8d:55:a6:5a:fa:6c:d1:f9:45:44: f9:fa:bc:b1:60:66:07:9b:c4:da:41:49:08:e3:57: 07:1e:f7:1f:61:4c:39:7e:19:e1:89:42:fe:12:b8: 12:df:cb:1e:5a:f7:00:dc:bb:78:ac:dd:48:bb:bb: 3f:e2:8e:6b:88:12:9a:c5:30:d0:c5:7d:a3:06:5a: b0:46:ee:b6:ff:3a:12:16:3b:66:74:eb:93:bb:e5: 5c:c1:f5:5c:e1:ac:94:61:d1:39:c7:4a:3b:d5:83: a3:12:65:6a:74:b9:42:79:9f:3c:36:f5:d0:d2:d9: bb:08:62:e5:37:fa:19:ad:c8:1a:a8:f4:7a:74:f9: 60:c6:43:fe:91:7a:55:89:99:91:9a:30:9d:40:8f: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:41:61:68:9A:02:72:68:A9:82:B2:4E:18:FD:81:C5:9A:8B:DB:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c7:15:c1:8b:f1:8e:2d:cd:a5:46:40:ba:3b:a8:38:80:b4: 56:fe:16:78:69:72:5c:87:87:9a:1d:a0:11:de:00:32:c4:c4: 84:ba:d6:86:ca:38:f6:ee:6c:0a:d2:98:0f:41:10:d2:73:c6: a5:1e:b5:72:05:73:04:3e:33:ff:d7:ef:c5:6d:92:a2:a1:37: a0:8b:ab:2e:96:b8:aa:f1:df:34:d1:cc:3e:19:78:1e:ab:e5: a5:ab:82:5e:93:8c:e9:a5:8e:4b:a6:d0:80:33:db:a9:ab:10: 78:ef:88:0b:4c:68:75:50:ae:47:b3:fe:b6:09:ea:2a:ce:47: ac:08:e9:03:8e:24:9e:91:86:18:cc:b9:8b:6f:2b:70:0c:88: 14:22:f9:93:1d:69:b0:2f:ea:cc:84:f8:54:41:5c:17:9b:5d: 8e:53:31:7f:44:7d:7d:00:77:cb:d2:c7:2f:22:26:20:47:9a: 9a:05:a6:1d:82:8f:0c:fb:d9:5a:ce:72:94:48:a0:22:da:ef: e0:6a:19:da:1f:8d:d4:06:30:5a:f1:da:c9:4e:29:92:aa:2f: 0e:d8:2c:b7:fd:32:60:8b:93:7c:29:d7:44:96:c5:6e:f9:5b: cb:40:50:43:59:d1:8d:6b:05:09:a5:8a:34:d7:0b:48:25:db: d6:df:5b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhTv9CwuB1mqeUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTEyYWE0YTEtMGI4My00NWU2LWEyZjAtYjY5OGFkOWExMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis6TlH64+AxRV7jPTWYg3xrqCndsFICErucI jZniQnaZhhsDBo3l/4juNFtpGnLtcg9opif4JccYVl6OrT3/QHRCdqhAYdVLqc8f LIIFc3HMG1o0xi4E6GATJLM28fmFMazqK85w00tEEZ7CO41Vplr6bNH5RUT5+ryx YGYHm8TaQUkI41cHHvcfYUw5fhnhiUL+ErgS38seWvcA3Lt4rN1Iu7s/4o5riBKa xTDQxX2jBlqwRu62/zoSFjtmdOuTu+VcwfVc4ayUYdE5x0o71YOjEmVqdLlCeZ88 NvXQ0tm7CGLlN/oZrcgaqPR6dPlgxkP+kXpViZmRmjCdQI9VwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtBYWiaAnJoqYKyThj9gcWai9s+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjNkNWZhNmEtMDViMi0z ZTdlLThlMTMtYTY2ZDM1MDQ2ZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHHFcGL8Y4tzaVGQLo7qDiAtFb+FnhpclyHh5odoBHeADLExIS61obK OPbubArSmA9BENJzxqUetXIFcwQ+M//X78VtkqKhN6CLqy6WuKrx3zTRzD4ZeB6r 5aWrgl6TjOmljkum0IAz26mrEHjviAtMaHVQrkez/rYJ6irOR6wI6QOOJJ6RhhjM uYtvK3AMiBQi+ZMdabAv6syE+FRBXBebXY5TMX9EfX0Ad8vSxy8iJiBHmpoFph2C jwz72VrOcpRIoCLa7+BqGdofjdQGMFrx2slOKZKqLw7YLLf9MmCLk3wp10SWxW75 W8tAUENZ0Y1rBQmlijTXC0gl29bfW7E= -----END CERTIFICATE-----Generated at Fri Sep 25 19:39:09 2026 by rpki-client