$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a4773bc-320f-3ab6-a715-e4e515cff611.roa File: 2a4773bc-320f-3ab6-a715-e4e515cff611.roa (raw, json) Hash identifier: Yxo8PpuSAoBD6r3rCdUs6lrzway2XLTBKNikL8aKRzg= Subject key identifier: 6C:8A:92:A0:E0:D5:EE:03:B1:EB:AC:32:20:59:5A:6C:CE:07:5C:A7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D87EDD09EF949DE257AA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a4773bc-320f-3ab6-a715-e4e515cff611.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 64.233.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:87:ed:d0:9e:f9:49:de:25:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ae20f3f4-c86f-4253-9846-b856f778f1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:13:df:a7:36:c0:dd:a7:24:6d:79:62:f3:fb: 99:b8:82:9a:a2:be:4b:fe:f5:b9:fb:be:f4:c2:a7: d4:c9:b2:03:c0:a7:9a:f2:06:fe:66:92:ac:b2:37: 76:67:1e:09:7f:d5:24:43:f4:10:3b:43:0a:de:bb: b9:bc:1e:a6:3b:a5:62:32:cf:8a:a9:37:38:10:3e: eb:ec:b7:9c:ac:2b:60:21:04:1f:6f:61:e1:9a:d5: cd:a6:0a:81:c8:e2:29:1b:0b:a4:00:5b:d9:7e:05: 87:f9:ca:6a:dc:87:c9:48:40:f4:73:14:20:5b:56: 6a:ca:eb:19:6b:d3:f0:ab:11:76:f6:e6:04:a1:4a: a6:98:ce:12:e2:5a:b9:e3:52:a6:4e:e9:1a:4c:9a: c4:a6:fb:6d:b7:ea:62:63:9d:a1:3e:b5:96:8e:0c: ce:a2:d5:1f:af:00:df:c8:c9:67:f1:67:44:13:73: 50:4a:57:70:f6:82:4c:a9:91:b1:25:2b:ab:d9:db: 36:76:91:04:c3:49:05:9b:ca:12:33:99:8c:fd:a7: 68:63:d4:fc:3d:09:86:d7:1c:c5:65:2f:fb:13:5c: db:f6:40:fa:74:9a:81:6a:8e:b5:1d:c2:26:5a:f7: e6:df:1a:f2:c4:0d:65:22:20:33:dd:8b:70:f1:0c: a2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8A:92:A0:E0:D5:EE:03:B1:EB:AC:32:20:59:5A:6C:CE:07:5C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a4773bc-320f-3ab6-a715-e4e515cff611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ed:d0:4e:d6:d5:36:39:ea:e3:49:d0:a9:a3:a3:ca:a2:54: 26:f6:ff:a3:4a:69:62:bc:d2:24:37:fe:2c:f9:ba:ef:1f:d5: 01:ae:d2:cf:4d:eb:5f:ad:ed:4c:12:73:e2:f7:ea:37:bd:3c: b4:28:13:41:3c:3a:9d:54:bd:97:f3:eb:31:0f:5e:5c:e6:a4: 6e:68:f7:dc:9a:e4:92:eb:64:1e:7e:dc:18:6a:38:0c:0b:b2: 87:bc:87:3b:3f:74:56:00:39:c5:5f:ff:38:46:d8:41:c1:50: 3d:25:61:b8:41:81:55:db:aa:77:13:7f:5f:8b:51:86:30:d1: 2a:43:2a:36:c4:26:40:3a:55:11:d4:73:01:39:9d:6a:7d:c4: d6:e2:be:33:7f:5a:0d:98:f0:6d:b4:66:99:ad:96:82:c4:f9: e4:8d:00:9f:0c:92:52:f6:db:45:99:19:ce:86:9a:22:5e:09: 0f:65:c4:39:4f:1f:0e:35:9f:c7:61:0e:ac:4e:f9:63:b7:2e: 9f:b6:78:c5:8f:32:e4:96:cf:db:e7:c2:9f:b8:69:f4:3d:65: da:7f:6b:36:8e:8b:15:5f:b0:fb:d2:b8:d9:03:4d:fd:88:9e: d8:ab:b7:94:34:3c:89:bb:ef:42:5d:92:64:6a:c8:c1:f5:b5: 77:1c:3c:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYft0J75Sd4leqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWUyMGYzZjQtYzg2Zi00MjUzLTk4NDYtYjg1NmY3NzhmMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hPfpzbA3ackbXli8/uZuIKaor5L/vW5+770 wqfUybIDwKea8gb+ZpKssjd2Zx4Jf9UkQ/QQO0MK3ru5vB6mO6ViMs+KqTc4ED7r 7LecrCtgIQQfb2HhmtXNpgqByOIpGwukAFvZfgWH+cpq3IfJSED0cxQgW1ZqyusZ a9PwqxF29uYEoUqmmM4S4lq541KmTukaTJrEpvttt+piY52hPrWWjgzOotUfrwDf yMln8WdEE3NQSldw9oJMqZGxJSur2ds2dpEEw0kFm8oSM5mM/adoY9T8PQmG1xzF ZS/7E1zb9kD6dJqBao61HcImWvfm3xryxA1lIiAz3Ytw8QyiowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyKkqDg1e4DseusMiBZWmzOB1ynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmE0NzczYmMtMzIwZi0z YWI2LWE3MTUtZTRlNTE1Y2ZmNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDt0E7W1TY56uNJ0Kmjo8qiVCb2/6NKaWK80iQ3/iz5uu8f1QGu0s9N 61+t7UwSc+L36je9PLQoE0E8Op1UvZfz6zEPXlzmpG5o99ya5JLrZB5+3BhqOAwL soe8hzs/dFYAOcVf/zhG2EHBUD0lYbhBgVXbqncTf1+LUYYw0SpDKjbEJkA6VRHU cwE5nWp9xNbivjN/Wg2Y8G20ZpmtloLE+eSNAJ8MklL220WZGc6GmiJeCQ9lxDlP Hw41n8dhDqxO+WO3Lp+2eMWPMuSWz9vnwp+4afQ9Zdp/azaOixVfsPvSuNkDTf2I ntirt5Q0PIm770JdkmRqyMH1tXccPBA= -----END CERTIFICATE-----Generated at Tue Nov 10 21:21:24 2026 by rpki-client