$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa File: 3c656b6b-cda2-308f-9d04-80808e67e293.roa (raw, json) Hash identifier: vr/t+4Lox+26jNe3r86VqympT+xlzGSiRLIkH79QL5Q= Subject key identifier: 29:64:9D:B7:F9:69:A6:14:90:AB:73:42:C4:4A:8E:43:A6:69:62:2E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498524A82A9AAA5723A44B40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.58.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:24:a8:2a:9a:aa:57:23:a4:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4dc03feb-64e3-46e0-93ab-08d0843d1d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:81:29:ad:4a:d0:23:10:6e:b8:08:61:f3:19: 9f:12:a5:71:80:45:3d:aa:a0:ef:37:d3:0c:b6:41: 7d:d2:b2:82:0b:6c:fd:2c:63:0c:a8:ad:29:23:11: 91:3d:40:00:a2:8e:12:d7:02:d8:f0:65:db:4b:4a: d6:e3:39:cb:7d:9b:cb:d4:0d:eb:e7:65:72:c8:95: b3:bd:d5:95:f0:07:aa:50:9a:32:0a:d4:eb:d0:c1: 4e:b5:dc:15:bd:30:ab:49:48:50:e6:c9:71:51:16: 47:1d:42:a1:f7:46:7b:0c:b7:03:4c:3b:51:f0:59: f7:d8:58:35:52:3c:11:e9:6a:cd:70:1f:c2:c2:85: df:a3:c0:58:cc:ea:36:f3:de:62:1b:2c:93:2e:c3: 9f:28:0c:f7:e6:71:ea:6b:d0:c2:00:ca:b6:d8:4f: 1d:6d:45:08:df:06:7c:a3:69:f7:fe:f7:cb:b2:71: 8d:cb:58:4b:f8:c1:f4:aa:62:67:61:28:74:8e:c9: 85:57:8c:60:69:05:e2:58:c8:51:69:29:b2:ed:59: 06:18:3f:0a:c6:58:5c:ca:f9:9d:b4:23:3f:5e:8a: c4:ed:94:b4:cd:dd:0c:ac:ea:2b:08:be:b1:90:da: 67:d0:73:e1:13:64:3a:64:50:70:4c:41:07:95:fc: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:64:9D:B7:F9:69:A6:14:90:AB:73:42:C4:4A:8E:43:A6:69:62:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4c:f1:91:4b:76:44:23:87:54:14:cb:18:77:c8:65:51:e5: c8:4b:29:3f:43:cf:4f:10:a7:d7:6a:37:22:eb:8c:7a:8c:2d: b0:11:93:53:a1:d8:8c:09:d5:54:39:65:02:3c:2d:ff:5b:c5: 1c:a2:20:70:99:f9:48:87:d6:76:72:f8:ff:c0:76:c8:3d:a2: ed:f1:93:5a:40:06:3b:fb:3a:26:2f:e9:93:c2:8d:83:c2:0e: 89:68:c3:3f:5b:d9:da:8e:82:d1:8e:7b:33:f7:97:08:aa:92: 78:c2:9c:f4:f1:81:c2:cd:d7:0e:d2:a3:61:9f:1d:00:b0:56: 03:b1:8f:2d:fd:e5:bf:89:3f:6f:62:34:0a:52:ca:f3:d8:d7: b8:e2:f3:fe:8a:9b:1d:3f:b7:17:29:cf:72:fe:09:a7:9a:a8: 27:e8:8d:ab:ea:7e:56:0e:a0:e0:97:8b:e6:a5:3c:ba:f0:39: c4:b3:cc:32:d8:d8:bf:b0:e8:ae:cd:81:7e:80:20:e5:69:52: 88:fc:60:fb:5f:42:fa:75:88:cd:5e:3d:c6:d0:73:02:f5:5b: 45:15:c2:55:0d:4e:c7:98:40:8e:14:b8:92:e1:9e:24:07:ae: 90:a3:38:05:46:30:df:05:9e:e2:8b:5a:f3:25:aa:9b:d9:66: e3:ea:b1:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhSSoKpqqVyOkS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGRjMDNmZWItNjRlMy00NmUwLTkzYWItMDhkMDg0M2QxZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oEprUrQIxBuuAhh8xmfEqVxgEU9qqDvN9MM tkF90rKCC2z9LGMMqK0pIxGRPUAAoo4S1wLY8GXbS0rW4znLfZvL1A3r52VyyJWz vdWV8AeqUJoyCtTr0MFOtdwVvTCrSUhQ5slxURZHHUKh90Z7DLcDTDtR8Fn32Fg1 UjwR6WrNcB/CwoXfo8BYzOo2895iGyyTLsOfKAz35nHqa9DCAMq22E8dbUUI3wZ8 o2n3/vfLsnGNy1hL+MH0qmJnYSh0jsmFV4xgaQXiWMhRaSmy7VkGGD8Kxlhcyvmd tCM/XorE7ZS0zd0MrOorCL6xkNpn0HPhE2Q6ZFBwTEEHlfxdCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClknbf5aaYUkKtzQsRKjkOmaWIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2M2NTZiNmItY2RhMi0z MDhmLTlkMDQtODA4MDhlNjdlMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2DrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJM8ZFLdkQjh1QUyxh3yGVR5chLKT9Dz08Qp9dqNyLrjHqMLbARk1Oh 2IwJ1VQ5ZQI8Lf9bxRyiIHCZ+UiH1nZy+P/Adsg9ou3xk1pABjv7OiYv6ZPCjYPC Dolowz9b2dqOgtGOezP3lwiqknjCnPTxgcLN1w7So2GfHQCwVgOxjy395b+JP29i NApSyvPY17ji8/6Kmx0/txcpz3L+CaeaqCfojavqflYOoOCXi+alPLrwOcSzzDLY 2L+w6K7NgX6AIOVpUoj8YPtfQvp1iM1ePcbQcwL1W0UVwlUNTseYQI4UuJLhniQH rpCjOAVGMN8FnuKLWvMlqpvZZuPqsYA= -----END CERTIFICATE-----Generated at Sat Sep 26 03:21:48 2026 by rpki-client