$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa File: 6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa (raw, json) Hash identifier: 8CN+Sj2j8s15c6tZBj+kh/SecviJYwMozYHHB0QEt/I= Subject key identifier: 37:2B:67:B3:61:C8:14:B3:68:0F:F8:BF:D2:E5:BC:B9:0C:FD:58:03 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49850641C03694BFDAE66CC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11344 IP address blocks: 209.85.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:06:41:c0:36:94:bf:da:e6:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5518629d-32a0-4af8-8fbb-a00282f38113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f6:af:26:84:59:59:17:83:3c:20:ab:6e:ae: 58:3a:b2:c2:cd:78:fb:e5:8a:36:97:e4:0f:dd:6a: 21:69:3c:c2:31:9b:06:b4:83:c4:5b:75:34:1c:7a: 6a:8f:f2:cd:ef:c9:a6:5d:ab:4f:51:dc:f7:44:88: 67:d2:ea:7f:8e:bd:52:e9:1e:aa:bb:4c:a9:70:ee: 2f:a6:e6:1a:33:01:a9:ac:e7:18:5b:ed:84:1e:b0: 10:7e:b0:01:9c:52:09:7c:a8:5d:01:d0:0f:7f:b1: 6f:9c:c9:db:af:3d:c2:66:f1:70:3b:3c:7e:53:7a: b4:43:c8:b7:1f:3e:14:8e:ed:89:2f:a9:7c:8b:f7: d4:21:89:f5:66:43:57:94:22:04:7d:0d:9e:a8:bb: d1:ab:4b:4d:d0:27:1b:c3:bd:23:ca:f8:97:f1:a4: dc:f5:02:91:d3:36:1d:68:b2:cf:3c:d4:0c:53:a5: 02:44:8b:a6:ab:25:77:f6:f9:21:b7:48:f2:a5:7f: 7e:d4:c5:0e:92:16:2c:08:52:2b:03:f8:1a:ba:62: c7:54:a8:fe:5c:59:29:20:f2:3a:b2:e5:30:38:a5: 34:ae:1d:4f:84:6a:cb:d1:90:82:a7:eb:f9:6e:18: 3e:23:36:81:71:69:f5:96:b2:26:c6:0f:1e:1f:2f: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2B:67:B3:61:C8:14:B3:68:0F:F8:BF:D2:E5:BC:B9:0C:FD:58:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:c0:dc:d4:8c:b9:bc:de:41:5b:bc:b9:29:2f:76:d7:56:d5: 58:98:ea:0a:99:a1:02:1a:a8:0a:ac:5d:1e:40:62:3b:90:8d: 30:1f:43:08:64:28:58:fb:c2:69:e9:ef:d9:e2:32:9c:40:16: dc:55:ee:31:45:9b:f6:c3:05:4f:55:44:02:69:63:fd:d8:a4: 19:a5:4f:cd:6f:1b:8b:ae:c7:87:f4:d1:dd:52:2e:c3:5d:2c: 07:06:b3:4d:76:38:dd:ae:33:8c:72:2e:46:6d:99:d8:8e:60: 6e:29:ab:1d:5e:8b:91:7f:47:d6:e7:38:42:8c:c7:9c:da:e2: 24:cf:d1:2c:7d:1b:1e:fd:3b:17:e3:65:77:14:47:76:e6:0d: 3d:db:0a:29:ad:ea:d6:75:94:8d:14:0f:60:a6:d7:b5:1b:54: 0a:47:ee:75:85:80:da:e4:9e:dc:15:13:25:ad:26:d8:38:22: 65:eb:49:8d:15:80:43:63:d9:80:cd:c7:44:10:9e:5f:70:c3: 8c:d7:38:ab:47:f5:45:68:c3:db:2b:3c:26:09:a1:d5:0b:d7: 1a:cb:4b:e7:7c:ba:1e:13:62:0f:03:e8:00:0a:ca:9e:43:9a: 33:9f:60:32:bd:59:e0:de:47:22:ab:3d:de:2f:21:37:9b:ac: 23:86:70:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQZBwDaUv9rmbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTUxODYyOWQtMzJhMC00YWY4LThmYmItYTAwMjgyZjM4MTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivavJoRZWReDPCCrbq5YOrLCzXj75Yo2l+QP 3WohaTzCMZsGtIPEW3U0HHpqj/LN78mmXatPUdz3RIhn0up/jr1S6R6qu0ypcO4v puYaMwGprOcYW+2EHrAQfrABnFIJfKhdAdAPf7FvnMnbrz3CZvFwOzx+U3q0Q8i3 Hz4Uju2JL6l8i/fUIYn1ZkNXlCIEfQ2eqLvRq0tN0Ccbw70jyviX8aTc9QKR0zYd aLLPPNQMU6UCRIumqyV39vkht0jypX9+1MUOkhYsCFIrA/gaumLHVKj+XFkpIPI6 suUwOKU0rh1PhGrL0ZCCp+v5bhg+IzaBcWn1lrImxg8eHy90QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcrZ7NhyBSzaA/4v9LlvLkM/VgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmViMDU4MWQtMTNkYy0z YzlhLTk2OGUtNGU3NWM5MzZiMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjA3NSMubzeQVu8uSkvdtdW1ViY6gqZoQIaqAqsXR5AYjuQjTAfQwhk KFj7wmnp79niMpxAFtxV7jFFm/bDBU9VRAJpY/3YpBmlT81vG4uux4f00d1SLsNd LAcGs012ON2uM4xyLkZtmdiOYG4pqx1ei5F/R9bnOEKMx5za4iTP0Sx9Gx79Oxfj ZXcUR3bmDT3bCimt6tZ1lI0UD2Cm17UbVApH7nWFgNrkntwVEyWtJtg4ImXrSY0V gENj2YDNx0QQnl9ww4zXOKtH9UVow9srPCYJodUL1xrLS+d8uh4TYg8D6AAKyp5D mjOfYDK9WeDeRyKrPd4vITebrCOGcCg= -----END CERTIFICATE-----Generated at Fri Sep 25 23:31:22 2026 by rpki-client