$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa File: 79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa (raw, json) Hash identifier: 3W47stLE2npf07R4DMdI0nC+K1Dyquu3qRRAcboe2oQ= Subject key identifier: 9E:D5:27:46:2F:CE:8A:B8:29:FD:78:25:2F:D7:07:B8:9A:06:B5:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D0DCFCBB1703C97027700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.58.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:0d:cf:cb:b1:70:3c:97:02:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=202fc026-3651-4921-8cfd-2a0b69984e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ce:e9:cc:82:26:88:ed:bc:17:ab:31:80:6d: 07:6b:57:e9:6c:30:d5:77:eb:89:64:f4:d5:a5:be: d6:a5:79:4d:a4:55:3d:df:66:ed:2a:b9:64:c7:4d: 39:28:03:f5:ac:5f:95:38:05:0f:30:ff:57:e5:5e: 5c:f6:cf:09:77:34:0e:48:b5:08:4e:b4:01:ce:d1: 6e:e5:b6:cf:5e:ac:a1:b6:ad:64:1c:4d:28:ba:31: 23:97:e7:64:c8:fa:85:57:eb:25:82:94:3a:c2:9e: 25:46:7a:ab:ad:e1:c3:6c:8d:e4:62:1d:bd:92:3d: 21:e7:56:92:73:1c:ef:00:1f:3e:7d:7a:ec:2d:6e: b1:35:d3:f0:52:07:2c:83:90:29:67:b3:f9:bc:8d: 6f:dd:69:9b:db:b3:37:d7:ba:5c:6c:0a:59:85:db: b3:e6:04:4f:18:5d:d2:3b:0c:d4:dc:22:9f:b3:b3: 2c:87:43:88:18:b0:ba:b0:f8:e3:d5:9c:ea:12:91: a9:42:9e:0c:8a:eb:f6:2a:81:3a:65:a7:f1:06:2e: 6e:a5:d3:df:90:20:f3:e4:f6:00:26:e0:63:1f:a4: 01:02:e2:08:c5:ad:f6:78:c8:4b:88:9b:a3:70:e8: 33:c8:af:05:69:81:42:08:60:e9:8b:7b:d3:b7:ee: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D5:27:46:2F:CE:8A:B8:29:FD:78:25:2F:D7:07:B8:9A:06:B5:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ed:c4:18:8d:df:84:60:61:4e:04:a4:3f:16:0f:91:fb:ba: 04:4b:96:6b:78:76:63:8d:0a:6f:19:bf:f6:3c:c9:a5:00:31: 58:6b:e3:b4:4e:59:7c:7f:27:d1:ee:27:fa:be:64:7c:48:52: 6f:4f:50:de:ce:d2:9d:ca:c8:c9:87:66:2c:47:a1:08:08:ff: 82:dd:9b:f1:e6:bd:08:e1:fa:25:e2:e0:f7:51:44:5b:03:2a: b6:0f:d0:14:99:38:2f:64:b4:6e:f2:c5:c1:69:ef:69:b4:e5: a4:52:33:de:ce:1c:b3:d2:58:9f:30:af:3e:9d:b4:b8:b1:f0: 68:86:e3:f0:d5:60:ec:85:39:75:02:3b:6d:b1:a3:d0:bd:21: ac:39:92:7a:b1:cd:d3:82:d3:66:f2:f0:b4:f8:54:3b:d4:89: 16:75:88:2d:49:aa:ec:16:f2:e8:ac:00:9f:20:ee:19:19:4d: d6:77:2c:92:8a:cf:33:05:f5:ad:f3:93:4b:ce:3b:b0:a3:c4: 15:ab:12:6c:11:f4:00:f4:17:fd:44:8e:a3:80:3c:d3:c7:b8: 8a:49:6a:99:4b:d6:8e:1c:63:80:08:0d:07:55:13:f8:10:fa: f0:8d:f9:ca:59:ef:40:44:db:9a:66:c7:38:b9:2e:c6:c5:ed: cf:3d:67:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQ3Py7FwPJcCdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjAyZmMwMjYtMzY1MS00OTIxLThjZmQtMmEwYjY5OTg0ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis7pzIImiO28F6sxgG0Ha1fpbDDVd+uJZPTV pb7WpXlNpFU932btKrlkx005KAP1rF+VOAUPMP9X5V5c9s8JdzQOSLUITrQBztFu 5bbPXqyhtq1kHE0oujEjl+dkyPqFV+slgpQ6wp4lRnqrreHDbI3kYh29kj0h51aS cxzvAB8+fXrsLW6xNdPwUgcsg5ApZ7P5vI1v3Wmb27M317pcbApZhduz5gRPGF3S OwzU3CKfs7Msh0OIGLC6sPjj1ZzqEpGpQp4Miuv2KoE6ZafxBi5updPfkCDz5PYA JuBjH6QBAuIIxa32eMhLiJujcOgzyK8FaYFCCGDpi3vTt+4YSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7VJ0Yvzoq4Kf14JS/XB7iaBrWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzliMGMyZTYtMGRkMi0z ZTE3LTg3NDYtNDdhNDFiNWIxMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADztxBiN34RgYU4EpD8WD5H7ugRLlmt4dmONCm8Zv/Y8yaUAMVhr47RO WXx/J9HuJ/q+ZHxIUm9PUN7O0p3KyMmHZixHoQgI/4Ldm/HmvQjh+iXi4PdRRFsD KrYP0BSZOC9ktG7yxcFp72m05aRSM97OHLPSWJ8wrz6dtLix8GiG4/DVYOyFOXUC O22xo9C9Iaw5knqxzdOC02by8LT4VDvUiRZ1iC1JquwW8uisAJ8g7hkZTdZ3LJKK zzMF9a3zk0vOO7CjxBWrEmwR9AD0F/1EjqOAPNPHuIpJaplL1o4cY4AIDQdVE/gQ +vCN+cpZ70BE25pmxzi5LsbF7c89Z68= -----END CERTIFICATE-----Generated at Fri Sep 25 18:30:14 2026 by rpki-client