$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa File: 847d8ab5-2804-3989-95b6-9f3006588f5a.roa (raw, json) Hash identifier: i9LSbHrazhbSEy7D9YMnsuP1SpQIWUbYN3x/WBt5Rz4= Subject key identifier: 66:7B:AF:ED:D7:9A:E7:03:24:E1:55:80:75:50:FC:B2:19:DE:6A:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D19766F6B498A866AAE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 173.194.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:19:76:6f:6b:49:8a:86:6a:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ef073928-0eb9-4b8f-bbb5-78a9e3a5992b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7d:32:d2:f9:43:bf:8a:6c:51:4a:f1:4e:55: 85:d1:c0:32:33:28:9f:23:79:91:ae:c9:29:95:72: fd:03:d3:81:54:1c:9f:cb:55:9c:c0:92:14:6c:4d: b0:1c:72:74:ff:27:fd:34:cb:b8:f7:15:1e:4f:b6: 9a:19:56:89:ff:e0:18:ad:b5:e5:c9:9e:1a:7f:97: 96:df:47:6c:5a:87:cf:b6:8d:d1:0a:da:53:1b:c1: bd:0d:1e:5b:a5:ec:38:57:5c:6c:0a:bc:81:d8:7f: 73:ce:72:2a:e1:1a:90:65:f1:ab:dc:be:ce:bc:90: 18:62:14:13:3f:79:73:4f:b8:41:4f:58:44:39:60: 40:d9:32:56:da:7f:b9:a6:e0:01:3d:70:b9:8a:47: bb:7b:06:c7:95:2a:fa:c7:e8:ac:e9:d7:64:dc:06: b0:b5:f1:00:ac:f4:ff:ea:8f:c5:10:27:4b:44:cc: dd:90:0c:0c:fc:37:97:73:f7:2b:e4:44:0f:bd:01: a1:5c:a8:88:b0:68:ff:dc:be:d3:c1:b4:89:aa:c9: d0:70:98:31:24:2f:7b:6f:eb:fa:f1:32:23:0f:7f: d4:5b:fb:e9:81:46:e6:6e:f6:f2:1f:39:d5:3f:26: 8d:98:0e:d7:e4:e0:73:bf:25:fb:04:26:e3:c6:2a: d3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7B:AF:ED:D7:9A:E7:03:24:E1:55:80:75:50:FC:B2:19:DE:6A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e1:d3:7e:af:c0:a1:36:eb:f3:0d:4a:69:11:13:1f:20:3c: ed:5d:e1:17:39:01:9e:d9:e7:fe:61:07:5e:ce:fb:23:17:02: 03:2c:31:f8:10:51:0a:76:c2:96:9a:0a:fd:4f:37:b8:f7:07: 73:08:56:a4:1c:dd:54:7f:96:f8:eb:14:28:77:97:bd:a8:79: 80:e8:dd:23:f3:0b:8d:e8:02:3c:2e:cc:2a:42:92:c8:74:81: 46:50:97:20:ce:07:e1:9c:23:8a:bd:12:6c:02:e7:dd:08:54: bf:9b:42:31:c5:93:24:7c:ef:9e:a6:94:81:e9:07:3a:27:79: 88:67:59:c1:f9:dc:a9:2a:d4:9b:c5:ea:c9:b8:b4:3d:13:c1: 4f:20:7c:ce:b1:90:ba:10:90:39:8e:77:8d:44:1f:cf:f5:78: 18:f1:e5:67:ae:04:f1:1f:85:21:48:7a:de:d7:9c:53:79:8e: f6:f7:7d:52:97:d5:28:aa:00:b4:f9:99:2f:c9:0f:18:7c:1a: f1:42:23:9a:34:13:a9:91:04:ba:be:40:7b:d8:46:40:ef:b7: 0f:48:cf:bc:d2:33:e6:89:fa:30:b0:0b:e4:6a:d2:d3:e6:ac: ff:9b:66:c7:3f:65:ae:fe:c5:cf:c8:87:ed:76:93:36:69:5a: f6:61:b8:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfRl2b2tJioZqrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWYwNzM5MjgtMGViOS00YjhmLWJiYjUtNzhhOWUzYTU5OTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH0y0vlDv4psUUrxTlWF0cAyMyifI3mRrskp lXL9A9OBVByfy1WcwJIUbE2wHHJ0/yf9NMu49xUeT7aaGVaJ/+AYrbXlyZ4af5eW 30dsWofPto3RCtpTG8G9DR5bpew4V1xsCryB2H9zznIq4RqQZfGr3L7OvJAYYhQT P3lzT7hBT1hEOWBA2TJW2n+5puABPXC5ike7ewbHlSr6x+is6ddk3AawtfEArPT/ 6o/FECdLRMzdkAwM/DeXc/cr5EQPvQGhXKiIsGj/3L7TwbSJqsnQcJgxJC97b+v6 8TIjD3/UW/vpgUbmbvbyHznVPyaNmA7X5OBzvyX7BCbjxirTiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZ7r+3XmucDJOFVgHVQ/LIZ3mqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODQ3ZDhhYjUtMjgwNC0z OTg5LTk1YjYtOWYzMDA2NTg4ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHh036vwKE26/MNSmkREx8gPO1d4Rc5AZ7Z5/5hB17O+yMXAgMsMfgQ UQp2wpaaCv1PN7j3B3MIVqQc3VR/lvjrFCh3l72oeYDo3SPzC43oAjwuzCpCksh0 gUZQlyDOB+GcI4q9EmwC590IVL+bQjHFkyR8756mlIHpBzoneYhnWcH53Kkq1JvF 6sm4tD0TwU8gfM6xkLoQkDmOd41EH8/1eBjx5WeuBPEfhSFIet7XnFN5jvb3fVKX 1SiqALT5mS/JDxh8GvFCI5o0E6mRBLq+QHvYRkDvtw9Iz7zSM+aJ+jCwC+Rq0tPm rP+bZsc/Za7+xc/Ih+12kzZpWvZhuNU= -----END CERTIFICATE-----Generated at Fri Sep 25 14:55:26 2026 by rpki-client