$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c63f86c-45cd-3adc-aea5-79ed48ecb2ab.roa File: 8c63f86c-45cd-3adc-aea5-79ed48ecb2ab.roa (raw, json) Hash identifier: BW6uMkK/l52V4UsXw/anWFxRUv3Wu1ULgaXD3HOkZm8= Subject key identifier: 83:62:C7:E8:C2:14:F0:79:65:82:39:8E:CE:7C:58:71:0A:47:37:4E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CDCB8C99FFB0B5FD69D60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c63f86c-45cd-3adc-aea5-79ed48ecb2ab.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 173.194.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:dc:b8:c9:9f:fb:0b:5f:d6:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=17aa37dc-e363-4455-8c0a-938146d6c587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:38:b1:4b:ec:d8:b3:e1:8b:e3:91:c4:26:7e: 52:30:f8:61:13:ea:03:ed:97:de:cd:65:a3:ca:24: 3c:f4:3a:27:e8:af:37:f6:a5:77:65:50:b2:fb:dd: f8:13:ab:4a:b8:f1:4e:5e:42:61:78:45:d6:f9:4c: 77:1e:0e:40:8a:e7:82:a2:84:11:00:ec:7d:a7:70: f7:43:bd:7e:0c:ea:fb:3d:56:c0:36:a8:ab:7e:00: 0f:06:a3:6a:18:c1:32:92:5c:7e:e8:f3:cc:90:f9: 9f:c4:b7:63:9e:ff:7f:19:e4:ac:d6:ab:48:6e:24: 1b:f6:4f:2f:db:00:eb:59:96:5b:ce:ee:07:ce:57: 4b:fd:2b:88:a4:a0:65:74:b0:1b:c0:6e:c0:61:ac: 42:d2:94:85:5a:ce:f6:f4:e8:25:cf:42:3e:ff:4f: 86:69:74:a9:de:bc:5f:31:ad:fb:03:cd:d2:06:c8: 71:78:f9:88:01:06:d8:01:58:b0:e0:aa:86:2a:ce: d5:5a:04:fc:fe:55:c2:95:d7:53:e0:b6:fa:6e:ca: 5b:6f:33:21:be:05:46:ab:0d:e2:0f:3b:20:1c:6f: 49:ab:78:a1:9f:6c:03:fb:97:f8:84:a9:26:01:fa: 05:ef:56:37:ad:9d:ab:a2:7a:05:86:7a:b1:70:43: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:62:C7:E8:C2:14:F0:79:65:82:39:8E:CE:7C:58:71:0A:47:37:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c63f86c-45cd-3adc-aea5-79ed48ecb2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2e:a3:3c:8f:5f:8a:c7:24:a3:f8:55:2c:5c:eb:f4:a8:8d: 58:b1:39:da:a0:46:4c:40:92:5d:20:12:ce:a4:6e:a2:c8:cf: 2e:5b:5b:fd:cd:f0:18:db:91:24:be:6c:3c:14:b6:be:d4:b2: aa:cd:bb:b9:e0:c1:79:28:37:1a:a3:54:8e:3a:0a:d8:5f:dc: ab:56:11:5b:5a:59:a8:47:5e:3c:a1:1d:7c:fd:03:55:1a:e7: 34:01:6c:24:5a:e3:8a:bd:e6:87:86:9b:90:0a:95:b7:d7:cb: 00:2e:91:d4:5a:ce:3e:8f:ec:69:ea:75:fd:fe:94:1f:0a:fc: 80:3f:25:f6:dd:bb:64:d0:69:65:d7:f9:99:fa:d6:8f:39:66: a1:13:19:fb:94:d7:10:42:ab:df:80:7e:b3:a0:c9:4c:70:08: 43:28:35:19:1c:1b:79:d2:18:89:c9:9b:52:c6:dc:2f:d9:9d: e3:dd:26:14:d7:97:cd:4d:d0:a4:6b:a0:d1:87:5a:3b:dd:49: a5:51:07:a9:cb:8c:a8:39:fe:c9:99:14:f9:55:22:14:85:a9: 53:e6:ea:0b:7b:95:0b:8a:e5:ac:61:63:67:e7:50:75:58:25: f9:66:fe:8a:d1:0d:c8:b3:fa:87:b7:af:82:d0:64:15:84:15: 42:9d:a6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfNy4yZ/7C1/WnWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTdhYTM3ZGMtZTM2My00NDU1LThjMGEtOTM4MTQ2ZDZjNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjixS+zYs+GL45HEJn5SMPhhE+oD7ZfezWWj yiQ89Don6K839qV3ZVCy+934E6tKuPFOXkJheEXW+Ux3Hg5AiueCooQRAOx9p3D3 Q71+DOr7PVbANqirfgAPBqNqGMEyklx+6PPMkPmfxLdjnv9/GeSs1qtIbiQb9k8v 2wDrWZZbzu4HzldL/SuIpKBldLAbwG7AYaxC0pSFWs729Oglz0I+/0+GaXSp3rxf Ma37A83SBshxePmIAQbYAViw4KqGKs7VWgT8/lXClddT4Lb6bspbbzMhvgVGqw3i DzsgHG9Jq3ihn2wD+5f4hKkmAfoF71Y3rZ2ronoFhnqxcEPdnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINix+jCFPB5ZYI5js58WHEKRzdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGM2M2Y4NmMtNDVjZC0z YWRjLWFlYTUtNzllZDQ4ZWNiMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHguozyPX4rHJKP4VSxc6/SojVixOdqgRkxAkl0gEs6kbqLIzy5bW/3N 8BjbkSS+bDwUtr7UsqrNu7ngwXkoNxqjVI46Cthf3KtWEVtaWahHXjyhHXz9A1Ua 5zQBbCRa44q95oeGm5AKlbfXywAukdRazj6P7Gnqdf3+lB8K/IA/Jfbdu2TQaWXX +Zn61o85ZqETGfuU1xBCq9+AfrOgyUxwCEMoNRkcG3nSGInJm1LG3C/ZnePdJhTX l81N0KRroNGHWjvdSaVRB6nLjKg5/smZFPlVIhSFqVPm6gt7lQuK5axhY2fnUHVY Jflm/orRDciz+oe3r4LQZBWEFUKdpnI= -----END CERTIFICATE-----Generated at Sat Sep 26 07:52:57 2026 by rpki-client