$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa File: a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa (raw, json) Hash identifier: EPnRdZNaFu4VvGtTrnhNebvK2i3MxViarwW4b2CQ7BQ= Subject key identifier: 18:0C:8C:23:3D:0B:AB:03:DA:C0:BA:F2:87:D3:3C:59:5A:D3:51:EF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49850E8596D8B7215CFC2F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.239.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:0e:85:96:d8:b7:21:5c:fc:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=40d9903c-bd01-463e-930c-1a8007095a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:e5:be:b7:3a:4d:59:98:76:14:b8:90:32: 55:05:02:3d:ed:6a:5b:7e:d1:32:c8:5f:df:4e:bc: d0:6b:45:84:97:bf:c8:a7:06:6b:9c:7e:fe:1f:4c: 81:8b:f8:f1:22:b6:5b:f3:e3:e2:4f:f4:53:b9:47: 45:13:80:b3:9f:2a:b7:43:6b:c8:30:57:ff:2d:c5: 1a:3a:a0:bb:35:ac:9c:bd:3a:3e:7b:c8:0c:67:94: e2:5d:c6:d1:d4:48:18:b9:e3:e6:79:1f:22:9b:2d: 0d:90:ea:21:f8:ab:9a:c4:6a:d1:5d:94:61:2e:d6: 7a:ec:e7:8f:71:f7:b4:33:e3:c9:49:c4:b4:05:8d: 97:63:ca:b0:7b:78:ef:d7:5b:c3:42:0a:1c:6b:f0: b7:13:56:03:bf:83:2b:61:0b:57:88:89:32:f3:89: 10:de:1a:b3:8c:3a:06:5f:fa:b8:b0:77:e0:80:62: 96:d6:56:77:16:bb:d3:ab:c8:28:b8:4c:20:e8:27: bf:4d:52:c0:a6:b0:5d:d7:72:e8:e1:1b:42:f2:19: da:d9:19:8f:12:b6:53:34:9c:05:59:f9:cf:19:3c: 1e:d8:05:ee:4d:fb:61:39:39:1b:2a:6a:66:58:ea: 72:c0:5e:82:0b:1b:8b:ef:dd:c4:bd:5d:e3:af:f9: 01:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0C:8C:23:3D:0B:AB:03:DA:C0:BA:F2:87:D3:3C:59:5A:D3:51:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:9b:1c:65:c4:13:97:5d:ab:99:88:b2:0d:d5:93:85:30:64: a7:c6:78:f1:dc:6f:c1:32:e0:77:65:a8:72:b8:01:e4:86:ef: 13:d2:87:28:5a:75:4b:71:91:c6:20:4c:d2:cd:90:5e:2b:cf: 96:69:b2:f9:27:04:fe:da:e7:d9:aa:ab:d6:c0:03:6d:c6:6b: b0:f3:64:dc:75:f1:18:96:52:d1:cb:03:ef:54:21:37:a1:be: 70:6b:b5:c5:76:14:df:70:56:91:36:df:1d:73:09:9e:83:c4: 92:7a:9b:90:6c:ba:4a:6b:5f:a8:c9:b6:60:af:fa:2f:57:fa: 15:c6:72:6c:a4:eb:79:c8:02:0a:08:1b:83:d7:84:3a:3f:4e: 3c:52:3d:1b:57:7e:77:3a:98:c2:5e:fd:be:dd:0b:bb:84:4b: 66:1b:6f:da:c3:6c:db:28:a4:35:3f:8d:5c:79:66:fd:c8:09: 7d:e7:15:a3:00:16:a6:fd:0d:ba:e4:85:a7:87:4e:22:e9:45: a6:13:9f:62:67:78:db:19:7f:b6:bb:7e:a1:99:52:b2:fd:3a: 2d:f5:08:7e:ce:31:20:10:af:f1:46:6e:5a:f9:2c:1d:89:cd: 94:4a:93:1b:4a:51:21:7c:b3:1a:f9:22:15:d3:2f:e2:c0:a2: a5:8a:4f:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQ6Flti3IVz8L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDBkOTkwM2MtYmQwMS00NjNlLTkzMGMtMWE4MDA3MDk1YTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYLlvrc6TVmYdhS4kDJVBQI97WpbftEyyF/f TrzQa0WEl7/IpwZrnH7+H0yBi/jxIrZb8+PiT/RTuUdFE4Cznyq3Q2vIMFf/LcUa OqC7NaycvTo+e8gMZ5TiXcbR1EgYuePmeR8imy0NkOoh+KuaxGrRXZRhLtZ67OeP cfe0M+PJScS0BY2XY8qwe3jv11vDQgoca/C3E1YDv4MrYQtXiIky84kQ3hqzjDoG X/q4sHfggGKW1lZ3FrvTq8gouEwg6Ce/TVLAprBd13Lo4RtC8hna2RmPErZTNJwF WfnPGTwe2AXuTfthOTkbKmpmWOpywF6CCxuL793EvV3jr/kBlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgMjCM9C6sD2sC68ofTPFla01HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTVhMjhmZTgtMjMwYi0z ZmRkLTliZmMtNWZiYjY2MTQ4NDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSbHGXEE5ddq5mIsg3Vk4UwZKfGePHcb8Ey4HdlqHK4AeSG7xPShyha dUtxkcYgTNLNkF4rz5ZpsvknBP7a59mqq9bAA23Ga7DzZNx18RiWUtHLA+9UITeh vnBrtcV2FN9wVpE23x1zCZ6DxJJ6m5BsukprX6jJtmCv+i9X+hXGcmyk63nIAgoI G4PXhDo/TjxSPRtXfnc6mMJe/b7dC7uES2Ybb9rDbNsopDU/jVx5Zv3ICX3nFaMA Fqb9DbrkhaeHTiLpRaYTn2JneNsZf7a7fqGZUrL9Oi31CH7OMSAQr/FGblr5LB2J zZRKkxtKUSF8sxr5IhXTL+LAoqWKT18= -----END CERTIFICATE-----Generated at Fri Sep 25 20:23:42 2026 by rpki-client