$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa File: a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa (raw, json) Hash identifier: js8dQ65ppr0PgglpIAYaI3ljS0mCFCA4+jcVQk6uO0Q= Subject key identifier: 2A:65:62:87:39:80:E1:5F:82:31:3E:01:07:BA:B3:A6:65:CA:0C:62 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984EF94EE54A15641289140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 209.85.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:ef:94:ee:54:a1:56:41:28:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=273cfb0b-86d0-4a43-9263-df71e25c709d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:9e:06:b1:e3:ee:08:a7:47:dd:94:88:57: 5b:37:cc:5a:e0:9a:5c:97:47:14:53:06:2b:64:d8: e0:af:4e:63:21:d0:2e:54:bc:18:a8:2b:df:e9:e0: f9:aa:a4:f3:4b:d1:8b:cb:b0:c8:e9:bb:f7:69:ca: e8:13:31:a2:77:c1:6a:e9:af:26:09:01:6e:6e:97: e5:88:18:d5:c6:61:1b:ea:bf:c6:5c:ba:39:0d:0b: 50:de:42:21:7b:40:c6:f5:c7:f2:76:b5:00:69:41: e0:84:40:a6:d0:8a:6b:a1:e0:c3:6f:f2:d2:05:2e: cb:72:fe:52:2d:42:35:75:f6:32:4b:b0:cb:a6:3a: 71:1c:25:7d:98:59:0e:6a:da:56:b6:39:fa:bb:ba: 1e:c4:52:88:db:9f:ec:03:1c:f8:09:1f:63:71:37: eb:cb:2d:b8:6d:6e:a4:eb:50:80:1e:14:96:32:18: 24:3d:c1:01:13:47:87:db:17:6b:18:31:7b:ec:0b: e4:a4:ba:91:30:9c:77:a0:ca:64:de:82:d9:45:c9: b4:9c:21:3b:7a:97:18:21:6d:b7:19:87:5a:ea:3f: 9d:0c:2d:65:29:d2:77:67:ff:61:c0:09:47:81:7b: fe:a5:a7:4b:dc:07:dd:f2:a0:9c:09:0c:8c:88:6b: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:65:62:87:39:80:E1:5F:82:31:3E:01:07:BA:B3:A6:65:CA:0C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:78:77:cf:43:f3:08:63:e2:1a:bf:1b:42:77:1d:ce:09:1e: 85:c6:24:7d:fe:80:d9:51:57:d4:c4:67:5f:be:84:9e:e7:98: 3b:0c:d2:42:3a:ff:8f:55:b3:3d:c2:36:a9:db:4c:0d:de:68: ac:9e:73:11:65:1e:17:8b:7b:97:60:f1:af:70:aa:10:68:30: 21:fd:c3:9a:5e:79:1a:77:2f:55:01:66:98:4a:70:fb:ee:f0: 02:dd:ec:15:a6:5a:ed:d3:87:97:0f:07:72:26:6a:76:4b:ac: ce:4f:6d:0b:43:16:61:8f:ca:eb:14:76:ac:59:d3:a4:61:62: 70:30:ca:c9:ba:da:a1:93:6c:36:d8:8c:61:e8:3b:e8:c9:a7: 41:f4:b3:90:ae:73:7d:96:6d:14:22:d2:6d:da:85:68:68:4e: 57:e9:47:b7:63:02:87:45:55:ac:e6:3d:2f:5b:d0:d3:8f:58: bc:dc:4e:45:6c:86:2b:5e:35:79:5c:3e:f8:3a:ea:c2:48:97: 34:69:bf:e1:36:a4:62:2a:6a:a4:a8:9e:97:8f:fb:56:51:4b: 3c:65:d0:29:45:87:b0:aa:33:38:66:6f:57:79:6b:86:9e:cd: 80:6e:af:be:4b:93:64:95:b7:40:c7:42:64:2d:05:cb:0f:dc: f0:39:b8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhO+U7lShVkEokUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjczY2ZiMGItODZkMC00YTQzLTkyNjMtZGY3MWUyNWM3MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3SeBrHj7ginR92UiFdbN8xa4Jpcl0cUUwYr ZNjgr05jIdAuVLwYqCvf6eD5qqTzS9GLy7DI6bv3acroEzGid8Fq6a8mCQFubpfl iBjVxmEb6r/GXLo5DQtQ3kIhe0DG9cfydrUAaUHghECm0IproeDDb/LSBS7Lcv5S LUI1dfYyS7DLpjpxHCV9mFkOatpWtjn6u7oexFKI25/sAxz4CR9jcTfryy24bW6k 61CAHhSWMhgkPcEBE0eH2xdrGDF77AvkpLqRMJx3oMpk3oLZRcm0nCE7epcYIW23 GYda6j+dDC1lKdJ3Z/9hwAlHgXv+padL3Afd8qCcCQyMiGsdXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCplYoc5gOFfgjE+AQe6s6ZlygxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTc5NTJiYzEtZTFkMy0z M2RkLTk2ODQtOWM5YjBiOTI1YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB94d89D8whj4hq/G0J3Hc4JHoXGJH3+gNlRV9TEZ1++hJ7nmDsM0kI6 /49Vsz3CNqnbTA3eaKyecxFlHheLe5dg8a9wqhBoMCH9w5peeRp3L1UBZphKcPvu 8ALd7BWmWu3Th5cPB3ImanZLrM5PbQtDFmGPyusUdqxZ06RhYnAwysm62qGTbDbY jGHoO+jJp0H0s5Cuc32WbRQi0m3ahWhoTlfpR7djAodFVazmPS9b0NOPWLzcTkVs hiteNXlcPvg66sJIlzRpv+E2pGIqaqSonpeP+1ZRSzxl0ClFh7CqMzhmb1d5a4ae zYBur75Lk2SVt0DHQmQtBcsP3PA5uEk= -----END CERTIFICATE-----Generated at Fri Sep 25 20:23:46 2026 by rpki-client