$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa File: b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa (raw, json) Hash identifier: R1Y3yUsqju6DHNANOXvvniRwtAifliXQbUxj+mn1SFg= Subject key identifier: F7:DC:2D:1C:E7:55:DB:68:7A:F7:0A:D9:F9:98:A5:F8:A3:03:2C:EF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984F3C30ADDD5619F4CFAC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 209.85.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:f3:c3:0a:dd:d5:61:9f:4c:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6115dec0-28d0-4dbd-8313-056da0ee74f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:71:47:4c:22:87:04:d8:22:26:55:46:66:f6: ee:29:9f:c3:e1:31:cb:c4:3d:27:77:92:eb:a0:dc: 34:20:dd:9c:95:d4:21:21:96:d8:38:fa:af:2e:6e: 84:65:ce:0e:9c:f6:07:c2:49:db:38:88:95:ef:93: b5:d1:cf:99:ab:86:0b:61:e0:9e:59:61:86:41:00: 31:61:24:60:14:b8:31:5e:7e:ad:a2:d2:1c:e4:3c: d3:a1:01:a2:c4:70:b3:ec:7c:84:dd:d4:5c:cd:d1: fd:5c:a1:1d:3c:fc:41:39:37:12:5a:cd:1c:cb:60: 45:fa:f8:43:e0:cd:7b:1f:c1:68:4b:bd:b9:4d:c2: e9:68:84:99:63:f8:6f:45:a8:ed:6a:35:29:00:59: 0d:e9:8f:a4:ef:49:c7:a9:9b:8b:ed:c4:07:54:df: 96:b9:e1:da:cb:97:80:ba:d7:eb:cd:50:70:9e:d5: 3b:9f:26:84:42:a4:56:44:fe:93:08:ae:38:f4:cf: 68:6e:18:ca:ff:ee:04:73:f9:d4:13:68:84:72:01: 10:6d:92:73:6b:e6:f4:28:70:0b:89:26:b4:9c:c4: d9:2d:98:a8:94:96:62:36:b1:8d:b0:3c:60:f4:a9: 2d:d3:09:bf:c6:b3:e9:8f:6a:53:b3:2d:92:7e:99: c7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DC:2D:1C:E7:55:DB:68:7A:F7:0A:D9:F9:98:A5:F8:A3:03:2C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a0:ab:3a:0c:1f:cc:59:d0:d2:67:e6:1f:8b:f5:db:00:7a: 2d:10:e1:66:b4:64:51:f7:ea:69:f2:8e:69:c8:19:fd:62:f4: bb:a9:9d:d6:c6:2c:7a:ce:70:94:a8:7e:09:6b:f8:b2:20:a4: 65:0c:c2:11:76:9b:3f:35:5b:ba:b4:a5:40:6c:d7:53:e5:92: 46:01:10:a1:41:85:9e:32:3a:67:c8:bb:0e:af:39:24:67:af: 35:3e:14:48:b2:ae:4e:02:3d:44:4a:c6:f7:eb:dd:ad:02:e1: 05:96:d7:1e:9c:13:7a:dc:9d:65:f2:66:71:cd:4b:4d:54:a0: ab:e8:f0:9a:db:1e:53:49:b1:d6:a1:bb:00:e4:37:0b:4a:d7: 1a:06:0e:f0:70:25:2d:dc:c5:d7:be:ce:16:9b:04:db:64:f1: 5d:5c:bc:2f:14:b5:55:f1:24:91:ca:5f:f2:07:21:df:84:59: 53:8a:ab:ae:af:d8:8d:21:b8:3b:52:95:f6:90:48:83:20:f0: 1e:f7:85:6c:be:7e:d1:d8:06:30:52:39:9c:9e:0b:ce:a9:ed: 1a:7f:d7:75:b7:d0:d0:31:24:4f:ee:36:98:72:da:2f:62:23: 2e:57:00:6c:e8:08:9c:9f:cd:98:77:da:d2:3f:86:86:2e:6b: 7e:2a:d9:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPPDCt3VYZ9M+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjExNWRlYzAtMjhkMC00ZGJkLTgzMTMtMDU2ZGEwZWU3NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHFHTCKHBNgiJlVGZvbuKZ/D4THLxD0nd5Lr oNw0IN2cldQhIZbYOPqvLm6EZc4OnPYHwknbOIiV75O10c+Zq4YLYeCeWWGGQQAx YSRgFLgxXn6totIc5DzToQGixHCz7HyE3dRczdH9XKEdPPxBOTcSWs0cy2BF+vhD 4M17H8FoS725TcLpaISZY/hvRajtajUpAFkN6Y+k70nHqZuL7cQHVN+WueHay5eA utfrzVBwntU7nyaEQqRWRP6TCK449M9obhjK/+4Ec/nUE2iEcgEQbZJza+b0KHAL iSa0nMTZLZiolJZiNrGNsDxg9Kkt0wm/xrPpj2pTsy2SfpnH/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfcLRznVdtoevcK2fmYpfijAyzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjNlMDZkYzUtZWM5OC0z Njg2LTg0YzQtNmQ3NmQ3ODgwNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIygqzoMH8xZ0NJn5h+L9dsAei0Q4Wa0ZFH36mnyjmnIGf1i9LupndbG LHrOcJSofglr+LIgpGUMwhF2mz81W7q0pUBs11PlkkYBEKFBhZ4yOmfIuw6vOSRn rzU+FEiyrk4CPURKxvfr3a0C4QWW1x6cE3rcnWXyZnHNS01UoKvo8JrbHlNJsdah uwDkNwtK1xoGDvBwJS3cxde+zhabBNtk8V1cvC8UtVXxJJHKX/IHId+EWVOKq66v 2I0huDtSlfaQSIMg8B73hWy+ftHYBjBSOZyeC86p7Rp/13W30NAxJE/uNphy2i9i Iy5XAGzoCJyfzZh32tI/hoYua34q2Tk= -----END CERTIFICATE-----Generated at Fri Sep 25 14:49:57 2026 by rpki-client