$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c08f2550-d467-3bdd-99e1-447b55007004.roa File: c08f2550-d467-3bdd-99e1-447b55007004.roa (raw, json) Hash identifier: n0JHf6FhlcCrwwoMnmAgqzqW2Ob1uPhC5W1nLsU51To= Subject key identifier: 73:C9:ED:81:67:CD:7A:35:81:75:2D:E4:78:08:03:C3:56:80:E7:A3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D017532963E10B748F500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c08f2550-d467-3bdd-99e1-447b55007004.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 173.194.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:01:75:32:96:3e:10:b7:48:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=74321f3f-17ba-42d0-94fe-2b1ac2503adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:8d:90:76:64:8b:c1:f7:a4:c1:f6:16:ab: 25:10:c2:cd:d2:7b:77:eb:f6:00:91:4a:f2:cb:de: 68:05:9e:1a:13:a7:40:ea:3e:f6:82:27:f5:3c:bc: 62:0a:10:8e:59:7d:36:f4:b9:19:eb:3c:93:d1:92: 1e:25:14:9f:b2:55:0f:fa:94:a7:9b:5b:69:67:5e: 4d:0e:2d:5c:07:7a:c6:2b:26:da:58:69:eb:ae:b8: dc:5a:db:27:25:3b:80:c6:11:d4:15:8f:e1:b6:aa: db:92:bf:a1:1e:e4:fe:4c:bd:03:b9:e2:ae:17:88: a4:1b:6b:93:c0:5c:94:2f:69:4c:9e:b9:e4:9f:33: f1:9a:26:a1:49:69:f0:b6:3f:b1:14:bf:0e:41:73: 3c:c7:26:2c:c1:26:13:3a:69:63:22:1e:d4:2e:a8: 5d:14:ce:29:7f:20:23:6d:2c:72:5b:76:da:18:23: 0f:3f:96:cd:a9:79:ee:ab:64:cd:f1:96:aa:b1:df: d5:ee:4a:e0:d1:25:de:01:c6:7c:96:a3:63:fe:91: ed:fc:33:9a:7e:9f:99:8c:e4:c5:3a:b9:9f:ab:8e: e6:65:2e:d9:ba:99:a5:df:11:4b:cf:a4:13:10:40: 1e:7e:56:24:5d:70:2c:1f:09:de:0c:4d:fb:c8:52: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C9:ED:81:67:CD:7A:35:81:75:2D:E4:78:08:03:C3:56:80:E7:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c08f2550-d467-3bdd-99e1-447b55007004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:9f:36:0e:39:ba:ee:01:c4:b8:76:71:8b:bb:b3:c5:4c:d8: be:cf:03:88:4e:93:e5:7c:c8:a9:fe:60:1c:0c:07:b7:bb:36: 25:d8:ff:62:c1:3a:ca:4f:b8:13:2f:3e:99:6c:5d:57:e0:e9: 00:78:56:e3:03:a3:a1:14:08:a1:6a:0a:3e:69:93:8b:da:af: 24:79:b5:1d:a3:63:a9:da:73:35:df:1e:10:7b:ff:57:dc:3f: 9d:9b:01:73:a4:f5:75:db:72:8a:0d:0e:da:28:37:9c:5f:22: 94:23:1b:ce:ec:b5:28:76:ed:d0:0f:2e:4a:09:f5:96:2b:0f: a9:82:6f:28:46:f8:6f:05:56:f5:05:b3:40:f9:d5:bc:92:a1: 25:b0:34:9b:3b:be:8e:0c:38:f2:21:e0:7c:10:36:65:c9:1a: 3c:a9:9f:10:24:b9:99:47:9e:ed:b8:f6:cf:79:c8:99:90:65: 63:cb:71:11:b3:00:ca:ac:71:0e:7f:61:11:cd:fb:17:8a:06: 02:78:52:0f:37:8a:8d:9f:4d:0b:a2:d5:be:78:66:7d:61:62: 42:e1:68:e8:1e:0b:04:65:eb:9a:1b:58:f7:a2:12:72:b6:7a: db:25:0a:73:51:0c:b0:0d:8b:f6:e6:c8:c8:bd:c9:1d:4b:8a: 2b:13:39:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQF1MpY+ELdI9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzQzMjFmM2YtMTdiYS00MmQwLTk0ZmUtMmIxYWMyNTAzYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlSNkHZki8H3pMH2FqslEMLN0nt36/YAkUry y95oBZ4aE6dA6j72gif1PLxiChCOWX029LkZ6zyT0ZIeJRSfslUP+pSnm1tpZ15N Di1cB3rGKybaWGnrrrjcWtsnJTuAxhHUFY/htqrbkr+hHuT+TL0DueKuF4ikG2uT wFyUL2lMnrnknzPxmiahSWnwtj+xFL8OQXM8xyYswSYTOmljIh7ULqhdFM4pfyAj bSxyW3baGCMPP5bNqXnuq2TN8Zaqsd/V7krg0SXeAcZ8lqNj/pHt/DOafp+ZjOTF Ormfq47mZS7Zupml3xFLz6QTEEAeflYkXXAsHwneDE37yFIzGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPJ7YFnzXo1gXUt5HgIA8NWgOejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzA4ZjI1NTAtZDQ2Ny0z YmRkLTk5ZTEtNDQ3YjU1MDA3MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJufNg45uu4BxLh2cYu7s8VM2L7PA4hOk+V8yKn+YBwMB7e7NiXY/2LB OspPuBMvPplsXVfg6QB4VuMDo6EUCKFqCj5pk4varyR5tR2jY6naczXfHhB7/1fc P52bAXOk9XXbcooNDtooN5xfIpQjG87stSh27dAPLkoJ9ZYrD6mCbyhG+G8FVvUF s0D51bySoSWwNJs7vo4MOPIh4HwQNmXJGjypnxAkuZlHnu249s95yJmQZWPLcRGz AMqscQ5/YRHN+xeKBgJ4Ug83io2fTQui1b54Zn1hYkLhaOgeCwRl65obWPeiEnK2 etslCnNRDLANi/bmyMi9yR1LiisTOfI= -----END CERTIFICATE-----Generated at Fri Sep 25 14:55:18 2026 by rpki-client