$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa File: c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa (raw, json) Hash identifier: oWxcUkCubFunKbTFd6/tRSn4N3J3f4bwJ9PC5l8DbnE= Subject key identifier: B2:1E:A9:1D:3B:11:2C:F4:C3:71:E0:80:04:50:60:57:7A:D2:25:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EA9279691A5600ACCE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 173.194.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ea:92:79:69:1a:56:00:ac:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=923ebd33-e3c6-47aa-b6d4-b982b31bea33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:b7:34:f8:b3:86:ad:bc:0f:3b:78:a5:51: 4b:ab:3e:f2:08:00:15:bb:f4:be:d2:de:d5:11:79: 40:82:f6:be:29:78:9f:7c:3e:0f:00:1d:d1:09:ca: c2:7c:e6:a3:09:13:e0:87:7f:92:22:c7:0e:27:a1: ad:3d:6b:46:99:8c:1d:b4:15:a9:3b:6b:d0:11:66: 85:c4:99:f3:3a:db:4b:05:3e:ee:76:2c:05:78:4e: 76:3b:e2:01:e6:8c:e1:49:4b:c0:fd:dd:6d:7b:da: 55:67:a0:0b:b9:5d:be:9b:9e:eb:95:16:74:5d:9e: 2b:39:89:9f:a7:41:a1:89:de:48:e6:77:0e:20:56: 2e:50:79:99:59:83:29:1d:15:e8:95:ef:50:98:55: 51:19:82:62:c5:c9:20:10:97:e0:57:80:90:32:b1: 02:68:6b:39:9d:88:67:0b:39:c2:5a:5c:6e:6c:a5: d1:81:ba:be:5d:a8:9c:1c:f5:59:88:68:9a:0a:08: 73:d1:ab:18:fd:71:45:7f:44:00:dc:b9:6f:87:24: 1a:94:80:28:e5:13:e2:6c:a7:4b:34:38:60:74:71: 1a:da:a9:86:21:94:be:89:0d:e5:14:e4:84:f0:57: cf:7c:cd:52:75:e6:b4:21:4d:68:9f:fb:18:08:03: 70:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:A9:1D:3B:11:2C:F4:C3:71:E0:80:04:50:60:57:7A:D2:25:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c0:1f:6d:f9:d5:d7:13:82:d5:96:f9:da:e4:f4:fd:68:e6: f4:2b:2a:1d:c1:b0:12:ce:2b:27:74:13:10:6b:b1:f8:5f:60: 8a:ca:56:78:59:aa:53:7e:d8:75:eb:ef:29:77:cf:c2:df:f5: 56:e5:34:cd:c1:40:1e:05:56:c1:81:73:ff:2b:5c:71:f7:9a: 33:1f:81:12:0c:32:2c:c3:6f:bf:47:81:27:0a:af:66:f2:b9: 16:34:e7:30:4b:fb:e6:f6:c2:3a:05:1c:ae:0e:ee:e3:16:21: b5:6c:b2:47:68:90:cf:b4:b2:34:89:37:1d:34:38:a9:74:b6: 7d:14:1d:09:74:40:a9:b5:3b:0c:06:f1:bb:18:d3:b6:06:78: 77:92:99:01:d5:17:f9:d0:63:10:22:98:02:81:dd:ce:83:c5: 66:c8:b5:40:4b:40:df:b7:f1:9b:88:f4:84:1f:44:6d:ec:4f: 6f:78:b1:9a:e4:7e:5b:83:89:09:31:05:77:aa:61:c0:44:d8: c3:87:ab:38:a1:d6:78:d2:19:bc:08:78:db:12:c8:9a:4c:fd: 16:11:54:4a:16:4f:f9:f7:90:ff:4b:a8:17:b1:e1:20:37:39: 6e:2f:ca:5b:b8:da:d2:53:cf:88:03:34:13:db:59:aa:e3:3e: 4f:fd:2a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuqSeWkaVgCszgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OTIzZWJkMzMtZTNjNi00N2FhLWI2ZDQtYjk4MmIzMWJlYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzS3NPizhq28Dzt4pVFLqz7yCAAVu/S+0t7V EXlAgva+KXiffD4PAB3RCcrCfOajCRPgh3+SIscOJ6GtPWtGmYwdtBWpO2vQEWaF xJnzOttLBT7udiwFeE52O+IB5ozhSUvA/d1te9pVZ6ALuV2+m57rlRZ0XZ4rOYmf p0Ghid5I5ncOIFYuUHmZWYMpHRXole9QmFVRGYJixckgEJfgV4CQMrECaGs5nYhn CznCWlxubKXRgbq+XaicHPVZiGiaCghz0asY/XFFf0QA3LlvhyQalIAo5RPibKdL NDhgdHEa2qmGIZS+iQ3lFOSE8FfPfM1Sdea0IU1on/sYCANwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIeqR07ESz0w3HggARQYFd60iXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzhlMDVlOGMtMmExZi0z MGM0LWE0ZTUtY2ZjZjAxOTJiNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELAH2351dcTgtWW+drk9P1o5vQrKh3BsBLOKyd0ExBrsfhfYIrKVnhZ qlN+2HXr7yl3z8Lf9VblNM3BQB4FVsGBc/8rXHH3mjMfgRIMMizDb79HgScKr2by uRY05zBL++b2wjoFHK4O7uMWIbVsskdokM+0sjSJNx00OKl0tn0UHQl0QKm1OwwG 8bsY07YGeHeSmQHVF/nQYxAimAKB3c6DxWbItUBLQN+38ZuI9IQfRG3sT294sZrk fluDiQkxBXeqYcBE2MOHqzih1njSGbwIeNsSyJpM/RYRVEoWT/n3kP9LqBex4SA3 OW4vylu42tJTz4gDNBPbWarjPk/9KqM= -----END CERTIFICATE-----Generated at Tue Nov 10 21:05:21 2026 by rpki-client