$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa File: d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa (raw, json) Hash identifier: p8yqm6lx2IFe1QGdOzUEO2ah10mcE4hMsau28jdz3tQ= Subject key identifier: D4:24:FF:26:74:2A:4F:F2:36:67:A6:AD:57:C0:2A:D8:18:EE:79:50 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984FD3E0BDDDCD0504B0100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.58.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:fd:3e:0b:dd:dc:d0:50:4b:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2c2849fb-2c38-4de7-8491-ccd42096e235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d6:9f:9a:a0:89:9f:be:c8:7b:50:ca:ea:47: f4:dd:8e:f1:4e:b8:80:8a:d7:6d:77:a5:75:94:48: 30:d7:08:7f:91:31:65:3b:54:ba:06:48:fd:5c:ed: 07:d0:19:54:59:8b:0e:fa:35:b1:96:83:21:99:b0: e7:d4:9b:71:4e:cd:e6:bd:7d:6b:e3:f3:70:27:2e: 0b:ee:7c:86:7b:c3:8c:29:08:55:99:e8:dd:c4:2f: 9b:e2:e2:c8:23:ee:ee:b3:10:88:24:d6:9f:2c:6c: 35:da:92:36:fe:c2:aa:a2:49:ef:b8:38:14:d3:4e: 6a:dd:de:9c:45:1a:c0:04:ec:7a:2c:5f:9e:6c:f7: 5e:e6:94:e9:47:ee:5c:d9:91:c5:81:b4:cd:9f:f3: 7c:30:fb:8c:e1:4d:72:bd:d8:32:cf:7c:1e:59:d8: ff:09:18:09:13:21:f6:34:c6:27:2c:2c:07:18:e6: 37:19:aa:10:03:76:4c:de:e1:e2:a6:de:23:c1:a3: e5:82:8b:c0:e3:b9:b4:94:d6:75:09:78:e7:41:75: 75:d5:17:93:e5:78:2a:7e:40:28:95:a2:e8:1b:1d: a7:f3:68:f6:66:c2:c5:ad:1e:10:92:44:47:60:2e: 70:ab:8f:f3:91:0d:8b:9d:6c:19:c0:e3:56:12:35: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:24:FF:26:74:2A:4F:F2:36:67:A6:AD:57:C0:2A:D8:18:EE:79:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ee:07:73:7c:12:36:4e:d2:eb:c4:ba:ca:35:91:7a:13:46: 2e:cb:f0:f2:e4:53:6f:4a:67:a9:63:7a:13:a6:79:a8:6d:e1: ab:60:07:67:33:f2:2a:43:e4:64:c4:21:7e:c3:23:74:d4:cc: d3:9f:68:94:cc:8c:20:55:42:31:28:a6:1a:d7:5e:df:43:4f: 3d:45:29:58:e6:a8:d4:8d:25:96:3d:8f:f4:eb:6e:72:3b:bf: 5c:dc:ca:a0:df:27:a6:45:a0:19:96:9c:9e:84:92:a0:67:f1: 54:e6:8b:3b:b6:3c:37:24:1f:e2:b3:84:84:dc:79:a1:51:c3: 52:4b:5c:3c:14:11:bf:ee:51:59:13:d6:99:e0:17:f2:f7:7d: 87:56:5c:8a:83:af:50:5f:59:6b:ff:cf:cd:e1:7b:02:b4:eb: 13:23:d7:cc:6d:ad:2a:12:9e:b7:66:e4:f9:5f:dd:35:b2:82: 3d:9a:af:77:91:d9:ca:e5:73:c5:92:d1:9a:74:45:37:01:d9: 0b:4f:6e:86:19:5f:4f:a5:ed:d0:8a:5b:4d:63:2d:03:1e:72: 06:9d:52:7f:2f:7c:04:d7:c2:db:82:82:68:b6:03:5b:56:b8: 16:37:3d:96:be:a4:49:a5:75:3d:8d:4c:00:de:7f:08:cd:6b: 0f:64:35:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhP0+C93c0FBLAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmMyODQ5ZmItMmMzOC00ZGU3LTg0OTEtY2NkNDIwOTZlMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9afmqCJn77Ie1DK6kf03Y7xTriAitdtd6V1 lEgw1wh/kTFlO1S6Bkj9XO0H0BlUWYsO+jWxloMhmbDn1JtxTs3mvX1r4/NwJy4L 7nyGe8OMKQhVmejdxC+b4uLII+7usxCIJNafLGw12pI2/sKqoknvuDgU005q3d6c RRrABOx6LF+ebPde5pTpR+5c2ZHFgbTNn/N8MPuM4U1yvdgyz3weWdj/CRgJEyH2 NMYnLCwHGOY3GaoQA3ZM3uHipt4jwaPlgovA47m0lNZ1CXjnQXV11ReT5XgqfkAo laLoGx2n82j2ZsLFrR4QkkRHYC5wq4/zkQ2LnWwZwONWEjUpVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQk/yZ0Kk/yNmemrVfAKtgY7nlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhmZWM3NGYtYTBiZS0z YzJlLWI2NzUtZDA1ZWQ3ZTY0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXuB3N8EjZO0uvEuso1kXoTRi7L8PLkU29KZ6ljehOmeaht4atgB2cz 8ipD5GTEIX7DI3TUzNOfaJTMjCBVQjEophrXXt9DTz1FKVjmqNSNJZY9j/TrbnI7 v1zcyqDfJ6ZFoBmWnJ6EkqBn8VTmizu2PDckH+KzhITceaFRw1JLXDwUEb/uUVkT 1pngF/L3fYdWXIqDr1BfWWv/z83hewK06xMj18xtrSoSnrdm5Plf3TWygj2ar3eR 2crlc8WS0Zp0RTcB2QtPboYZX0+l7dCKW01jLQMecgadUn8vfATXwtuCgmi2A1tW uBY3PZa+pEmldT2NTADefwjNaw9kNR0= -----END CERTIFICATE-----Generated at Fri Sep 25 19:02:56 2026 by rpki-client