$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa File: dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa (raw, json) Hash identifier: WS3YF4NlmbHscFy6QfERrFh1or2rk+Yb/RgVEw9Ubf8= Subject key identifier: BC:F9:5D:6A:C0:CD:69:81:20:F9:22:F2:E1:83:5F:65:5B:15:FA:32 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984EC3CF55429465FDD7800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.58.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:ec:3c:f5:54:29:46:5f:dd:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ffd209e9-2b7b-4a3f-b49e-77fa3f4249ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:07:46:f9:55:c6:eb:22:b7:be:df:75:88:68: 43:30:2f:4b:21:e1:4a:70:0e:06:75:f1:52:11:54: 65:fb:2d:ca:da:6c:8a:0f:9a:23:27:ab:92:d4:6d: 3e:4e:cd:87:0d:fe:a9:ef:8f:e5:18:3a:71:b6:b9: c3:46:35:e3:2f:18:e6:f0:83:fe:75:71:ec:e0:6a: f5:e2:6f:b5:33:cb:72:5d:18:2f:81:16:8b:0b:c4: fb:d1:8e:f0:8e:61:a9:b6:0e:93:0f:3a:7a:85:da: 54:20:73:5d:0b:6e:b3:84:26:c5:91:d5:08:dc:80: dc:ba:87:7c:23:7d:3f:3a:bd:51:19:2e:1d:f6:ed: 06:3a:d3:f2:b6:10:b7:7c:c8:ee:61:db:21:e4:52: 67:b0:12:51:0b:7a:ee:b5:36:dc:2d:bf:77:3f:b5: a6:20:5a:41:2e:04:8a:ef:6c:c1:01:e8:9f:73:9d: fb:30:f4:e0:7b:6b:75:fe:64:a7:6d:73:3c:a9:f6: e2:26:21:e9:10:42:c7:32:33:99:84:2b:63:24:5e: a3:88:00:4f:d2:7c:63:57:47:21:ea:9f:82:d6:8f: 74:b8:5d:04:5f:24:15:6d:5a:b6:83:7f:63:51:06: cb:af:e4:1c:42:61:f6:76:8f:80:a9:ec:69:28:0f: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F9:5D:6A:C0:CD:69:81:20:F9:22:F2:E1:83:5F:65:5B:15:FA:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b6:d4:9b:b7:e8:be:b7:cb:db:48:bd:ca:d0:38:f0:f1:cb: cc:09:74:c3:20:e1:57:97:0b:04:2f:85:57:f3:ee:5b:36:b1: b5:4f:ad:ac:ff:b5:9c:88:d9:e4:5c:dc:16:00:e9:77:22:4e: 8e:98:76:b7:1a:38:39:09:c4:79:e5:19:86:50:68:fd:59:22: 74:f2:b0:dd:28:54:bc:17:26:47:c1:81:89:8c:59:96:7a:d4: c0:22:ee:d2:d7:f3:47:8a:c5:db:07:cf:e5:d4:7a:01:2a:ee: e4:e4:f9:e7:33:9c:7a:96:1c:94:91:af:e7:77:27:16:e0:de: f3:98:78:de:82:e1:67:1e:6a:05:b3:3d:3a:e8:51:a7:b5:70: 34:ad:16:de:7e:f8:f7:25:f0:ef:67:4e:c3:eb:af:71:71:23: 08:24:a3:4d:eb:bf:7d:e4:12:fb:4f:7c:0f:a6:39:6b:65:16: 4f:b3:18:65:a5:26:73:cc:65:69:ce:92:ee:c9:f3:92:49:9e: 91:18:3e:87:d6:b8:10:0a:20:f7:2f:01:ba:9a:e4:b5:b8:0e: 24:46:4a:d5:09:ab:5c:cb:c7:af:4f:1e:0f:ec:d7:6f:b6:33: ff:62:44:06:24:6b:e8:5b:e5:ec:28:05:d7:cc:9c:19:26:f6: 13:14:46:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhOw89VQpRl/deAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmZkMjA5ZTktMmI3Yi00YTNmLWI0OWUtNzdmYTNmNDI0OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QdG+VXG6yK3vt91iGhDMC9LIeFKcA4GdfFS EVRl+y3K2myKD5ojJ6uS1G0+Ts2HDf6p74/lGDpxtrnDRjXjLxjm8IP+dXHs4Gr1 4m+1M8tyXRgvgRaLC8T70Y7wjmGptg6TDzp6hdpUIHNdC26zhCbFkdUI3IDcuod8 I30/Or1RGS4d9u0GOtPythC3fMjuYdsh5FJnsBJRC3rutTbcLb93P7WmIFpBLgSK 72zBAeifc537MPTge2t1/mSnbXM8qfbiJiHpEELHMjOZhCtjJF6jiABP0nxjV0ch 6p+C1o90uF0EXyQVbVq2g39jUQbLr+QcQmH2do+AqexpKA8eywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLz5XWrAzWmBIPki8uGDX2VbFfoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZmMGZjZjYtM2U5NC0z ZGVmLTllNzctMjdlMDBlZmQ2YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa21Ju36L63y9tIvcrQOPDxy8wJdMMg4VeXCwQvhVfz7ls2sbVPraz/ tZyI2eRc3BYA6XciTo6YdrcaODkJxHnlGYZQaP1ZInTysN0oVLwXJkfBgYmMWZZ6 1MAi7tLX80eKxdsHz+XUegEq7uTk+ecznHqWHJSRr+d3Jxbg3vOYeN6C4WceagWz PTroUae1cDStFt5++Pcl8O9nTsPrr3FxIwgko03rv33kEvtPfA+mOWtlFk+zGGWl JnPMZWnOku7J85JJnpEYPofWuBAKIPcvAbqa5LW4DiRGStUJq1zLx69PHg/s12+2 M/9iRAYka+hb5ewoBdfMnBkm9hMURus= -----END CERTIFICATE-----Generated at Fri Sep 25 20:51:54 2026 by rpki-client