$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa File: ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa (raw, json) Hash identifier: 58zJsxMosVU+VmjcnAT357RIU8dd1eI+XssVPsfTl0M= Subject key identifier: 62:28:D7:6A:04:73:2C:91:7E:78:E2:B1:EF:B4:FF:50:FC:8E:6E:B1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D0B1DB19C33907157AEC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.58.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:0b:1d:b1:9c:33:90:71:57:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4e01abed-e767-4e71-8d31-f37c2282ae07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:53:47:5b:04:5b:50:f1:d6:0a:b5:2d:9d: 4f:03:e1:52:0f:7f:fc:48:9b:43:aa:09:b7:92:b2: aa:34:81:20:42:72:fb:2c:7e:67:c7:4e:aa:5e:83: 68:ae:ae:99:89:67:f5:70:61:c9:93:b6:3a:fe:d4: be:d2:3f:6a:9f:9c:58:3f:b5:ac:28:d3:0f:c0:f5: ea:5c:e3:51:a5:54:60:8c:2a:4f:e0:73:ff:40:c0: 86:76:b1:c6:0b:02:f3:9a:40:98:ad:94:0f:a2:22: bb:88:d6:1e:75:93:85:b4:80:61:70:6b:ec:8f:99: c7:b4:60:6a:78:93:d5:02:20:1d:3b:2b:30:8d:65: 56:a5:dd:d7:f5:2d:a8:df:9f:04:20:fa:d9:d7:07: 24:66:eb:b0:e3:ac:31:b7:f7:3e:47:ab:c4:6d:3e: 87:7b:68:99:ff:e2:dc:ac:89:14:1d:d4:a5:bf:a0: 4a:91:a0:d5:b4:00:1a:fb:e2:d6:3a:23:7e:1d:6c: 80:60:cf:f4:bb:ad:31:29:d6:0c:9c:69:ec:3a:7c: 7f:d9:cd:2f:db:3a:d1:5a:2e:87:4b:2e:40:da:72: 09:40:ad:6a:d6:d9:a0:53:fc:b5:94:91:9b:35:86: 6a:62:09:5e:7d:68:47:02:0e:88:e2:1e:c4:fd:17: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:28:D7:6A:04:73:2C:91:7E:78:E2:B1:EF:B4:FF:50:FC:8E:6E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5a:1f:2e:e4:8d:13:94:c6:62:99:fd:dc:1b:72:82:28:16: d9:ad:7a:71:47:ae:0f:4f:52:55:70:84:a4:4e:9e:3d:18:1b: 85:0d:6d:98:36:a5:15:a2:55:5a:da:9b:b2:0d:2c:c3:93:9a: 64:0f:d4:68:5b:e2:b3:f9:32:69:c9:6a:b9:03:d7:59:45:29: 63:0e:49:7e:e4:10:3a:95:26:fc:a5:11:a7:47:2e:59:73:7f: 04:ad:8e:fe:6c:39:31:6f:b7:cc:c6:1a:9f:d9:e4:ad:ee:d6: df:02:18:d4:62:47:a3:3f:6f:dd:9e:68:4a:02:63:76:91:0e: 42:c6:5f:27:48:67:aa:96:04:a2:86:00:d5:07:1c:ca:e8:17: e9:20:53:0e:e0:db:d1:89:fc:fc:e7:47:84:20:aa:80:f0:46: ce:1b:23:fc:af:f7:7e:74:10:93:ce:df:43:b3:95:88:55:96: 77:5d:c0:32:95:39:86:40:7f:fe:b8:4d:09:13:20:39:55:28: f4:bb:62:be:c8:a9:fc:34:d8:01:c5:c7:a8:62:ac:49:07:e6: a2:6e:dc:20:18:a0:a6:1f:a9:dc:ff:80:71:5b:ef:e1:6d:d8: ac:09:cc:90:5e:99:66:f2:24:d2:15:19:ef:d8:b1:89:7a:41: 11:86:6a:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQsdsZwzkHFXrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGUwMWFiZWQtZTc2Ny00ZTcxLThkMzEtZjM3YzIyODJhZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1hTR1sEW1Dx1gq1LZ1PA+FSD3/8SJtDqgm3 krKqNIEgQnL7LH5nx06qXoNorq6ZiWf1cGHJk7Y6/tS+0j9qn5xYP7WsKNMPwPXq XONRpVRgjCpP4HP/QMCGdrHGCwLzmkCYrZQPoiK7iNYedZOFtIBhcGvsj5nHtGBq eJPVAiAdOyswjWVWpd3X9S2o358EIPrZ1wckZuuw46wxt/c+R6vEbT6He2iZ/+Lc rIkUHdSlv6BKkaDVtAAa++LWOiN+HWyAYM/0u60xKdYMnGnsOnx/2c0v2zrRWi6H Sy5A2nIJQK1q1tmgU/y1lJGbNYZqYglefWhHAg6I4h7E/ReEuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIo12oEcyyRfnjise+0/1D8jm6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWY5Y2E3ZjktMjA1YS0z NDY2LWJjOTgtY2E0ZTQ0ZGQ5MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRaHy7kjROUxmKZ/dwbcoIoFtmtenFHrg9PUlVwhKROnj0YG4UNbZg2 pRWiVVram7INLMOTmmQP1Ghb4rP5MmnJarkD11lFKWMOSX7kEDqVJvylEadHLllz fwStjv5sOTFvt8zGGp/Z5K3u1t8CGNRiR6M/b92eaEoCY3aRDkLGXydIZ6qWBKKG ANUHHMroF+kgUw7g29GJ/PznR4QgqoDwRs4bI/yv9350EJPO30OzlYhVlnddwDKV OYZAf/64TQkTIDlVKPS7Yr7Iqfw02AHFx6hirEkH5qJu3CAYoKYfqdz/gHFb7+Ft 2KwJzJBemWbyJNIVGe/YsYl6QRGGavY= -----END CERTIFICATE-----Generated at Fri Sep 25 19:05:03 2026 by rpki-client