$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa File: f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa (raw, json) Hash identifier: OgWtYec9ehywAqp1ziMNwJhWg3iF2/XYi35vDTjg0oc= Subject key identifier: 2D:DE:0B:85:BB:87:C9:12:A0:42:57:E5:56:FB:D8:5A:D5:E9:3F:CB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DBFD89442BB9B1D751480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 64.233.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bf:d8:94:42:bb:9b:1d:75:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6f401a7b-ac2e-41f1-9b4b-3cb918425bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:86:e0:cf:93:ec:2c:6d:ed:5e:75:d4:8c: 33:42:eb:f6:f4:b1:84:98:dd:e7:40:0a:e5:79:2f: 0a:7d:93:af:b2:80:f0:4d:c6:2e:99:15:b1:d4:dd: 7a:c0:27:07:e4:b4:0b:3a:64:4f:04:73:81:74:68: a2:52:5c:4f:d1:97:3b:ba:21:e0:86:68:13:0b:74: d0:68:e8:c9:60:b9:8a:a5:23:00:28:02:d2:e8:34: 38:9c:53:60:8c:db:2e:ba:76:0d:f0:6d:96:06:fd: 39:1f:e0:98:58:61:b9:4f:f3:67:36:32:de:cd:2a: 39:ae:fb:8b:db:7c:4d:5d:0b:54:b6:f5:0c:7d:a1: 5e:f5:a3:03:51:2b:1c:87:29:f0:c9:68:59:94:46: 89:bb:62:80:28:36:b0:82:59:35:f2:32:86:34:78: 42:fd:90:86:31:23:79:cd:ab:1e:7d:eb:d2:af:29: 31:36:3c:1a:ff:64:95:6e:f4:87:eb:47:c3:81:3e: ee:03:b2:65:1e:91:7a:0d:cc:00:e6:67:45:d5:c6: fb:15:63:1f:89:35:dc:9b:7e:2f:33:f7:59:6b:38: 91:21:0d:cd:3f:9c:fa:98:6a:3d:4c:44:e1:97:bf: 9f:26:7f:00:4f:75:70:c6:f0:07:1c:16:d9:05:b5: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DE:0B:85:BB:87:C9:12:A0:42:57:E5:56:FB:D8:5A:D5:E9:3F:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f05ce77d-c718-3a7b-9505-bf594e90f4f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:47:a1:e1:d5:e4:29:7b:b6:8d:d3:04:91:f0:e7:0c:b6:5f: 92:4c:b1:a0:7b:40:39:3b:eb:99:ce:a1:d3:5e:2e:5d:67:d4: 5b:69:8a:3a:fc:08:bd:aa:36:b4:d2:b9:69:ef:72:19:2b:cf: 6b:e1:74:13:a0:2f:a8:cb:3a:0e:45:0d:4e:9a:47:1c:83:ee: b7:3d:63:8a:f0:16:95:1a:8b:fb:c4:ee:75:51:52:3a:bd:60: 05:6f:d0:2a:ad:1f:cb:e4:6a:58:e7:cb:09:8b:7a:2d:f1:e7: 20:7b:3e:d3:5b:da:08:72:46:d3:3a:64:5a:43:01:ba:b7:2d: c1:4b:78:ec:52:42:b8:39:50:0d:8a:52:dc:02:83:91:37:0c: 4b:fe:81:4e:c9:fb:da:56:4d:73:f3:e5:74:eb:58:1a:99:c6: 7b:20:9e:cb:a7:e3:16:22:b7:5a:c9:34:3d:36:a0:30:e8:f7: 90:31:20:1f:f8:2d:c4:47:ea:a5:58:4e:b7:39:6f:aa:82:f5: f1:a3:e8:9f:ae:c7:df:65:c9:d4:76:95:56:7b:5e:94:9c:69: c1:60:d7:56:0c:f2:51:10:32:f1:6e:bf:7d:b9:35:0b:b6:79: 7a:47:52:cd:d1:65:c9:61:53:35:59:6c:4b:ac:ad:c3:fe:49: 6c:4e:7b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb/YlEK7mx11FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NmY0MDFhN2ItYWMyZS00MWYxLTliNGItM2NiOTE4NDI1YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOGG4M+T7Cxt7V511IwzQuv29LGEmN3nQArl eS8KfZOvsoDwTcYumRWx1N16wCcH5LQLOmRPBHOBdGiiUlxP0Zc7uiHghmgTC3TQ aOjJYLmKpSMAKALS6DQ4nFNgjNsuunYN8G2WBv05H+CYWGG5T/NnNjLezSo5rvuL 23xNXQtUtvUMfaFe9aMDUSschynwyWhZlEaJu2KAKDawglk18jKGNHhC/ZCGMSN5 zasefevSrykxNjwa/2SVbvSH60fDgT7uA7JlHpF6DcwA5mdF1cb7FWMfiTXcm34v M/dZaziRIQ3NP5z6mGo9TEThl7+fJn8AT3VwxvAHHBbZBbVFXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3eC4W7h8kSoEJX5Vb72FrV6T/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjA1Y2U3N2QtYzcxOC0z YTdiLTk1MDUtYmY1OTRlOTBmNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRHoeHV5Cl7to3TBJHw5wy2X5JMsaB7QDk765nOodNeLl1n1Ftpijr8 CL2qNrTSuWnvchkrz2vhdBOgL6jLOg5FDU6aRxyD7rc9Y4rwFpUai/vE7nVRUjq9 YAVv0CqtH8vkaljnywmLei3x5yB7PtNb2ghyRtM6ZFpDAbq3LcFLeOxSQrg5UA2K UtwCg5E3DEv+gU7J+9pWTXPz5XTrWBqZxnsgnsun4xYit1rJND02oDDo95AxIB/4 LcRH6qVYTrc5b6qC9fGj6J+ux99lydR2lVZ7XpScacFg11YM8lEQMvFuv325NQu2 eXpHUs3RZclhUzVZbEusrcP+SWxOe+M= -----END CERTIFICATE-----Generated at Sat Sep 26 07:04:30 2026 by rpki-client