$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa File: f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa (raw, json) Hash identifier: MG0xPQmhrtaPL26a16Wmsp8+TbhrpqL+EjBM6IlySs0= Subject key identifier: 12:FD:96:84:D9:36:61:17:6F:DF:A7:D0:FF:0A:38:C8:FA:D3:2F:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49852DA450F78E4D55756780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.58.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:2d:a4:50:f7:8e:4d:55:75:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5e3d4529-a1e0-482a-a377-499f1647decc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:8a:e6:97:98:71:cb:4f:03:f1:ee:93:ce: 77:c4:91:b4:c5:50:53:93:da:65:66:a8:58:a5:78: b6:45:8a:16:ce:ff:6b:89:09:b5:ef:2d:2b:7e:ee: 39:33:0a:45:76:a6:60:bd:0b:79:aa:da:df:3a:3c: bb:a8:5e:d5:fd:8a:d6:ca:eb:43:ce:e7:94:28:30: 09:56:f9:0b:17:32:cd:39:af:30:1e:25:9d:32:d9: 14:13:cc:f1:4b:cc:95:36:46:90:ce:4d:b3:9e:52: 6b:4a:62:f2:d3:e6:95:f9:0f:70:14:c3:7b:1a:de: 87:47:53:14:a0:dc:4f:ff:f5:3d:24:a8:3e:16:10: 28:2f:40:3b:01:1b:da:0d:f3:ad:68:99:79:dc:42: 5c:b2:2a:bf:12:ad:34:e4:9d:a5:92:31:8f:d1:c4: 9d:a7:1d:0b:e0:dc:2c:d1:a9:0f:ac:5f:d7:e0:e7: f9:1e:25:99:27:70:b7:06:f4:5a:c7:3d:ca:11:ae: 28:68:c8:7b:6b:ad:30:81:c5:ab:27:93:5e:0e:de: c9:78:ff:78:21:d4:0d:fe:1e:6d:5e:18:82:f7:a6: f1:b8:2e:7b:e9:e8:54:da:c5:83:19:c9:ce:3c:15: a5:26:03:f9:d7:96:9f:5c:15:14:e2:ac:b3:df:86: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FD:96:84:D9:36:61:17:6F:DF:A7:D0:FF:0A:38:C8:FA:D3:2F:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ce:96:22:b6:6e:49:65:0b:a8:da:36:ea:8a:87:64:7e:a5: b6:d9:ae:8b:d9:bd:65:67:1d:51:a3:49:36:3f:90:19:97:f5: 11:4f:cc:1d:d7:d1:ae:6a:26:61:f0:4d:0b:28:73:72:08:2c: 0a:fb:cd:7e:fd:c7:ba:40:81:33:46:17:69:93:5a:0f:fa:f3: 58:55:4c:c6:75:62:e9:1c:50:52:63:3b:4c:b3:03:0e:38:8a: 0f:2b:93:18:ca:32:45:c2:9a:79:eb:eb:43:84:56:51:f7:ac: fd:09:a2:1a:cd:c0:24:06:97:b5:a8:52:e7:a9:19:72:c1:d7: 97:69:f8:c6:84:c2:20:25:f1:ff:f4:33:9f:ef:d6:22:39:c9: 6e:26:95:f7:00:96:c4:14:8d:42:85:e8:cb:c0:e1:e9:e9:1b: 95:21:5f:16:0e:b9:ab:2d:70:40:3e:bd:91:98:41:62:7b:9e: 6c:41:1e:dd:fe:a3:c4:d4:d2:f3:e8:9b:79:7b:6e:e7:4a:b0: c8:2e:f3:65:47:64:3a:74:68:b3:1d:20:92:6f:fd:c3:00:49: bb:20:4a:5d:70:1c:79:13:48:ff:8b:51:0f:06:01:ba:9e:62: 2d:d0:17:51:61:e7:83:fa:d3:09:ea:1c:eb:1a:ee:67:da:71: 8a:7d:12:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhS2kUPeOTVV1Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWUzZDQ1MjktYTFlMC00ODJhLWEzNzctNDk5ZjE2NDdkZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukqK5peYcctPA/Huk853xJG0xVBTk9plZqhY pXi2RYoWzv9riQm17y0rfu45MwpFdqZgvQt5qtrfOjy7qF7V/YrWyutDzueUKDAJ VvkLFzLNOa8wHiWdMtkUE8zxS8yVNkaQzk2znlJrSmLy0+aV+Q9wFMN7Gt6HR1MU oNxP//U9JKg+FhAoL0A7ARvaDfOtaJl53EJcsiq/Eq005J2lkjGP0cSdpx0L4Nws 0akPrF/X4Of5HiWZJ3C3BvRaxz3KEa4oaMh7a60wgcWrJ5NeDt7JeP94IdQN/h5t XhiC96bxuC576ehU2sWDGcnOPBWlJgP515afXBUU4qyz34YRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL9loTZNmEXb9+n0P8KOMj60y8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjU3ZmU0OGQtYTJkMC0z M2E5LThlNDgtYzJlOTJkMzg2NWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrOliK2bkllC6jaNuqKh2R+pbbZrovZvWVnHVGjSTY/kBmX9RFPzB3X 0a5qJmHwTQsoc3IILAr7zX79x7pAgTNGF2mTWg/681hVTMZ1YukcUFJjO0yzAw44 ig8rkxjKMkXCmnnr60OEVlH3rP0JohrNwCQGl7WoUuepGXLB15dp+MaEwiAl8f/0 M5/v1iI5yW4mlfcAlsQUjUKF6MvA4enpG5UhXxYOuastcEA+vZGYQWJ7nmxBHt3+ o8TU0vPom3l7budKsMgu82VHZDp0aLMdIJJv/cMASbsgSl1wHHkTSP+LUQ8GAbqe Yi3QF1Fh54P60wnqHOsa7mfacYp9EsM= -----END CERTIFICATE-----Generated at Fri Sep 25 16:44:28 2026 by rpki-client