$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa File: f9dff4f6-56ef-3886-ada4-55552d4c1936.roa (raw, json) Hash identifier: s7K7I/LirC17af7Ke0NGUl8m8eVgER4BoWBHUuJNA9E= Subject key identifier: A1:D8:5F:72:BD:BC:1F:C8:37:8D:CB:E6:78:89:DE:A4:E6:17:A2:8B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629309691F8039F7593EDD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 173.194.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:09:69:1f:80:39:f7:59:3e:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=473b72a9-40d6-48db-9f4d-2aa1b27233b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:e5:db:d9:e3:a0:9e:26:3b:ff:9c:0f:2e: 61:0c:94:c0:28:c0:30:4f:16:a4:8d:c1:f0:9a:90: 0d:d2:aa:0a:da:79:6c:23:4d:f5:91:26:25:bc:31: 74:c2:83:3e:02:70:ba:ba:c2:dc:d2:b5:6a:d0:d3: de:22:c7:23:5b:54:19:4f:5b:9e:b3:81:47:81:0c: b2:07:c8:8c:79:78:2a:37:9c:02:79:87:9e:d2:e1: 1e:9c:fd:b7:81:50:94:93:cd:5f:be:4b:9f:66:83: bf:78:47:26:3b:77:fe:0f:2d:1b:3d:10:50:59:ae: b5:49:37:1a:a2:9a:b6:31:6d:42:a8:6e:48:ef:28: 1b:a3:33:f8:8d:e2:94:0d:f6:f4:43:b9:c3:5e:27: bc:68:34:e5:df:9b:82:39:cc:fd:b3:4e:d0:30:81: 5b:c9:15:3f:2d:83:d1:39:75:f0:a1:ba:c1:b9:30: 40:7a:fd:71:15:b3:66:9e:51:18:e3:74:28:d2:1c: ab:e3:59:fc:95:30:91:ce:70:b1:bb:9f:01:ef:68: 63:89:68:6a:19:31:7a:7a:ce:c6:11:10:f7:c8:76: 4b:c6:c0:d5:30:16:80:80:86:4a:35:37:ce:d6:22: 7e:cf:96:9a:58:a8:1c:95:80:51:d0:0a:dc:e0:82: c9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D8:5F:72:BD:BC:1F:C8:37:8D:CB:E6:78:89:DE:A4:E6:17:A2:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:49:9c:d3:af:b3:6e:a8:1b:c9:85:0f:f9:2f:00:b5:09:8d: 7a:e7:f3:63:48:93:d4:6c:18:0f:45:12:13:5b:1a:fa:ce:72: a0:3d:74:16:2b:81:ec:fe:df:03:34:d8:98:53:39:b4:0d:f1: 36:aa:d5:f9:ce:03:7a:48:f6:b1:a1:0b:fd:f0:9e:e9:50:2f: 7f:29:99:12:24:98:56:1f:f3:ec:c1:e3:f3:5b:8f:5c:c6:70: e7:cc:9f:7a:9e:f9:6f:35:df:22:56:ef:3d:56:b0:4e:30:6f: ad:40:13:f6:e7:46:93:9a:f8:f5:21:17:99:f7:cb:f1:aa:ce: c9:97:8a:48:b3:70:71:38:17:4c:70:75:64:51:50:d4:e5:b7: e6:ea:57:03:ca:95:a8:24:70:54:8f:fa:f6:44:79:16:8d:15: 46:12:6c:2c:74:a4:df:43:f8:f4:6d:d0:8a:fd:83:5f:44:32: 7e:f8:22:95:1f:70:f2:59:f1:96:6e:48:a3:d0:f0:2f:2c:41: 76:ea:01:0b:ed:1d:80:c8:0f:00:a2:e0:e3:5b:5c:c2:7f:2b: dc:3f:57:3f:f3:1f:de:9e:37:d3:6e:1c:52:6a:e2:0f:c6:72: 2b:64:20:a4:9c:09:db:9d:4e:60:ff:54:59:8b:98:c2:c1:eb: 54:a7:39:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwlpH4A591k+3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NDczYjcyYTktNDBkNi00OGRiLTlmNGQtMmFhMWIyNzIzM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOnl29njoJ4mO/+cDy5hDJTAKMAwTxakjcHw mpAN0qoK2nlsI031kSYlvDF0woM+AnC6usLc0rVq0NPeIscjW1QZT1ues4FHgQyy B8iMeXgqN5wCeYee0uEenP23gVCUk81fvkufZoO/eEcmO3f+Dy0bPRBQWa61STca opq2MW1CqG5I7ygbozP4jeKUDfb0Q7nDXie8aDTl35uCOcz9s07QMIFbyRU/LYPR OXXwobrBuTBAev1xFbNmnlEY43Qo0hyr41n8lTCRznCxu58B72hjiWhqGTF6es7G ERD3yHZLxsDVMBaAgIZKNTfO1iJ+z5aaWKgclYBR0Arc4ILJIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHYX3K9vB/IN43L5niJ3qTmF6KLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjlkZmY0ZjYtNTZlZi0z ODg2LWFkYTQtNTU1NTJkNGMxOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRJnNOvs26oG8mFD/kvALUJjXrn82NIk9RsGA9FEhNbGvrOcqA9dBYr gez+3wM02JhTObQN8Taq1fnOA3pI9rGhC/3wnulQL38pmRIkmFYf8+zB4/Nbj1zG cOfMn3qe+W813yJW7z1WsE4wb61AE/bnRpOa+PUhF5n3y/GqzsmXikizcHE4F0xw dWRRUNTlt+bqVwPKlagkcFSP+vZEeRaNFUYSbCx0pN9D+PRt0Ir9g19EMn74IpUf cPJZ8ZZuSKPQ8C8sQXbqAQvtHYDIDwCi4ONbXMJ/K9w/Vz/zH96eN9NuHFJq4g/G citkIKScCdudTmD/VFmLmMLB61SnOQg= -----END CERTIFICATE-----Generated at Tue Nov 10 21:09:42 2026 by rpki-client