$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa File: ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa (raw, json) Hash identifier: 0MWrQ13sNqYBbQFJIs5s2PiBGDvufrfA43MtwNQPx8A= Subject key identifier: DE:80:A8:98:45:57:DB:15:9C:C6:7F:06:D7:EA:EB:C5:0B:D8:1E:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D1C558523628BD9367700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 216.58.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:1c:55:85:23:62:8b:d9:36:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d4549a6f-775d-4c12-9fa7-e14685f862c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:8c:a3:64:3a:7d:66:c3:8e:08:56:11:b0: 9e:bd:ef:40:dc:80:11:ff:d5:4b:cb:9a:0f:54:28: 98:fe:79:5c:1c:1c:3c:5e:e3:5e:4a:23:f4:24:fa: ca:7e:5e:d7:89:4b:01:9a:22:03:68:c9:25:28:2f: ff:ed:d5:ac:57:9a:a7:98:ab:62:fb:14:ce:14:54: d1:3f:54:e0:78:9c:6e:63:45:58:7a:23:b8:ba:92: 9a:41:53:4a:4c:79:11:d3:18:77:78:ed:74:d9:b2: d1:da:ca:62:aa:f3:30:62:ad:aa:7f:56:70:16:62: 99:e2:3f:7d:22:f1:8b:14:99:e6:76:9a:bf:1b:bf: c6:5a:51:25:6b:d1:08:b9:05:95:08:18:94:b0:1a: 4c:4c:71:56:25:bf:4d:70:9a:4f:fa:3d:56:7c:4e: 0e:5c:20:e8:26:29:09:66:d9:cc:ef:95:da:f7:bd: f8:15:fa:78:d8:aa:bc:76:7e:d8:30:7b:38:2c:ea: e5:96:d3:ee:16:85:a3:e9:82:ed:91:ff:04:27:a4: f0:d8:26:f5:ef:e7:9b:87:62:9a:1c:2c:95:cd:da: b4:dc:51:c1:df:b7:07:79:5b:59:0f:e5:3a:63:25: 90:26:21:49:31:5c:f0:61:2e:a8:8b:0c:10:88:75: 26:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:80:A8:98:45:57:DB:15:9C:C6:7F:06:D7:EA:EB:C5:0B:D8:1E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1f:70:e9:04:6e:cd:c0:1b:c5:b3:88:68:84:3b:9f:33:53: ef:0d:db:b3:06:49:76:eb:31:06:7e:b7:56:5f:04:58:67:d4: 72:2e:89:8d:38:59:09:d5:26:74:70:b8:4e:ee:56:99:5d:77: b7:7d:c7:63:c5:5f:6b:a3:6c:01:a5:da:4e:16:c4:c4:ba:e5: 03:7c:72:be:5d:78:b3:c8:f0:f2:a0:db:c2:8a:2a:75:24:d0: f9:10:09:ac:5c:de:ed:20:b4:3e:03:3f:b7:00:54:25:b4:2e: 39:f3:0b:67:61:54:46:40:50:ec:0d:0a:4b:74:60:aa:66:fe: 6d:5a:e8:1b:44:65:a1:3f:e6:55:ce:d6:ad:c6:26:ad:14:bf: 14:79:18:6b:ba:01:2a:3b:db:94:40:e3:3d:1b:a2:99:a2:7e: 5a:c9:0b:cc:b4:2b:92:7f:09:7f:16:43:23:8f:62:64:c0:c5: 85:60:80:85:50:ae:ea:aa:28:b4:0b:48:c1:35:75:36:41:3b: 6d:61:d1:29:36:6e:1e:cb:47:f8:6f:46:bb:5b:fc:55:97:29: 3d:7a:dc:bc:62:cb:89:b3:02:7a:ee:db:2c:b5:e5:e2:58:fc: 4f:f1:60:9a:52:26:f0:91:16:2d:20:c0:41:67:fa:8d:ff:bf: b2:b1:1c:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfRxVhSNii9k2dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQ1NDlhNmYtNzc1ZC00YzEyLTlmYTctZTE0Njg1Zjg2MmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDiMo2Q6fWbDjghWEbCeve9A3IAR/9VLy5oP VCiY/nlcHBw8XuNeSiP0JPrKfl7XiUsBmiIDaMklKC//7dWsV5qnmKti+xTOFFTR P1TgeJxuY0VYeiO4upKaQVNKTHkR0xh3eO102bLR2spiqvMwYq2qf1ZwFmKZ4j99 IvGLFJnmdpq/G7/GWlEla9EIuQWVCBiUsBpMTHFWJb9NcJpP+j1WfE4OXCDoJikJ ZtnM75Xa9734Ffp42Kq8dn7YMHs4LOrlltPuFoWj6YLtkf8EJ6Tw2Cb17+ebh2Ka HCyVzdq03FHB37cHeVtZD+U6YyWQJiFJMVzwYS6oiwwQiHUmoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6AqJhFV9sVnMZ/Btfq68UL2B5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmY5YmJlOGMtNDdlZi0z MzI2LWJhNDktY2Y2ODk5ODE3MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEfcOkEbs3AG8WziGiEO58zU+8N27MGSXbrMQZ+t1ZfBFhn1HIuiY04 WQnVJnRwuE7uVpldd7d9x2PFX2ujbAGl2k4WxMS65QN8cr5deLPI8PKg28KKKnUk 0PkQCaxc3u0gtD4DP7cAVCW0LjnzC2dhVEZAUOwNCkt0YKpm/m1a6BtEZaE/5lXO 1q3GJq0UvxR5GGu6ASo725RA4z0bopmiflrJC8y0K5J/CX8WQyOPYmTAxYVggIVQ ruqqKLQLSME1dTZBO21h0Sk2bh7LR/hvRrtb/FWXKT163Lxiy4mzAnru2yy15eJY /E/xYJpSJvCRFi0gwEFn+o3/v7KxHIw= -----END CERTIFICATE-----Generated at Fri Sep 25 18:30:34 2026 by rpki-client