$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa File: 069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa (raw, json) Hash identifier: MTD1r5ro5FY8T7xCpBd5JB0dyrnsHOgQDbwH3JO+ikk= Subject key identifier: 1A:40:2D:48:CB:99:5E:67:D9:78:69:AD:07:1B:FD:ED:24:5B:3F:E0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79E85C053D28ED0E839FB40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 209.85.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:85:c0:53:d2:8e:d0:e8:39:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c9fb794f-2a03-498c-b018-467d8666c19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:a6:96:b5:08:72:c6:ca:d3:5a:77:6e:99: a9:69:20:7f:6b:c3:2b:1e:af:63:f7:fd:6c:78:c9: 2d:e8:c9:a7:90:a8:d5:29:23:95:1c:60:d8:7f:33: 52:d8:1d:ba:9e:7b:e6:25:4c:ec:c5:d9:87:80:54: 98:98:b6:f7:d9:35:1a:e0:a0:1a:b1:40:74:b5:46: 08:6a:42:bb:5a:32:64:a0:23:5b:a2:2b:2e:33:6b: 48:3c:cc:23:13:dc:3f:d0:47:a5:00:eb:a1:89:58: ac:00:8d:fa:56:03:b5:cf:1b:75:78:03:a3:27:7c: 46:c1:18:b7:01:e7:7a:3a:d7:c7:11:d7:2f:7a:c0: 66:4a:08:47:07:0d:9a:88:cd:18:01:9a:83:c6:1d: a6:ca:3b:fd:91:c1:00:04:f3:67:18:28:ac:c0:9f: f0:29:6a:7b:db:5b:a7:6e:55:a5:c9:76:72:79:bb: 02:f9:7a:c8:2e:b0:f1:70:0b:d1:4b:eb:b6:77:55: 2f:39:ac:8d:99:de:00:86:2e:bf:40:a0:a9:7e:78: 36:31:62:a1:7b:4d:7f:e4:09:b3:7e:d9:74:a6:41: cc:6e:24:d3:dc:de:9d:16:10:5a:14:39:ee:f4:0a: d2:b0:a1:6e:53:53:e2:d5:21:c2:89:38:b9:a8:f7: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:40:2D:48:CB:99:5E:67:D9:78:69:AD:07:1B:FD:ED:24:5B:3F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2d:25:d9:2e:60:a4:22:01:97:9b:ce:e4:ac:46:fb:de:c2: 15:7a:f1:68:ce:dd:53:b7:2c:09:6c:35:b0:3e:7d:22:3f:06: bd:c5:0b:fb:79:2a:88:e7:32:e9:35:dc:59:8e:2d:de:e5:44: 24:13:fd:ae:f0:54:01:6c:d5:9f:4b:88:8d:bb:3d:35:f4:fe: cf:b5:ab:1b:0e:08:29:06:07:24:cd:e7:95:1b:5a:ba:8e:36: ed:42:78:72:53:ab:26:05:6f:de:61:7f:fe:15:e9:a4:b8:3b: d2:a8:5d:9f:4b:0c:57:0b:27:e5:37:f8:b9:f6:d1:39:99:09: bd:56:46:64:dc:4c:f4:05:33:3c:3f:a4:80:fa:39:1b:02:7c: 4e:53:2c:3e:3d:ae:ae:68:26:88:6c:b7:9b:6e:a3:85:0e:d0: 6d:9c:85:2a:3d:64:01:84:92:74:65:eb:ae:48:58:86:69:cb: f1:a0:b6:02:87:c4:35:ac:41:14:28:d3:7a:a6:70:7b:00:b4: 44:dc:bc:7d:3b:cb:f3:fd:96:32:b8:48:b1:d0:b9:fe:3a:32: d1:43:d8:f7:1c:f9:c3:b4:50:76:44:72:ba:00:84:00:03:27: 52:78:df:1d:01:bb:b2:da:e6:48:74:3e:11:d1:87:64:44:ba: cd:5e:40:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnoXAU9KO0Og5+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzlmYjc5NGYtMmEwMy00OThjLWIwMTgtNDY3ZDg2NjZjMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5+mlrUIcsbK01p3bpmpaSB/a8MrHq9j9/1s eMkt6MmnkKjVKSOVHGDYfzNS2B26nnvmJUzsxdmHgFSYmLb32TUa4KAasUB0tUYI akK7WjJkoCNboisuM2tIPMwjE9w/0EelAOuhiVisAI36VgO1zxt1eAOjJ3xGwRi3 Aed6OtfHEdcvesBmSghHBw2aiM0YAZqDxh2myjv9kcEABPNnGCiswJ/wKWp721un blWlyXZyebsC+XrILrDxcAvRS+u2d1UvOayNmd4Ahi6/QKCpfng2MWKhe01/5Amz ftl0pkHMbiTT3N6dFhBaFDnu9ArSsKFuU1Pi1SHCiTi5qPe0VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpALUjLmV5n2XhprQcb/e0kWz/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDY5YTZmYWEtYTNjYy0z MGM3LTllYzItZmZkYTc4ZTE4MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAktJdkuYKQiAZebzuSsRvvewhV68WjO3VO3LAlsNbA+fSI/Br3FC/t5 KojnMuk13FmOLd7lRCQT/a7wVAFs1Z9LiI27PTX0/s+1qxsOCCkGByTN55UbWrqO Nu1CeHJTqyYFb95hf/4V6aS4O9KoXZ9LDFcLJ+U3+Ln20TmZCb1WRmTcTPQFMzw/ pID6ORsCfE5TLD49rq5oJohst5tuo4UO0G2chSo9ZAGEknRl665IWIZpy/GgtgKH xDWsQRQo03qmcHsAtETcvH07y/P9ljK4SLHQuf46MtFD2Pcc+cO0UHZEcroAhAAD J1J43x0Bu7La5kh0PhHRh2REus1eQCc= -----END CERTIFICATE-----Generated at Wed Jul 29 06:05:41 2026 by rpki-client