$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29bbe283-ccaf-3579-8699-2c6a7df54ab5.roa File: 29bbe283-ccaf-3579-8699-2c6a7df54ab5.roa (raw, json) Hash identifier: F/V0bDlZ1hvC4NO2ISUVXHrxkOF07yNaEOKBjLZca1w= Subject key identifier: F6:5B:D5:0A:DA:4C:A7:72:B2:8A:53:8C:54:1A:93:8E:6D:14:4C:B3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4112A6B3955E97346C440780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29bbe283-ccaf-3579-8699-2c6a7df54ab5.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 173.194.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a6:b3:95:5e:97:34:6c:44:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=ae67fbca-72cd-4371-8bb6-fb149865d14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:26:dc:5e:f3:7c:53:b6:8b:86:d1:ed:b7:94: 2e:8a:e4:21:83:27:63:39:f2:3f:14:f6:a2:41:f7: 70:3c:8e:8f:c3:88:e3:f0:01:92:05:1b:13:d7:91: 2f:8c:8c:09:27:0e:19:86:3f:f8:5f:cd:d4:1f:21: 8d:79:30:b2:d3:c6:f7:a2:f6:ff:a4:4c:d2:ab:6e: 2e:79:f0:c6:d1:ce:08:22:b2:9e:de:7f:1c:f0:12: 28:6d:cc:15:f8:7a:52:bd:dd:14:6e:a9:1e:23:13: 0b:d0:5a:0e:b2:fd:bf:e8:a2:63:3c:dd:f7:d9:1f: c9:08:e2:15:48:aa:51:40:c6:4e:1d:92:2d:32:99: 41:5a:9b:49:75:a4:cc:c7:a3:35:32:de:83:e7:d8: e9:4a:ba:45:c7:82:5a:14:81:da:e5:8f:9d:80:32: 29:35:e5:5f:63:55:65:22:3f:92:02:80:c9:8c:15: 94:52:56:07:7c:bb:20:2f:39:49:35:97:af:a7:34: b6:93:a5:6f:e4:af:e1:ff:24:14:d4:55:7a:e1:03: 68:a1:cb:28:71:a2:d5:ba:1d:8e:dc:a0:9b:c2:22: 13:60:ec:99:bf:32:3d:95:3f:a1:d2:1d:a7:c2:44: 72:90:f6:62:99:7e:9d:fb:fc:42:c8:03:0b:fb:49: 41:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5B:D5:0A:DA:4C:A7:72:B2:8A:53:8C:54:1A:93:8E:6D:14:4C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29bbe283-ccaf-3579-8699-2c6a7df54ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b6:7b:80:de:d7:f3:a5:a5:0b:ae:37:18:4b:3e:93:b1:36: a9:0f:93:b4:09:38:36:47:61:38:7c:ab:94:a3:d6:b0:da:c4: 50:a3:0e:ef:e5:5e:b1:7b:08:59:de:9a:3c:09:cb:c3:ed:7a: d8:81:f8:ac:00:e4:58:fb:53:78:22:92:0d:06:f2:d1:ab:09: 2a:90:2e:ad:f2:22:7b:3e:c7:81:06:46:cf:e2:dd:1e:82:70: 2d:ee:e7:23:da:2c:2a:63:88:c1:6d:bb:14:97:89:c1:29:47: f2:44:92:1a:c9:56:bc:0f:45:16:2f:26:b2:a6:4a:ed:de:f1: df:34:65:38:23:22:9f:8a:58:aa:95:f5:4a:37:37:01:d2:43: 5d:3c:55:a6:67:fb:40:d4:71:87:5c:77:7e:3a:a2:f7:c8:1d: d4:36:56:76:00:de:49:fe:22:6e:00:7f:cd:c9:1f:ac:81:42: 23:83:93:e3:0e:30:68:70:87:1c:12:d9:c5:04:f2:c7:f8:b9: 80:46:7c:05:5d:7a:ab:a1:66:97:08:15:2b:e7:2d:ed:e0:55: 70:3f:ab:87:71:03:23:43:5f:4b:b4:7f:da:32:40:5b:75:e0: 04:34:5f:5e:4b:a1:cb:9f:29:37:12:17:9e:12:15:e0:6c:79: bf:a6:34:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqazlV6XNGxEB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YWU2N2ZiY2EtNzJjZC00MzcxLThiYjYtZmIxNDk4NjVkMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgybcXvN8U7aLhtHtt5QuiuQhgydjOfI/FPai QfdwPI6Pw4jj8AGSBRsT15EvjIwJJw4Zhj/4X83UHyGNeTCy08b3ovb/pEzSq24u efDG0c4IIrKe3n8c8BIobcwV+HpSvd0UbqkeIxML0FoOsv2/6KJjPN332R/JCOIV SKpRQMZOHZItMplBWptJdaTMx6M1Mt6D59jpSrpFx4JaFIHa5Y+dgDIpNeVfY1Vl Ij+SAoDJjBWUUlYHfLsgLzlJNZevpzS2k6Vv5K/h/yQU1FV64QNoocsocaLVuh2O 3KCbwiITYOyZvzI9lT+h0h2nwkRykPZimX6d+/xCyAML+0lBaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZb1QraTKdysopTjFQak45tFEyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjliYmUyODMtY2NhZi0z NTc5LTg2OTktMmM2YTdkZjU0YWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH22e4De1/OlpQuuNxhLPpOxNqkPk7QJODZHYTh8q5Sj1rDaxFCjDu/l XrF7CFnemjwJy8PtetiB+KwA5Fj7U3gikg0G8tGrCSqQLq3yIns+x4EGRs/i3R6C cC3u5yPaLCpjiMFtuxSXicEpR/JEkhrJVrwPRRYvJrKmSu3e8d80ZTgjIp+KWKqV 9Uo3NwHSQ108VaZn+0DUcYdcd346ovfIHdQ2VnYA3kn+Im4Af83JH6yBQiODk+MO MGhwhxwS2cUE8sf4uYBGfAVdequhZpcIFSvnLe3gVXA/q4dxAyNDX0u0f9oyQFt1 4AQ0X15LocufKTcSF54SFeBseb+mNE0= -----END CERTIFICATE-----Generated at Tue Sep 22 20:56:07 2026 by rpki-client