$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce28e6f-b3a0-32d0-9520-cf046430ba67.roa File: 4ce28e6f-b3a0-32d0-9520-cf046430ba67.roa (raw, json) Hash identifier: UIsnfPXx9Bn8vGn0tf8YmcolTJ5V18Y0nDhCSlhzT6E= Subject key identifier: 83:5F:C6:94:02:B3:6A:AA:27:63:D6:27:10:42:25:1F:B0:01:C5:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79E9A59E59EBD236DD9BC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce28e6f-b3a0-32d0-9520-cf046430ba67.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 173.194.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:9a:59:e5:9e:bd:23:6d:d9:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=aff297e8-23ac-4daf-8a5e-de9fb435bbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:7c:a8:ca:32:ad:e2:52:7c:73:5d:ff:3e: 14:03:f4:21:c5:2d:89:b8:fc:59:5f:c6:d6:67:86: 6c:a9:9d:55:50:db:86:e8:fa:2b:43:fb:4d:ed:72: fd:f7:2f:53:71:bf:79:64:81:eb:63:6e:3d:ae:3e: ef:82:50:5c:d3:ed:a8:b0:31:ec:44:65:a6:9b:9a: 06:f1:c0:76:c1:6a:2c:35:11:15:b4:f2:d1:a5:b0: eb:fa:2c:39:d0:12:5f:c8:37:41:d7:5c:63:13:94: 3a:76:bb:4b:15:70:70:04:6c:bc:73:aa:71:e5:1c: ec:fa:21:71:52:bb:c7:c4:c6:7a:44:9f:40:22:dc: 27:95:be:ae:d6:a9:1c:b5:c7:04:b4:86:16:37:dc: fc:80:27:f0:6d:d9:24:79:88:2d:d6:98:d3:87:dc: 29:b8:e3:d2:8c:5a:fb:c4:d2:37:ba:37:d0:90:21: 99:54:19:6d:7e:44:cc:7e:81:4b:d2:f9:c8:72:20: 6a:3b:13:2c:74:06:fa:51:26:8c:26:e6:c4:65:26: 6e:d6:3d:2c:8f:f3:92:e1:41:bd:09:53:95:49:e8: af:f7:60:32:8c:d7:0a:1e:fc:58:2d:6c:59:93:0a: f9:5b:80:c8:fe:ab:1e:cc:9f:66:5c:d1:46:23:e0: 5e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5F:C6:94:02:B3:6A:AA:27:63:D6:27:10:42:25:1F:B0:01:C5:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce28e6f-b3a0-32d0-9520-cf046430ba67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:60:3c:d1:ef:3b:7e:8f:b6:d8:11:01:01:f2:eb:44:b6:02: 56:f0:3e:17:e3:c7:b2:ba:b9:c0:d9:94:c8:bd:91:6b:7d:3a: 1a:2a:28:d7:a6:e4:f8:67:9b:c0:a9:2c:1d:62:81:cd:fc:ae: 01:75:26:ac:ff:e3:22:d6:d0:09:86:da:4c:6a:af:52:91:04: 7a:48:c9:9b:6a:ec:69:fb:03:64:cb:9d:e8:b5:77:08:a1:c5: 44:bb:3a:6b:6a:59:78:21:7f:57:14:98:1e:76:5b:77:9e:14: e9:28:00:f4:cb:d8:1f:39:6a:ed:13:ba:5a:cc:1d:db:72:83: 72:fc:0f:a1:0a:f9:fc:35:00:6f:dc:04:ef:28:a4:85:51:2d: 3d:95:4b:31:87:b0:fc:6b:ea:5b:6a:7d:53:61:1d:c2:86:ab: 36:a5:73:6c:af:3d:71:07:7d:31:ce:72:39:89:9b:e8:cc:ab: 7d:45:77:2b:1f:4e:48:82:ca:da:a4:8f:32:57:af:71:b1:d0: d9:37:73:16:5e:34:94:49:b5:89:ae:26:5b:1a:dd:7e:a2:d0: b4:6b:03:96:6f:66:2c:0e:15:a2:b1:71:fe:4e:8f:8c:76:df: eb:23:62:2c:f6:7c:34:4f:22:d9:d9:7b:3b:57:76:68:9e:74: e7:65:6b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnppZ5Z69I23ZvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWZmMjk3ZTgtMjNhYy00ZGFmLThhNWUtZGU5ZmI0MzViYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPp8qMoyreJSfHNd/z4UA/QhxS2JuPxZX8bW Z4ZsqZ1VUNuG6PorQ/tN7XL99y9Tcb95ZIHrY249rj7vglBc0+2osDHsRGWmm5oG 8cB2wWosNREVtPLRpbDr+iw50BJfyDdB11xjE5Q6drtLFXBwBGy8c6px5Rzs+iFx UrvHxMZ6RJ9AItwnlb6u1qkctccEtIYWN9z8gCfwbdkkeYgt1pjTh9wpuOPSjFr7 xNI3ujfQkCGZVBltfkTMfoFL0vnIciBqOxMsdAb6USaMJubEZSZu1j0sj/OS4UG9 CVOVSeiv92AyjNcKHvxYLWxZkwr5W4DI/qsezJ9mXNFGI+BeSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINfxpQCs2qqJ2PWJxBCJR+wAcW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGNlMjhlNmYtYjNhMC0z MmQwLTk1MjAtY2YwNDY0MzBiYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcI1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5gPNHvO36PttgRAQHy60S2AlbwPhfjx7K6ucDZlMi9kWt9OhoqKNem 5Phnm8CpLB1igc38rgF1Jqz/4yLW0AmG2kxqr1KRBHpIyZtq7Gn7A2TLnei1dwih xUS7OmtqWXghf1cUmB52W3eeFOkoAPTL2B85au0TulrMHdtyg3L8D6EK+fw1AG/c BO8opIVRLT2VSzGHsPxr6ltqfVNhHcKGqzalc2yvPXEHfTHOcjmJm+jMq31Fdysf TkiCytqkjzJXr3Gx0Nk3cxZeNJRJtYmuJlsa3X6i0LRrA5ZvZiwOFaKxcf5Oj4x2 3+sjYiz2fDRPItnZeztXdmiedOdla9o= -----END CERTIFICATE-----Generated at Wed Jul 29 06:05:28 2026 by rpki-client