$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa File: a430c233-1598-3766-bd27-1c26e3178a02.roa (raw, json) Hash identifier: dX+Yvbu1+VuN0uEiyyFZ7D29U2jYpxHv6h+JgtMBAMc= Subject key identifier: 39:38:CC:3C:EF:71:8A:2E:D5:F1:39:4D:91:6D:D1:A7:08:0A:23:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79ED854A41AF11EDD8A6060 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 173.194.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:d8:54:a4:1a:f1:1e:dd:8a:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4550cf09-f73d-4f8e-9086-4f298f3c0e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a1:1d:7a:d2:7c:05:eb:95:c1:d6:00:a7:34: 82:91:d2:a3:b2:7c:94:b2:74:3b:40:7a:e6:ec:d6: 7d:52:61:e3:4f:99:f2:bc:8b:f4:1b:07:c5:89:83: 0d:ab:20:97:be:76:20:b7:fc:d5:74:4f:0f:29:c9: 8e:e9:6d:3e:df:c7:43:e2:bb:c5:99:94:f6:7a:d3: bc:a3:f7:46:24:33:35:b2:06:56:7a:2e:68:7b:34: 00:25:c3:cb:7b:95:7b:59:48:61:53:47:01:33:8f: fe:46:60:5e:ab:66:b0:33:1b:84:eb:41:3e:43:fb: 0a:45:ea:a5:c8:f3:a5:21:f2:e1:b2:16:2d:eb:a8: ca:9e:01:cd:72:e0:f7:6c:1b:38:58:40:0e:43:67: 52:63:a9:03:b6:76:9e:61:a1:94:90:fc:83:ec:ab: 34:38:35:92:cf:5f:20:f0:8a:2f:25:95:1f:9f:c6: c4:8a:83:8a:49:64:e9:84:c5:dc:7a:5d:53:dd:72: cf:4d:9c:99:72:7a:db:be:b6:18:8a:be:3c:11:ad: 89:ec:26:53:e1:08:f5:05:24:c5:65:ef:a7:48:ed: 38:9f:6a:b2:23:b5:1c:4c:5f:fe:3c:89:ad:42:64: 6a:ff:d2:84:d3:26:8f:56:b7:34:cb:bf:05:d8:bb: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:38:CC:3C:EF:71:8A:2E:D5:F1:39:4D:91:6D:D1:A7:08:0A:23:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:22:a9:a2:81:1d:04:29:ad:a7:66:07:30:48:2e:21:24:76: 79:ae:36:ce:e5:29:2f:f7:bd:af:9e:52:39:96:20:52:3f:23: 60:f1:dc:c8:26:26:2e:4d:83:eb:f9:c7:e4:f8:5a:ab:e3:61: b4:43:74:b3:5e:1d:3a:43:f2:ba:55:6b:0a:85:fb:6f:0a:c6: 8d:17:c9:b4:8d:67:77:0c:9b:ce:25:7c:9b:45:2d:0e:4a:10: 06:df:a2:41:1f:1c:3e:6d:b7:f6:42:21:b2:ec:b8:0d:ea:1c: 45:73:19:ab:bd:24:7b:e1:ad:93:7c:bd:11:90:ba:9d:9e:33: 5e:d0:f5:87:a6:f3:0f:d7:d6:0c:3e:a9:63:ed:67:60:cd:e2: 49:1f:e9:d0:ac:62:ed:58:cc:c6:e5:32:c2:c4:e9:85:65:ef: 52:18:70:10:2c:f6:e3:91:78:b5:63:d4:72:16:36:f3:a0:43: f5:1d:8d:46:41:17:9f:80:12:16:cc:f5:39:f4:15:e0:43:c8: a0:02:66:2a:d1:d8:72:bc:24:a6:78:7e:71:a8:45:4c:44:5a: 1b:92:11:73:5f:25:e5:32:89:01:cf:1d:f8:c4:e4:27:98:18: 29:e5:51:cb:bb:8f:20:36:92:75:e8:3e:30:2c:77:5f:da:73: d0:5c:1c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnthUpBrxHt2KYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDU1MGNmMDktZjczZC00ZjhlLTkwODYtNGYyOThmM2MwZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76EdetJ8BeuVwdYApzSCkdKjsnyUsnQ7QHrm 7NZ9UmHjT5nyvIv0GwfFiYMNqyCXvnYgt/zVdE8PKcmO6W0+38dD4rvFmZT2etO8 o/dGJDM1sgZWei5oezQAJcPLe5V7WUhhU0cBM4/+RmBeq2awMxuE60E+Q/sKReql yPOlIfLhshYt66jKngHNcuD3bBs4WEAOQ2dSY6kDtnaeYaGUkPyD7Ks0ODWSz18g 8IovJZUfn8bEioOKSWTphMXcel1T3XLPTZyZcnrbvrYYir48Ea2J7CZT4Qj1BSTF Ze+nSO04n2qyI7UcTF/+PImtQmRq/9KE0yaPVrc0y78F2Lt3iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk4zDzvcYou1fE5TZFt0acICiMaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzMGMyMzMtMTU5OC0z NzY2LWJkMjctMWMyNmUzMTc4YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrcJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUiqaKBHQQpradmBzBILiEkdnmuNs7lKS/3va+eUjmWIFI/I2Dx3Mgm Ji5Ng+v5x+T4WqvjYbRDdLNeHTpD8rpVawqF+28Kxo0XybSNZ3cMm84lfJtFLQ5K EAbfokEfHD5tt/ZCIbLsuA3qHEVzGau9JHvhrZN8vRGQup2eM17Q9Yem8w/X1gw+ qWPtZ2DN4kkf6dCsYu1YzMblMsLE6YVl71IYcBAs9uOReLVj1HIWNvOgQ/UdjUZB F5+AEhbM9Tn0FeBDyKACZirR2HK8JKZ4fnGoRUxEWhuSEXNfJeUyiQHPHfjE5CeY GCnlUcu7jyA2knXoPjAsd1/ac9BcHGU= -----END CERTIFICATE-----Generated at Wed Jul 29 03:52:14 2026 by rpki-client