$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a94c948a-bcd5-38f5-9c55-4e99a0d5f7c6.roa File: a94c948a-bcd5-38f5-9c55-4e99a0d5f7c6.roa (raw, json) Hash identifier: bRt4XFoqPtd2zyjZx01TlncS20/H9oijG3V44AlTRsc= Subject key identifier: DD:E1:0A:93:DB:6C:2B:A0:BA:1B:BD:49:21:8F:DF:F6:94:55:9D:B9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A02B6B4D5C7B3814341280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a94c948a-bcd5-38f5-9c55-4e99a0d5f7c6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 173.194.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:2b:6b:4d:5c:7b:38:14:34:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9b76e363-a33a-4e50-b7fd-c846920b2933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:a4:56:d4:e2:d9:45:62:12:44:a7:09:9d: 0f:ec:b9:9b:5a:e1:95:06:41:6b:f1:41:7c:1b:53: 4a:f9:83:f6:2a:b4:2a:e6:c6:3f:bc:d7:2d:55:e4: be:5c:39:f2:b0:b8:49:62:8d:8a:50:92:3e:71:1e: 66:83:70:80:31:48:dd:ff:6d:7f:ed:2d:5d:7a:9f: fa:a8:38:5a:1d:c5:a1:0b:6b:bc:b7:63:19:36:2e: bc:a7:52:30:c5:40:6e:15:f5:36:bd:6b:6d:ee:ba: c9:73:31:c1:82:79:84:c4:fb:02:5d:c9:47:4d:fd: 74:de:18:80:94:20:7c:d8:8f:e9:7c:29:f1:7f:7d: 69:c4:af:41:fb:7f:a3:2d:df:51:5e:42:e8:4b:e4: d9:fa:0b:57:30:9b:3f:e9:12:d5:59:f7:9f:e6:96: 13:4e:bc:4a:dc:fb:f3:07:2e:28:e6:65:91:19:f0: bc:01:c9:67:34:7d:40:6b:ee:f5:1a:ad:6f:78:06: 8a:50:69:03:3b:1d:7a:10:e7:69:85:c2:4d:a7:93: a5:1d:45:5d:d7:b8:f3:22:ff:62:b3:8e:ba:07:3f: c0:8b:2d:18:25:30:97:f2:81:97:7f:da:5d:60:6a: 75:2c:e3:0b:cc:3b:b6:db:d9:9c:99:f7:1d:ec:c9: 16:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:0A:93:DB:6C:2B:A0:BA:1B:BD:49:21:8F:DF:F6:94:55:9D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a94c948a-bcd5-38f5-9c55-4e99a0d5f7c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:88:ac:01:20:54:71:bc:0c:d5:28:6d:62:a4:20:04:dd:43: 24:0b:e4:25:1f:87:cb:cf:2e:e6:da:2c:1f:66:8c:2b:e3:a7: 6e:28:ee:90:55:a4:9a:26:04:42:85:f3:ed:13:87:c1:b9:55: 5b:d6:9b:f0:c7:73:11:42:a7:31:96:68:08:0e:a3:39:3d:ec: 20:b4:b3:3f:b6:3e:ff:f6:3c:40:0a:bf:e9:f3:50:f4:72:55: 29:3e:fc:f9:02:f1:c0:6b:ef:8d:2e:b7:9d:33:e8:d2:60:0f: 59:44:34:ba:87:40:f4:b0:a1:7c:35:8b:11:9a:f1:ca:d7:0f: 59:52:a7:0c:d9:16:49:7a:d8:f2:a2:b5:92:15:c8:19:b1:3c: 5e:7e:dc:6a:86:fc:c3:c2:02:3d:40:7a:4e:f9:b7:51:0c:24: ce:9e:2b:2e:ad:39:f4:09:c5:cb:ea:b5:ba:de:79:c2:e8:85: 09:85:78:c6:70:e6:6d:03:77:b5:51:1d:06:90:b6:01:13:ec: ac:ce:36:cc:34:48:47:60:e1:62:28:4f:81:56:95:18:cf:b6: 7e:0f:42:89:18:ec:3e:41:af:f4:18:2c:5b:b9:ee:00:7c:0c: c4:5b:2f:d7:84:82:a7:94:e5:88:72:df:89:45:82:72:7e:eb: ad:c2:8d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noCtrTVx7OBQ0EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWI3NmUzNjMtYTMzYS00ZTUwLWI3ZmQtYzg0NjkyMGIyOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDakVtTi2UViEkSnCZ0P7LmbWuGVBkFr8UF8 G1NK+YP2KrQq5sY/vNctVeS+XDnysLhJYo2KUJI+cR5mg3CAMUjd/21/7S1dep/6 qDhaHcWhC2u8t2MZNi68p1IwxUBuFfU2vWtt7rrJczHBgnmExPsCXclHTf103hiA lCB82I/pfCnxf31pxK9B+3+jLd9RXkLoS+TZ+gtXMJs/6RLVWfef5pYTTrxK3Pvz By4o5mWRGfC8AclnNH1Aa+71Gq1veAaKUGkDOx16EOdphcJNp5OlHUVd17jzIv9i s466Bz/Aiy0YJTCX8oGXf9pdYGp1LOMLzDu229mcmfcd7MkW9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3hCpPbbCuguhu9SSGP3/aUVZ25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTk0Yzk0OGEtYmNkNS0z OGY1LTljNTUtNGU5OWEwZDVmN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOIrAEgVHG8DNUobWKkIATdQyQL5CUfh8vPLubaLB9mjCvjp24o7pBV pJomBEKF8+0Th8G5VVvWm/DHcxFCpzGWaAgOozk97CC0sz+2Pv/2PEAKv+nzUPRy VSk+/PkC8cBr740ut50z6NJgD1lENLqHQPSwoXw1ixGa8crXD1lSpwzZFkl62PKi tZIVyBmxPF5+3GqG/MPCAj1Aek75t1EMJM6eKy6tOfQJxcvqtbreecLohQmFeMZw 5m0Dd7VRHQaQtgET7KzONsw0SEdg4WIoT4FWlRjPtn4PQokY7D5Br/QYLFu57gB8 DMRbL9eEgqeU5Yhy34lFgnJ+663CjXw= -----END CERTIFICATE-----Generated at Wed Jul 29 09:06:34 2026 by rpki-client