$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d736136f-93da-3eaf-a458-af2796a3def1.roa File: d736136f-93da-3eaf-a458-af2796a3def1.roa (raw, json) Hash identifier: 2az1lK0RJmBMUibGllvqZxFS7V6j1hqDHeTngNKvR5o= Subject key identifier: DB:3C:0E:56:8B:E8:EC:85:24:86:C1:C1:F9:02:20:EF:20:DA:F7:36 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DB3FA9EF6371D701B1680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d736136f-93da-3eaf-a458-af2796a3def1.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 64.233.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b3:fa:9e:f6:37:1d:70:1b:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=cf5e4cbf-1493-42d3-9203-85a4ff5cfb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:a5:51:4a:6c:8e:ad:79:b6:51:ad:c7:ec: c3:a5:07:de:75:1a:68:34:e7:af:fb:49:69:2e:1c: 3a:b0:22:6a:b0:72:2d:c0:fd:18:46:63:fc:89:76: 88:4a:8d:1a:ce:37:d2:fe:e9:ec:e0:e8:f2:91:e4: 40:9e:fd:5c:de:cd:ab:e6:e6:eb:d9:0f:3f:fb:38: 82:71:be:50:a2:02:87:67:53:6b:ce:60:0d:b6:04: 34:7a:d9:09:50:90:46:83:e0:d0:dd:71:52:bc:21: 24:c8:07:fd:3a:da:2a:24:fa:9a:79:90:bd:72:b8: 07:26:15:84:a3:5f:d4:14:8a:e6:6d:51:ad:86:89: ed:5b:ce:a2:cf:ca:c4:6c:fc:07:68:98:df:1d:28: 0d:0a:bc:17:fb:c6:bf:7c:e9:3c:7d:eb:2c:82:01: 29:7f:c9:64:13:45:e8:0a:cb:05:61:dc:e0:14:36: b9:0c:57:35:57:7c:b9:ec:19:53:7d:9b:07:8b:92: f8:df:54:d3:99:e3:5f:98:df:58:cf:9f:9c:4c:cd: 22:6c:51:de:c2:06:73:b8:39:1d:e0:e0:35:0e:81: 75:21:fb:55:3c:07:e8:f6:cf:08:68:e3:be:c6:cb: 4a:7f:4e:34:c9:5e:e2:89:e5:0a:a2:8d:e8:a1:fd: 69:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3C:0E:56:8B:E8:EC:85:24:86:C1:C1:F9:02:20:EF:20:DA:F7:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d736136f-93da-3eaf-a458-af2796a3def1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:bf:06:39:c6:fb:04:b6:48:30:07:98:06:65:84:e2:30:b9: 98:f5:5b:31:78:a0:b1:c0:43:f4:86:b8:51:ff:9d:01:b5:da: c2:aa:f2:d8:8b:19:d4:e6:d9:8d:80:a7:57:6c:c2:6c:43:56: 8d:f8:fd:e5:fe:40:16:50:47:a1:cc:c6:cc:28:75:cb:3a:69: be:ed:20:b5:d0:92:27:92:17:30:02:1a:df:f5:15:1c:75:95: d1:4c:00:27:74:13:2b:0e:45:40:bb:99:4a:84:31:c5:a6:0b: bc:08:fe:ce:6c:26:6e:9c:bc:f7:8c:32:06:1e:89:df:2c:b0: 6e:1f:b7:8d:f7:d5:5f:05:ff:44:bd:f6:31:bc:a2:c4:6c:94: 17:fe:ed:fe:32:34:4e:34:c2:d4:9e:5b:4a:c0:be:0a:4d:de: 9c:5b:d1:2b:1e:f4:77:0c:dc:31:6f:72:6e:82:02:36:91:a3: c7:6d:65:a1:9b:b5:8f:8d:ab:ec:69:42:df:36:02:8f:dd:51: 7a:69:2f:e4:31:7b:29:20:18:80:94:a7:61:20:f0:3d:31:db: 92:ae:dc:1e:3c:8c:9b:05:0a:62:3a:f1:f3:92:18:b3:16:bf: 13:84:dd:62:9d:c8:07:d3:a2:ce:46:3a:08:8c:40:5b:f1:b3: 18:53:76:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbP6nvY3HXAbFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2Y1ZTRjYmYtMTQ5My00MmQzLTkyMDMtODVhNGZmNWNmYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NKlUUpsjq15tlGtx+zDpQfedRpoNOev+0lp Lhw6sCJqsHItwP0YRmP8iXaISo0azjfS/uns4OjykeRAnv1c3s2r5ubr2Q8/+ziC cb5QogKHZ1NrzmANtgQ0etkJUJBGg+DQ3XFSvCEkyAf9OtoqJPqaeZC9crgHJhWE o1/UFIrmbVGthontW86iz8rEbPwHaJjfHSgNCrwX+8a/fOk8fessggEpf8lkE0Xo CssFYdzgFDa5DFc1V3y57BlTfZsHi5L431TTmeNfmN9Yz5+cTM0ibFHewgZzuDkd 4OA1DoF1IftVPAfo9s8IaOO+xstKf040yV7iieUKoo3oof1p0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs8DlaL6OyFJIbBwfkCIO8g2vc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDczNjEzNmYtOTNkYS0z ZWFmLWE0NTgtYWYyNzk2YTNkZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+/BjnG+wS2SDAHmAZlhOIwuZj1WzF4oLHAQ/SGuFH/nQG12sKq8tiL GdTm2Y2Ap1dswmxDVo34/eX+QBZQR6HMxswodcs6ab7tILXQkieSFzACGt/1FRx1 ldFMACd0EysORUC7mUqEMcWmC7wI/s5sJm6cvPeMMgYeid8ssG4ft4331V8F/0S9 9jG8osRslBf+7f4yNE40wtSeW0rAvgpN3pxb0Sse9HcM3DFvcm6CAjaRo8dtZaGb tY+Nq+xpQt82Ao/dUXppL+QxeykgGICUp2Eg8D0x25Ku3B48jJsFCmI68fOSGLMW vxOE3WKdyAfTos5GOgiMQFvxsxhTdtM= -----END CERTIFICATE-----Generated at Thu Nov 5 19:44:04 2026 by rpki-client