$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4445321-e206-3ee9-9f5b-556cede5293f.roa File: e4445321-e206-3ee9-9f5b-556cede5293f.roa (raw, json) Hash identifier: aV4ENJeekklEt2HGvHJ0rid2GfQNONfVphI1Z/6FXFE= Subject key identifier: E5:79:8B:8B:6D:5F:6F:8F:42:18:05:FB:09:A6:39:6D:E0:B1:52:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6293061AEA57CF7AF2F87400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4445321-e206-3ee9-9f5b-556cede5293f.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 173.194.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:06:1a:ea:57:cf:7a:f2:f8:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=45bd981f-7832-4d13-8125-305436a88cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:02:24:7e:bc:93:5e:50:e7:c2:6e:a8:85: 98:62:7e:e5:42:e5:17:27:7c:46:56:10:1c:f7:c4: 3c:18:5f:a7:76:5f:b5:a4:8e:58:9a:66:0c:c7:bf: dc:cb:ab:3b:f6:3c:49:8f:2a:f5:66:a6:b3:a3:fe: 3f:1c:7c:8c:39:8a:4e:cb:7e:0f:4f:59:ea:2a:f2: 72:d8:44:12:75:7d:b4:13:77:25:c3:5e:74:ae:63: be:b2:4c:f3:3f:c0:42:4f:58:e5:db:7f:08:0a:a3: 31:b4:24:3b:94:92:e9:e6:01:05:56:8a:75:98:ee: 8a:86:d7:85:93:75:1c:66:cd:fb:04:16:1b:81:70: 77:49:98:a7:c7:f2:ff:d7:34:23:71:aa:ab:c2:10: 37:a1:4e:2b:14:1c:7a:a4:ac:65:aa:bd:81:7c:33: d7:2c:6c:da:29:1e:00:e1:66:ed:48:79:3f:f1:a0: 65:48:95:d5:7e:3e:0c:3a:2a:48:ef:d8:60:c3:87: e5:be:f7:92:2c:75:75:a3:59:d5:38:0c:8b:24:a9: c3:cb:0c:61:42:5a:bb:ff:45:97:9d:19:a2:fa:40: 7d:76:59:d0:cf:9e:9a:52:39:f5:4b:05:2a:4e:b9: c4:45:ed:4e:4f:ed:b9:9e:71:38:49:df:ca:1e:67: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:79:8B:8B:6D:5F:6F:8F:42:18:05:FB:09:A6:39:6D:E0:B1:52:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4445321-e206-3ee9-9f5b-556cede5293f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:31:43:00:90:37:54:32:08:ab:96:41:44:10:9d:73:6f:7a: e3:a7:44:29:2a:0a:12:9b:9b:ad:21:24:c1:41:ca:72:f3:d2: 40:d3:0e:ee:95:71:69:c6:e7:b4:5f:52:ab:23:74:1a:82:70: 05:3c:88:c0:b4:58:ab:e7:78:39:99:04:79:57:23:c7:d6:65: 4d:04:c8:e6:3b:e4:76:53:57:43:78:3a:82:e5:b2:3c:21:bb: 2d:c4:96:42:76:c1:30:0b:73:2f:8c:13:ad:b6:4a:6a:ee:97: ae:b4:90:e5:da:cf:31:b1:d0:f6:ac:fc:56:71:4a:82:68:9e: e7:5e:fd:58:0c:52:32:67:8e:8a:b7:d5:23:fc:f1:69:5c:65: c2:4e:9c:a2:94:79:4c:09:ba:e4:05:f3:bd:88:6c:6a:d1:bd: 96:0c:a6:75:b5:d0:12:4a:93:88:25:70:fa:18:ee:f5:a8:1c: c7:59:04:61:22:ac:bb:47:de:58:f6:09:5c:44:69:0c:bf:a0: 06:e1:ae:30:76:b4:4f:b9:de:82:4c:ee:ba:34:c4:98:b8:5c: 70:3b:d7:87:9b:8a:12:7a:52:0d:94:b9:df:0c:73:08:db:3e: 90:bd:94:88:a0:c3:45:5c:a3:4d:d6:d4:e1:a4:3e:65:58:bb: 49:15:d6:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwYa6lfPevL4dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NDViZDk4MWYtNzgzMi00ZDEzLTgxMjUtMzA1NDM2YTg4Y2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl08CJH68k15Q58JuqIWYYn7lQuUXJ3xGVhAc 98Q8GF+ndl+1pI5YmmYMx7/cy6s79jxJjyr1Zqazo/4/HHyMOYpOy34PT1nqKvJy 2EQSdX20E3clw150rmO+skzzP8BCT1jl238ICqMxtCQ7lJLp5gEFVop1mO6KhteF k3UcZs37BBYbgXB3SZinx/L/1zQjcaqrwhA3oU4rFBx6pKxlqr2BfDPXLGzaKR4A 4WbtSHk/8aBlSJXVfj4MOipI79hgw4flvveSLHV1o1nVOAyLJKnDywxhQlq7/0WX nRmi+kB9dlnQz56aUjn1SwUqTrnERe1OT+25nnE4Sd/KHmcjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOV5i4ttX2+PQhgF+wmmOW3gsVIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTQ0NDUzMjEtZTIwNi0z ZWU5LTlmNWItNTU2Y2VkZTUyOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsxQwCQN1QyCKuWQUQQnXNveuOnRCkqChKbm60hJMFBynLz0kDTDu6V cWnG57RfUqsjdBqCcAU8iMC0WKvneDmZBHlXI8fWZU0EyOY75HZTV0N4OoLlsjwh uy3ElkJ2wTALcy+ME622Smrul660kOXazzGx0Pas/FZxSoJonude/VgMUjJnjoq3 1SP88WlcZcJOnKKUeUwJuuQF872IbGrRvZYMpnW10BJKk4glcPoY7vWoHMdZBGEi rLtH3lj2CVxEaQy/oAbhrjB2tE+53oJM7ro0xJi4XHA714ebihJ6Ug2Uud8Mcwjb PpC9lIigw0Vco03W1OGkPmVYu0kV1mA= -----END CERTIFICATE-----Generated at Thu Nov 5 18:55:10 2026 by rpki-client