$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa File: 0185b0e0-6696-3609-972e-b79ff80a6c20.roa (raw, json) Hash identifier: mNY0IeO6CXJhk3kcU6qYTApFz/BcxsU4WEFT8E11qkI= Subject key identifier: 9C:15:35:2A:EB:B6:78:29:F4:3C:89:73:FF:37:29:1E:F1:FC:58:8D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00033FFE5FB9BD7B69E980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:03:3f:fe:5f:b9:bd:7b:69:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7d6fb68b-a8fe-40c2-b30f-60ef6b43a707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:43:a1:cf:c2:7e:f9:b3:0b:a4:d6:f1:a5: 5b:13:19:18:52:c5:26:0a:d4:2b:f5:b2:82:a7:f3: 6f:64:b6:c2:63:1c:55:06:32:a0:fb:ff:6b:76:35: d3:a6:d1:02:98:b9:46:3e:71:6e:1a:e7:3c:35:23: 91:cc:2a:95:55:db:4c:c2:f3:8e:a2:64:e7:7a:5b: 23:83:1b:36:63:24:ee:bd:a3:86:80:06:b1:be:cc: 05:8e:53:44:31:47:d6:62:da:33:ee:95:35:e7:95: ef:52:37:d8:2a:f5:56:1b:a2:0e:ed:32:2a:dc:9c: f4:a6:08:76:6e:cf:d9:7d:bf:ae:19:61:2a:b7:33: b5:9e:03:8e:34:30:6d:b4:25:8d:da:1d:0c:36:d4: 3a:cd:f7:e0:0f:91:1f:f2:b3:52:c4:2a:ba:c7:8d: ff:f6:73:70:8f:58:ac:4a:62:76:bc:13:95:3d:95: f5:d1:32:02:12:37:db:e1:3f:10:cd:f7:ef:cf:83: 2a:54:fe:0b:c5:24:a9:e1:b6:43:6a:58:22:ec:1a: da:54:02:a0:ef:7b:b1:d8:ce:1f:1b:03:7c:5d:c9: f8:a1:cb:60:d4:93:e9:c2:31:d4:2b:84:6b:33:27: 66:3c:ce:15:cf:0a:5d:c7:18:85:c1:52:c6:d6:ac: 55:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:15:35:2A:EB:B6:78:29:F4:3C:89:73:FF:37:29:1E:F1:FC:58:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4b:c8:3a:a2:53:b1:45:b9:20:9a:89:5b:80:c1:26:3e:ea: 1f:eb:d9:62:5e:6c:b5:8c:fe:dc:a9:04:6a:25:f7:31:10:60: 9c:32:28:e3:1a:e4:5c:08:9f:46:d9:c4:2d:ab:a8:35:0f:df: 18:71:36:9b:83:61:90:9e:bb:3c:8e:1f:2a:82:6d:fa:c0:b6: c4:f9:83:52:fb:91:55:5c:3b:19:8b:30:d5:0c:44:a8:c7:ed: 88:7d:56:1f:64:76:67:49:de:4d:a5:cc:64:28:c1:f3:11:b0: 3e:b4:91:01:97:cf:a0:4d:82:d6:f0:ca:af:02:70:b1:6e:5e: 0e:04:f3:35:7b:cc:2c:81:10:b0:d5:54:fa:02:07:9a:37:9f: 71:17:38:04:b2:f0:e9:a9:d4:27:17:f1:d8:ab:eb:65:47:4e: a5:2d:26:4c:ae:82:d9:5c:16:a7:24:4a:1b:a9:84:b0:22:59: 32:3f:3f:6e:4b:df:d7:00:5e:3a:58:ed:ea:ac:00:93:cc:a6: 8c:ac:ed:38:04:b0:65:e4:51:30:e6:09:af:c8:8f:21:37:85: f6:f7:87:71:cf:d7:80:34:66:14:69:60:7c:8e:e2:5e:c6:de: a6:a1:19:b6:1b:ac:b1:6f:db:b5:97:78:c5:d6:e1:26:39:53: 00:e9:06:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAM//l+5vXtp6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2Q2ZmI2OGItYThmZS00MGMyLWIzMGYtNjBlZjZiNDNhNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0tDoc/CfvmzC6TW8aVbExkYUsUmCtQr9bKC p/NvZLbCYxxVBjKg+/9rdjXTptECmLlGPnFuGuc8NSORzCqVVdtMwvOOomTnelsj gxs2YyTuvaOGgAaxvswFjlNEMUfWYtoz7pU155XvUjfYKvVWG6IO7TIq3Jz0pgh2 bs/Zfb+uGWEqtzO1ngOONDBttCWN2h0MNtQ6zffgD5Ef8rNSxCq6x43/9nNwj1is SmJ2vBOVPZX10TICEjfb4T8Qzffvz4MqVP4LxSSp4bZDalgi7BraVAKg73ux2M4f GwN8Xcn4octg1JPpwjHUK4RrMydmPM4VzwpdxxiFwVLG1qxVJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwVNSrrtngp9DyJc/83KR7x/FiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDE4NWIwZTAtNjY5Ni0z NjA5LTk3MmUtYjc5ZmY4MGE2YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhLyDqiU7FFuSCaiVuAwSY+6h/r2WJebLWM/typBGol9zEQYJwyKOMa 5FwIn0bZxC2rqDUP3xhxNpuDYZCeuzyOHyqCbfrAtsT5g1L7kVVcOxmLMNUMRKjH 7Yh9Vh9kdmdJ3k2lzGQowfMRsD60kQGXz6BNgtbwyq8CcLFuXg4E8zV7zCyBELDV VPoCB5o3n3EXOASy8Omp1CcX8dir62VHTqUtJkyugtlcFqckShuphLAiWTI/P25L 39cAXjpY7eqsAJPMpoys7TgEsGXkUTDmCa/IjyE3hfb3h3HP14A0ZhRpYHyO4l7G 3qahGbYbrLFv27WXeMXW4SY5UwDpBiA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:45 2026 by rpki-client