$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa File: 1b60dea6-b796-375b-92fa-3d1691aacc51.roa (raw, json) Hash identifier: fTnkcCCSbEAuanRZfDIGyYoybASMSpLiT+XOJXrp51Y= Subject key identifier: 7A:39:D5:48:C5:BE:88:97:0A:CC:0F:66:69:FE:D6:B7:8B:21:09:C3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D39CF9D5A963987E09D786880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 15169 IP address blocks: 172.217.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9d:5a:96:39:87:e0:9d:78:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=58f0c498-3707-4664-8fba-f7e8578df6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:67:67:b2:06:38:e8:36:c6:1d:64:19:34: c7:6e:68:e1:01:e9:8e:a6:a9:27:0b:5f:ab:58:8b: 57:a2:83:dd:d0:af:2f:10:92:c0:e7:42:d3:1f:6a: 7d:0d:3b:5b:4b:07:a9:c6:58:3d:c1:54:64:e8:5d: 59:a3:16:fe:27:bf:b3:28:f2:ef:6c:29:eb:5c:29: bb:44:d3:f2:13:f8:ef:01:75:7f:ba:a1:89:04:df: 61:c2:18:10:1b:fc:30:41:8c:d4:d0:04:8b:7c:e2: 9e:6e:85:fd:3f:f8:fa:69:08:0b:6e:e2:f6:e1:15: d0:49:cb:2c:35:eb:81:3a:b6:a6:e5:25:cf:1b:dd: 0c:de:40:03:fa:70:d9:f2:94:8b:d1:10:a7:45:2d: d4:70:48:92:fa:c0:a3:33:46:8a:6a:9e:dc:24:2f: d5:5e:79:f7:36:a7:05:76:d5:2b:ae:07:d5:4e:31: 28:73:fe:5f:6c:e1:8e:9f:d1:cb:c0:be:32:2d:2b: 27:36:72:d4:be:14:d0:98:a6:88:6f:64:4b:35:d8: b7:a5:b6:d3:e3:d9:f0:9a:b6:00:28:e5:f3:3a:54: 67:0b:5e:6c:a7:e3:28:fe:74:07:6f:14:d6:65:6d: b7:e9:cf:c3:55:32:b7:2f:24:43:e9:a3:58:5e:ac: 0e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:39:D5:48:C5:BE:88:97:0A:CC:0F:66:69:FE:D6:B7:8B:21:09:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5c:03:e4:d2:60:bd:c3:92:11:df:8a:1f:21:15:f1:89:b6: a1:f5:a0:83:89:b5:6a:ce:e2:e8:91:09:78:2c:83:92:53:73: 62:9b:45:cf:d7:be:54:f1:e2:d5:aa:85:8e:a9:24:73:00:ca: 95:1e:ac:2a:72:9b:0d:a6:ea:09:82:9a:aa:bb:47:0f:cb:ba: a7:8f:ae:58:33:bd:68:ef:7b:6e:ae:e7:09:1e:16:27:54:e5: 2c:fb:f6:f4:db:c9:78:63:83:9d:10:55:82:7e:2e:e9:5d:f7: 83:0d:84:1e:45:af:74:24:8f:4c:97:3a:fe:f0:a4:0b:ba:84: 2a:ac:86:07:74:4a:d9:28:a6:b0:eb:2c:7e:86:c5:d6:15:ca: ae:92:75:bd:27:c7:d9:50:19:3e:b0:c4:a4:9e:75:7c:a5:98: 5b:58:ca:f8:8c:24:22:2b:42:a4:1c:e7:8a:fd:a0:ca:11:06: 84:0f:6b:fd:3c:b4:8d:e5:cb:c9:86:d2:d6:77:d7:53:3a:1e: 2f:ad:0e:92:3b:1d:07:15:42:f7:56:19:a7:c1:ac:b4:e8:f2: 72:db:22:16:77:bb:d3:d8:c9:43:c8:6d:2f:68:62:b3:d2:0f: 1e:7b:68:80:59:ae:f7:a6:08:24:47:a6:49:94:dc:ac:cb:b7: 95:a0:72:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z51aljmH4J14aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NThmMGM0OTgtMzcwNy00NjY0LThmYmEtZjdlODU3OGRmNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY5nZ7IGOOg2xh1kGTTHbmjhAemOpqknC1+r WItXooPd0K8vEJLA50LTH2p9DTtbSwepxlg9wVRk6F1Zoxb+J7+zKPLvbCnrXCm7 RNPyE/jvAXV/uqGJBN9hwhgQG/wwQYzU0ASLfOKeboX9P/j6aQgLbuL24RXQScss NeuBOram5SXPG90M3kAD+nDZ8pSL0RCnRS3UcEiS+sCjM0aKap7cJC/VXnn3NqcF dtUrrgfVTjEoc/5fbOGOn9HLwL4yLSsnNnLUvhTQmKaIb2RLNdi3pbbT49nwmrYA KOXzOlRnC15sp+Mo/nQHbxTWZW236c/DVTK3LyRD6aNYXqwOjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHo51UjFvoiXCswPZmn+1reLIQnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWI2MGRlYTYtYjc5Ni0z NzViLTkyZmEtM2QxNjkxYWFjYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxcA+TSYL3DkhHfih8hFfGJtqH1oIOJtWrO4uiRCXgsg5JTc2KbRc/X vlTx4tWqhY6pJHMAypUerCpymw2m6gmCmqq7Rw/LuqePrlgzvWjve26u5wkeFidU 5Sz79vTbyXhjg50QVYJ+Luld94MNhB5Fr3Qkj0yXOv7wpAu6hCqshgd0StkoprDr LH6GxdYVyq6Sdb0nx9lQGT6wxKSedXylmFtYyviMJCIrQqQc54r9oMoRBoQPa/08 tI3ly8mG0tZ311M6Hi+tDpI7HQcVQvdWGafBrLTo8nLbIhZ3u9PYyUPIbS9oYrPS Dx57aIBZrvemCCRHpkmU3KzLt5WgcsA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:02 2026 by rpki-client