$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1b949b-bffc-3a6c-bc50-f17df077e577.roa File: 1e1b949b-bffc-3a6c-bc50-f17df077e577.roa (raw, json) Hash identifier: 9FmsnWXMSgFU/66HT8L8vJ9Xjh3DHgVCte5jXyw3Tcg= Subject key identifier: E8:97:7C:84:C3:8B:60:87:F9:CD:45:30:5C:55:10:ED:F3:84:81:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D39CF9FD8175CF0365F6ACE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1b949b-bffc-3a6c-bc50-f17df077e577.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 15169 IP address blocks: 172.217.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9f:d8:17:5c:f0:36:5f:6a:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=afa5845d-76c9-410f-8f5c-2c1f1f6cea8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4c:74:6b:bd:a8:c7:7f:92:0d:ad:62:e7:75: f9:f1:7d:10:2a:93:48:8b:93:29:be:b0:ec:2f:c4: a3:73:71:15:a9:ba:fe:df:b8:fd:b8:19:0f:5a:a6: 2a:64:18:ef:f5:5e:52:ee:d6:38:a9:ac:84:1e:32: b9:45:48:e1:55:6a:f8:a4:ba:dc:49:03:ab:98:13: b3:94:d4:1b:01:ce:f2:12:42:05:87:b9:4b:4e:8b: d5:7f:ee:3d:d3:c3:fa:5c:0f:35:17:30:e8:ac:2b: 03:d9:b1:37:85:47:71:2d:a1:ef:6d:fd:1e:0b:b8: df:1a:fd:a9:cd:62:72:73:55:a7:d3:c9:62:5b:94: 2c:f6:4f:53:c8:43:c6:a1:0c:87:fe:26:02:4d:32: 88:58:16:05:d0:38:e4:5e:02:65:9a:22:d5:51:8c: 7a:a3:99:72:1f:ff:13:bd:7f:e6:3f:f7:00:c3:ee: ff:7e:6a:d0:5d:5e:fb:b1:82:fa:a5:84:82:be:77: 72:8a:78:95:d3:4e:9f:c5:81:ce:27:0c:02:5a:76: 25:e4:ee:9e:64:4d:7c:70:9f:c9:36:24:4f:03:e0: 76:ae:54:84:bc:96:f5:56:b6:e7:36:e2:70:a1:76: 66:8b:29:3d:8c:b4:e0:93:e4:d3:d7:8c:4c:91:12: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:97:7C:84:C3:8B:60:87:F9:CD:45:30:5C:55:10:ED:F3:84:81:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1b949b-bffc-3a6c-bc50-f17df077e577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:03:b1:99:2e:1f:45:30:e5:02:56:3a:97:a3:f0:af:59:d2: ce:67:7e:d7:09:09:c9:59:f0:08:35:20:b3:24:d8:65:96:3c: 00:f8:a5:ac:bb:e4:e1:6a:2f:3e:13:14:fc:3f:c7:c5:50:31: 70:89:9f:dd:37:54:77:1b:dc:66:87:85:06:4e:8e:0d:62:80: bd:bd:65:82:9b:cc:51:93:60:25:a9:18:69:76:2f:97:7f:59: 56:55:c7:d7:5c:f8:88:2e:60:35:99:a0:84:4e:b4:b7:a5:ec: 66:dc:62:58:df:37:52:1d:7a:24:c7:76:d3:3d:2f:13:ae:91: 1b:76:d3:1f:7a:0a:b7:ee:30:af:e3:82:c3:57:f2:5e:e8:75: 1d:bc:d7:6e:27:68:31:50:a9:f4:6a:3a:c8:b7:74:7a:6e:98: 77:02:ed:8e:bd:a3:d0:10:83:7a:79:47:5e:c1:2f:55:15:22: 89:21:fc:1d:c9:de:a3:09:56:2b:1b:c6:06:1f:2e:c4:01:c9: a2:85:56:ac:77:7e:94:97:d0:5f:86:d6:0f:50:87:a5:1a:62: b3:11:e1:9a:c6:ca:1c:4e:2f:09:75:f2:c6:df:ff:81:9f:06: d1:42:cf:eb:37:0d:cc:89:ad:12:bf:65:13:a4:14:9f:7c:61: 7c:c0:a7:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5/YF1zwNl9qzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YWZhNTg0NWQtNzZjOS00MTBmLThmNWMtMmMxZjFmNmNlYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUx0a72ox3+SDa1i53X58X0QKpNIi5MpvrDs L8Sjc3EVqbr+37j9uBkPWqYqZBjv9V5S7tY4qayEHjK5RUjhVWr4pLrcSQOrmBOz lNQbAc7yEkIFh7lLTovVf+4908P6XA81FzDorCsD2bE3hUdxLaHvbf0eC7jfGv2p zWJyc1Wn08liW5Qs9k9TyEPGoQyH/iYCTTKIWBYF0DjkXgJlmiLVUYx6o5lyH/8T vX/mP/cAw+7/fmrQXV77sYL6pYSCvndyiniV006fxYHOJwwCWnYl5O6eZE18cJ/J NiRPA+B2rlSEvJb1VrbnNuJwoXZmiyk9jLTgk+TT14xMkRLlmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiXfITDi2CH+c1FMFxVEO3zhIG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWUxYjk0OWItYmZmYy0z YTZjLWJjNTAtZjE3ZGYwNzdlNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIDsZkuH0Uw5QJWOpej8K9Z0s5nftcJCclZ8Ag1ILMk2GWWPAD4pay7 5OFqLz4TFPw/x8VQMXCJn903VHcb3GaHhQZOjg1igL29ZYKbzFGTYCWpGGl2L5d/ WVZVx9dc+IguYDWZoIROtLel7GbcYljfN1IdeiTHdtM9LxOukRt20x96CrfuMK/j gsNX8l7odR28124naDFQqfRqOsi3dHpumHcC7Y69o9AQg3p5R17BL1UVIokh/B3J 3qMJVisbxgYfLsQByaKFVqx3fpSX0F+G1g9Qh6UaYrMR4ZrGyhxOLwl18sbf/4Gf BtFCz+s3DcyJrRK/ZROkFJ98YXzAp9A= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:38 2026 by rpki-client