$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa File: 2363796e-1a6a-3118-a421-6fa84d42857f.roa (raw, json) Hash identifier: SVLB6s03ijhkis7sp+atwzFisfievz+S/IeTHkx32sE= Subject key identifier: 45:02:64:D7:0F:71:87:7B:D7:63:A0:A9:73:CB:4C:A8:0C:8E:0B:07 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E0007198A68FD1C34CFB740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:07:19:8a:68:fd:1c:34:cf:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=8a283720-342f-4b82-aa71-3b4996882414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:40:5e:ff:d3:1d:47:77:a2:28:31:5e:0b: 15:4f:ce:c3:a9:79:8d:0f:0a:4b:06:2d:17:90:20: 8c:fc:cd:0f:a7:cd:c7:5d:c0:1f:43:69:9a:a4:7d: e0:bc:40:0f:e9:bb:82:5c:73:20:33:26:d4:7a:de: f1:de:17:1d:e4:b4:0b:c5:59:cf:2c:1a:c2:0c:a5: 4d:b0:77:0f:2e:bb:ec:02:08:fa:d3:28:6f:85:a8: 40:41:a0:96:aa:90:a0:71:9f:42:27:3a:d1:a4:60: 8b:04:05:f3:76:22:8b:d3:5f:3d:20:dd:61:f2:4f: ec:a6:4b:3b:a7:d5:85:9c:ec:b0:9f:8b:5e:9f:41: a1:48:f1:76:b5:74:80:b2:c6:ca:b5:b2:ec:9d:e3: a8:37:1a:ef:26:1d:c5:49:4e:32:4d:b5:36:91:63: 21:b3:3e:61:cb:8f:2e:65:26:29:aa:02:4c:ae:9b: 93:1d:4d:ff:89:3b:3b:8c:0f:9a:76:55:bf:17:90: 4f:78:9b:92:ca:36:5b:14:9f:17:ee:d8:dc:99:6a: 18:8e:39:c8:23:4b:f4:73:82:cf:08:93:37:4a:75: 21:c1:b8:fe:f6:c3:da:20:e7:41:25:3d:a8:04:3a: fe:cb:b8:a2:88:91:e0:25:8f:f2:ef:c3:5c:cc:dd: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:02:64:D7:0F:71:87:7B:D7:63:A0:A9:73:CB:4C:A8:0C:8E:0B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b9:76:01:fd:b9:59:d8:f6:da:9a:3a:a3:c0:11:85:e1:d4: 78:e4:98:0d:9a:80:cd:b6:94:17:d1:d3:ba:73:39:8c:da:87: bc:33:06:47:44:ce:b7:fc:36:a6:51:a8:ae:d1:d1:70:bf:18: 79:80:2d:4d:1f:94:96:13:79:ef:c4:ea:44:d3:a3:1b:ba:26: 77:de:5c:b7:e5:d9:a0:73:5f:e5:10:05:8e:10:8f:bc:39:06: a4:6f:bc:1e:14:4e:e9:58:26:0b:4b:ae:fa:cb:af:08:a6:a7: 8a:5e:47:c0:ef:0b:c9:9c:19:66:4a:ee:78:33:63:12:89:49: 19:ac:d9:d6:e5:af:43:37:bf:29:93:51:3c:75:68:11:2f:aa: c8:09:cc:60:07:e8:0e:23:96:c5:75:6f:67:fb:4d:03:59:07: f3:bb:c6:40:7c:32:cd:21:84:c1:69:dd:3e:fd:cd:58:74:73: ee:a8:db:c9:71:d9:ff:00:8c:29:8e:ea:33:e2:89:8f:0a:71: dd:86:3b:4c:c6:56:5d:ce:ee:b5:de:f0:a5:af:3b:47:47:8e: 15:2e:d5:18:71:78:a7:fa:37:94:94:b0:c2:32:e7:fd:41:44: 1f:c1:8d:a7:b6:24:c6:43:a7:3c:ec:f2:25:bb:ff:ad:c7:d5: df:04:80:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAcZimj9HDTPt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OGEyODM3MjAtMzQyZi00YjgyLWFhNzEtM2I0OTk2ODgyNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPhAXv/THUd3oigxXgsVT87DqXmNDwpLBi0X kCCM/M0Pp83HXcAfQ2mapH3gvEAP6buCXHMgMybUet7x3hcd5LQLxVnPLBrCDKVN sHcPLrvsAgj60yhvhahAQaCWqpCgcZ9CJzrRpGCLBAXzdiKL0189IN1h8k/spks7 p9WFnOywn4ten0GhSPF2tXSAssbKtbLsneOoNxrvJh3FSU4yTbU2kWMhsz5hy48u ZSYpqgJMrpuTHU3/iTs7jA+adlW/F5BPeJuSyjZbFJ8X7tjcmWoYjjnII0v0c4LP CJM3SnUhwbj+9sPaIOdBJT2oBDr+y7iiiJHgJY/y78NczN08VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUCZNcPcYd712OgqXPLTKgMjgsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjM2Mzc5NmUtMWE2YS0z MTE4LWE0MjEtNmZhODRkNDI4NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa5dgH9uVnY9tqaOqPAEYXh1HjkmA2agM22lBfR07pzOYzah7wzBkdE zrf8NqZRqK7R0XC/GHmALU0flJYTee/E6kTToxu6JnfeXLfl2aBzX+UQBY4Qj7w5 BqRvvB4UTulYJgtLrvrLrwimp4peR8DvC8mcGWZK7ngzYxKJSRms2dblr0M3vymT UTx1aBEvqsgJzGAH6A4jlsV1b2f7TQNZB/O7xkB8Ms0hhMFp3T79zVh0c+6o28lx 2f8AjCmO6jPiiY8Kcd2GO0zGVl3O7rXe8KWvO0dHjhUu1RhxeKf6N5SUsMIy5/1B RB/Bjae2JMZDpzzs8iW7/63H1d8EgOg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:28 2026 by rpki-client