$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa File: 3be7d533-8374-34e8-8ae6-527bb38f1d34.roa (raw, json) Hash identifier: 3zgn8D8xqbBByYmA3SszmLgrWQkt9iy+w/9qKyOpyOw= Subject key identifier: 0C:3A:F0:25:AB:8F:1E:E8:EA:2C:6D:9D:BE:7B:B3:39:BC:BB:31:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD1CD621D4704A1CECCD0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d1:cd:62:1d:47:04:a1:ce:cc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=719c3a08-4d71-485b-b797-66cd74d870fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:9b:8a:ec:26:42:5f:b9:72:ec:60:17:f7: 34:58:78:c9:83:7a:93:c6:03:ab:eb:c1:3f:5a:06: 96:ce:a3:b2:0b:47:34:2d:78:36:7e:85:09:0a:de: d3:ff:95:bd:e0:03:76:57:66:c8:b5:f6:ac:a3:e3: cd:97:3a:1d:0e:77:86:86:21:f9:1e:2e:18:02:fe: 27:d4:02:50:48:ad:92:17:ec:6f:f9:93:b8:f9:28: b8:1c:3b:19:a3:c9:00:e1:72:81:a9:88:23:5e:be: 88:3d:94:e9:a6:e0:ab:6a:bf:63:7f:71:e8:3c:78: 43:63:5f:94:a7:9b:7f:98:55:dd:0f:2e:95:78:2f: 32:09:0e:ad:62:c9:80:f7:39:5a:e7:9d:5c:69:0c: a7:d7:66:b1:39:96:a3:86:c6:ce:60:eb:4b:ff:ac: 0f:a1:f2:33:8b:50:85:59:b7:8d:8b:4c:b8:f4:5d: 6a:62:e1:ac:32:4c:2b:34:3f:69:fc:eb:de:de:16: bc:9a:3d:ba:1a:58:d6:33:ca:ac:a6:39:18:e6:95: ff:ed:c3:c6:cf:a0:b9:5c:d6:de:e6:ad:44:b8:d4: ab:e4:64:f6:30:a8:c5:8b:11:83:28:02:3d:35:27: 0b:f8:9f:e4:aa:fd:0d:ed:d0:1e:01:72:68:ef:6b: 49:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3A:F0:25:AB:8F:1E:E8:EA:2C:6D:9D:BE:7B:B3:39:BC:BB:31:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4b:a8:88:aa:c1:0f:b8:40:3a:07:b9:e9:1f:a5:f6:59:a6: eb:f7:3c:de:28:8a:8e:d7:f7:6a:1d:8d:29:7d:dd:c2:d2:9b: 6c:84:cb:74:05:a8:eb:a7:28:23:14:fd:a2:39:9d:64:57:b9: c6:33:3f:35:c3:96:23:28:39:a3:a1:0d:5b:13:a7:45:ee:e9: 59:8e:ed:f3:55:cd:21:31:ae:e9:ec:86:e4:6c:37:db:85:88: a1:55:fa:5d:92:11:32:bc:3a:c9:ae:5c:9c:9f:83:f9:7c:25: a0:8e:5a:db:15:7d:d1:c6:b8:74:a7:0e:85:2e:67:f1:1c:99: fa:6b:ac:4a:34:94:79:d2:44:52:4d:57:f0:e5:eb:af:be:88: 80:86:e2:58:55:09:ad:75:3e:19:00:ef:cd:b5:79:be:5a:e4: 14:b7:66:b7:88:38:de:3a:c9:64:94:7a:e3:19:ad:03:ca:4d: 8d:c4:88:2d:41:ed:78:bb:b7:a0:1d:2e:9b:79:8f:a6:30:2f: 1e:dc:3e:58:96:1a:a4:5d:3e:ad:f1:b1:9f:70:de:ad:6e:65: 37:8a:45:9e:b9:ea:9a:9d:f2:89:42:34:4d:14:e7:cc:15:8b: e5:7e:aa:d1:a1:f1:6e:ad:b6:c0:9e:83:2a:c9:fa:19:29:dd: d2:1a:84:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9HNYh1HBKHOzNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NzE5YzNhMDgtNGQ3MS00ODViLWI3OTctNjZjZDc0ZDg3MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEqbiuwmQl+5cuxgF/c0WHjJg3qTxgOr68E/ WgaWzqOyC0c0LXg2foUJCt7T/5W94AN2V2bItfaso+PNlzodDneGhiH5Hi4YAv4n 1AJQSK2SF+xv+ZO4+Si4HDsZo8kA4XKBqYgjXr6IPZTppuCrar9jf3HoPHhDY1+U p5t/mFXdDy6VeC8yCQ6tYsmA9zla551caQyn12axOZajhsbOYOtL/6wPofIzi1CF WbeNi0y49F1qYuGsMkwrND9p/Ove3ha8mj26GljWM8qspjkY5pX/7cPGz6C5XNbe 5q1EuNSr5GT2MKjFixGDKAI9NScL+J/kqv0N7dAeAXJo72tJiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw68CWrjx7o6ixtnb57szm8uzEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2JlN2Q1MzMtODM3NC0z NGU4LThhZTYtNTI3YmIzOGYxZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNLqIiqwQ+4QDoHuekfpfZZpuv3PN4oio7X92odjSl93cLSm2yEy3QF qOunKCMU/aI5nWRXucYzPzXDliMoOaOhDVsTp0Xu6VmO7fNVzSExrunshuRsN9uF iKFV+l2SETK8OsmuXJyfg/l8JaCOWtsVfdHGuHSnDoUuZ/EcmfprrEo0lHnSRFJN V/Dl66++iICG4lhVCa11PhkA7821eb5a5BS3ZreION46yWSUeuMZrQPKTY3EiC1B 7Xi7t6AdLpt5j6YwLx7cPliWGqRdPq3xsZ9w3q1uZTeKRZ656pqd8olCNE0U58wV i+V+qtGh8W6ttsCegyrJ+hkp3dIahNY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:32 2026 by rpki-client