$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa File: 3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa (raw, json) Hash identifier: pPGZKBRBKYSKAcl+IysmnNeyf8kdpqqsHcD7+nod4OA= Subject key identifier: 0C:CE:51:3A:D2:E3:2C:8C:4E:1B:DA:ED:0B:61:1B:28:29:01:6C:2D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFCFEC8D20DA1023C9E8C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:cf:ec:8d:20:da:10:23:c9:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=54cafe66-495a-4c72-ac6f-371417b82d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:d5:f2:c0:32:50:1f:da:4b:bb:42:d2:f0: da:79:71:40:06:c4:a5:c6:fd:a3:42:d9:ee:8b:0f: d8:0c:21:4a:c0:84:f2:c1:f5:1c:f8:26:a9:58:75: cc:ee:66:a4:a7:11:0d:e3:08:ac:ed:ed:7b:6c:96: b5:53:b9:40:2f:b1:f4:be:d3:0c:87:bc:4e:1c:bc: eb:cb:ba:1b:0f:ed:c0:8f:45:1e:e5:6d:9d:88:da: 98:d3:28:6e:9b:77:0c:7d:67:89:a8:33:82:dd:c7: 97:54:28:e7:f9:2d:f8:49:2e:fa:5b:5c:dd:d6:5f: 36:b6:ed:fd:09:4d:e4:65:08:37:42:38:cb:6b:0b: 2c:60:cb:e8:d1:f9:db:de:6e:a1:02:cc:59:49:01: f1:8e:95:63:f4:c6:26:38:b5:2a:34:a4:22:ec:45: bc:b1:aa:a4:ba:cb:18:b1:62:8b:b8:76:cd:e5:16: 2c:7d:f9:97:16:f0:d3:26:25:e3:08:69:05:58:54: 17:a1:cb:2b:0f:c3:dc:9c:a7:89:0e:b2:76:47:8a: 33:7c:53:32:3c:34:64:03:80:ce:b3:2d:2b:64:52: b5:a4:46:e8:bf:c6:d5:59:25:7b:cd:d7:b7:ef:1a: 04:75:94:ee:7c:fd:e0:90:6c:7d:dc:8d:8b:3a:bc: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CE:51:3A:D2:E3:2C:8C:4E:1B:DA:ED:0B:61:1B:28:29:01:6C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:81:a2:73:7d:9f:76:0a:06:8e:63:ba:9f:81:b5:3a:78:78: 58:8d:e3:e7:e5:a3:d5:96:73:6e:d1:b8:d6:1d:b8:c9:c5:35: 62:b8:c5:e0:5e:8f:f2:8d:c1:20:37:47:ef:5a:a2:72:c2:b1: 83:c4:f4:3a:7c:ae:22:34:68:65:27:c7:e8:e7:d7:91:51:6f: 4e:02:93:91:df:fe:28:43:0d:33:27:89:27:c4:42:32:f9:7d: 31:70:e8:4e:47:5c:f2:29:7b:7a:ad:d9:87:52:d6:af:e9:d5: 4c:ff:52:c3:1a:61:d8:cb:96:c1:64:1d:24:4d:22:87:13:d9: 01:bb:76:50:ed:1f:32:be:7e:2e:0b:33:63:b5:21:27:c8:ed: c0:fc:59:02:d7:7d:90:ca:37:4c:f4:7c:69:01:d8:b9:c4:27: 76:65:ee:8d:e3:6a:31:4f:5a:fe:b8:51:61:34:6d:ea:ff:2c: f0:a2:a2:28:5a:e0:f5:01:38:31:da:22:5d:7e:41:f8:85:3f: 18:eb:f7:64:f5:e5:cd:b7:b9:22:dd:31:98:bc:a9:e6:e7:54: 29:6c:b8:0d:4b:20:46:66:31:a3:4b:8b:b2:ba:67:3e:6d:17: af:e0:ee:3b:49:b1:82:06:2f:64:fb:15:63:0a:20:91:79:56: ac:31:ec:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/8/sjSDaECPJ6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NTRjYWZlNjYtNDk1YS00YzcyLWFjNmYtMzcxNDE3YjgyZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYXV8sAyUB/aS7tC0vDaeXFABsSlxv2jQtnu iw/YDCFKwITywfUc+CapWHXM7makpxEN4wis7e17bJa1U7lAL7H0vtMMh7xOHLzr y7obD+3Aj0Ue5W2diNqY0yhum3cMfWeJqDOC3ceXVCjn+S34SS76W1zd1l82tu39 CU3kZQg3QjjLawssYMvo0fnb3m6hAsxZSQHxjpVj9MYmOLUqNKQi7EW8saqkussY sWKLuHbN5RYsffmXFvDTJiXjCGkFWFQXocsrD8PcnKeJDrJ2R4ozfFMyPDRkA4DO sy0rZFK1pEbov8bVWSV7zde37xoEdZTufP3gkGx93I2LOrwiDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzOUTrS4yyMThva7QthGygpAWwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2RkYTlmYTgtYjY5Yi0z Y2I0LTliZjEtNTJhZGY5OGYxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGBonN9n3YKBo5jup+BtTp4eFiN4+flo9WWc27RuNYduMnFNWK4xeBe j/KNwSA3R+9aonLCsYPE9Dp8riI0aGUnx+jn15FRb04Ck5Hf/ihDDTMniSfEQjL5 fTFw6E5HXPIpe3qt2YdS1q/p1Uz/UsMaYdjLlsFkHSRNIocT2QG7dlDtHzK+fi4L M2O1ISfI7cD8WQLXfZDKN0z0fGkB2LnEJ3Zl7o3jajFPWv64UWE0ber/LPCioiha 4PUBODHaIl1+QfiFPxjr92T15c23uSLdMZi8qebnVClsuA1LIEZmMaNLi7K6Zz5t F6/g7jtJsYIGL2T7FWMKIJF5Vqwx7M0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:10 2026 by rpki-client