$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa File: 4a004332-dbeb-38d1-8166-bb9de0e699b7.roa (raw, json) Hash identifier: fm0UdnPs38Wt43SJ/cYlbNq4g2wzZc7NI20aH2FkXog= Subject key identifier: 8F:3F:4B:49:54:75:59:39:03:14:C2:6A:01:20:FA:46:BE:F8:B6:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E0002742B0D07429DAC8E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:02:74:2b:0d:07:42:9d:ac:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a881dd60-f0eb-4fd8-aade-88b3e63899b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:e9:b0:a4:1a:86:4f:cd:d0:2e:fa:f0:6a: 05:ca:ba:09:05:de:71:66:91:2d:53:e3:85:f4:47: a0:a5:40:a5:d6:fc:6e:62:d4:86:ef:39:f9:a2:03: 2b:f7:5f:db:0f:79:7b:06:22:be:12:d8:8d:29:1c: 5d:0e:1c:07:e4:41:80:5a:62:4c:8c:16:74:4e:47: cf:6d:52:8c:a1:c7:bc:4b:3c:b6:55:06:2a:cc:44: b3:f5:82:77:a2:60:e2:50:8a:a0:df:b3:7f:6b:53: 0f:ea:11:da:3e:fa:56:1f:53:6e:79:5e:cd:da:8b: 04:39:fa:38:e3:8a:fa:d0:0a:e9:d6:61:de:a9:6f: 9a:36:8b:11:f9:8e:bb:a5:4e:2a:29:b4:5c:96:8e: a6:30:a7:f0:1b:b0:ff:ad:31:a7:dd:c7:b2:75:e8: ec:59:2d:a5:3e:98:68:3a:19:6e:3b:fd:a0:34:ac: b9:7b:48:03:f9:14:02:a7:55:11:92:02:fe:43:1a: e1:48:37:4a:6d:45:25:eb:a9:79:d2:92:97:ad:9f: 2d:a4:b3:70:da:11:71:19:9c:e2:0d:2d:49:73:d3: e8:4b:d6:51:99:49:4b:db:36:94:c2:49:c2:67:a7: 7e:b3:f9:24:f9:55:cc:3e:31:e7:30:70:dc:41:b3: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3F:4B:49:54:75:59:39:03:14:C2:6A:01:20:FA:46:BE:F8:B6:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a004332-dbeb-38d1-8166-bb9de0e699b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:df:c1:2c:96:2d:07:e1:c9:3b:25:39:91:4b:89:08:74:fc: 1e:2e:4f:46:a9:be:80:9d:3c:52:62:f2:17:da:ed:49:05:d4: ec:14:23:e8:58:10:c2:05:57:53:2e:01:7f:0a:27:ee:33:06: 50:85:08:fb:cd:e4:40:91:e7:0e:d4:78:fc:41:de:1a:18:55: 97:c6:fd:dc:1c:8c:0b:57:ab:b2:bf:9c:2c:a3:8f:9b:1f:49: d2:f6:77:b4:9c:a6:e3:fc:5a:e8:92:fd:32:79:ed:64:39:57: fb:f4:7a:fb:ff:ad:e3:2c:ce:ca:bb:64:73:09:25:58:72:60: 41:be:25:43:1d:38:41:9c:cb:6f:ef:9f:70:7f:b8:64:e3:00: 18:88:89:ac:79:4a:b8:1c:26:7c:df:63:39:5e:9a:f6:3f:2e: 89:83:23:2a:76:e2:54:ad:7f:ec:cc:66:cd:7d:2c:e2:78:f6: eb:eb:70:fc:10:9d:e5:cb:7f:0e:b3:f0:30:d3:77:00:61:e7: aa:62:a1:59:b3:9c:1c:f1:72:fa:6a:17:3a:bc:05:15:95:25: f5:ed:55:d4:e3:12:2f:5f:57:49:fd:90:5d:88:26:20:2a:d6: 35:7c:d4:6a:1f:1b:03:13:38:7b:06:61:98:a6:ed:c7:14:ce: 39:59:9c:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAJ0Kw0HQp2sjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTg4MWRkNjAtZjBlYi00ZmQ4LWFhZGUtODhiM2U2Mzg5OWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWvpsKQahk/N0C768GoFyroJBd5xZpEtU+OF 9EegpUCl1vxuYtSG7zn5ogMr91/bD3l7BiK+EtiNKRxdDhwH5EGAWmJMjBZ0TkfP bVKMoce8Szy2VQYqzESz9YJ3omDiUIqg37N/a1MP6hHaPvpWH1NueV7N2osEOfo4 44r60Arp1mHeqW+aNosR+Y67pU4qKbRclo6mMKfwG7D/rTGn3ceydejsWS2lPpho OhluO/2gNKy5e0gD+RQCp1URkgL+QxrhSDdKbUUl66l50pKXrZ8tpLNw2hFxGZzi DS1Jc9PoS9ZRmUlL2zaUwknCZ6d+s/kk+VXMPjHnMHDcQbPXgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8/S0lUdVk5AxTCagEg+ka++LZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGEwMDQzMzItZGJlYi0z OGQxLTgxNjYtYmI5ZGUwZTY5OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHfwSyWLQfhyTslOZFLiQh0/B4uT0apvoCdPFJi8hfa7UkF1OwUI+hY EMIFV1MuAX8KJ+4zBlCFCPvN5ECR5w7UePxB3hoYVZfG/dwcjAtXq7K/nCyjj5sf SdL2d7ScpuP8WuiS/TJ57WQ5V/v0evv/reMszsq7ZHMJJVhyYEG+JUMdOEGcy2/v n3B/uGTjABiIiax5SrgcJnzfYzlemvY/LomDIyp24lStf+zMZs19LOJ49uvrcPwQ neXLfw6z8DDTdwBh56pioVmznBzxcvpqFzq8BRWVJfXtVdTjEi9fV0n9kF2IJiAq 1jV81GofGwMTOHsGYZim7ccUzjlZnEU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:48 2026 by rpki-client