$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa File: 52ab951c-a52a-33ca-832a-3433fe906f80.roa (raw, json) Hash identifier: 8bzKKFiKQb3zjJgS7SE5SseXl1D4t+iKnlI29eCJ1U4= Subject key identifier: F2:B4:CE:BD:0E:96:B7:71:49:BC:90:C3:FF:90:A5:E6:E4:F7:2A:7D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D143D55450EE98DA2BE9BD2E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:55:45:0e:e9:8d:a2:be:9b:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=f0b1a7cf-49e6-4c38-ab14-81b4ada4621d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:3c:7a:97:ae:28:80:93:2b:70:63:de:9f: 11:f2:5d:9b:0f:a1:47:81:c7:12:4c:46:4b:49:a1: 27:de:30:7a:55:5f:8d:44:9d:24:0c:ba:24:57:61: 1a:7f:70:81:a5:bf:65:9a:99:fc:5c:72:0e:98:5f: c0:79:e9:2d:1d:99:f1:6d:62:42:7b:43:87:dc:68: 03:19:14:4d:7c:f0:9e:f3:93:50:cb:ac:ec:47:56: 7c:a9:ba:89:10:aa:ac:7a:fd:ca:06:c3:a1:3b:28: ea:55:35:ed:c7:f6:9f:95:93:62:0c:33:06:9f:23: 04:96:e0:76:d5:56:54:56:7d:5f:df:0d:15:70:cc: 8e:97:2d:46:ce:1a:62:66:4e:c2:22:f8:ed:e9:52: d5:ca:28:ef:fe:e9:6d:01:4c:3c:77:6b:a8:97:1a: b0:1e:ef:d0:30:7f:7a:a7:39:7b:22:d6:91:09:07: 6d:e3:35:b5:04:d1:86:e8:b0:30:0e:a5:1e:dd:93: 89:a9:04:79:c4:ac:f0:a1:f9:ef:d0:5f:f8:cb:04: e1:77:0d:54:13:22:ed:47:be:d9:0c:42:d8:ed:fe: e1:14:02:7a:bb:ac:e8:1e:0d:33:f0:b9:61:88:8a: e8:67:79:8d:da:e1:3a:d4:13:28:1b:61:f0:17:66: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B4:CE:BD:0E:96:B7:71:49:BC:90:C3:FF:90:A5:E6:E4:F7:2A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2b:19:f3:42:41:96:9f:f1:09:6a:ca:58:bc:60:18:6a:8c: 1f:83:d1:a1:34:47:a4:c4:0a:dd:96:fb:db:b9:a2:c6:e1:a1: ad:e0:ef:f7:76:55:85:0e:91:dd:0b:2b:28:b1:fc:82:c0:26: 9f:c8:7c:e5:07:d3:41:b3:4d:54:46:fe:97:e6:c6:37:cd:6d: 29:f6:e9:fb:ca:a8:e3:38:d2:84:a2:04:c0:1f:e1:38:d3:8e: a2:50:da:00:51:8b:31:11:ba:16:c1:a5:07:4c:30:25:2d:bd: 1c:81:1d:4c:40:27:8e:f4:8b:1a:da:7d:f2:8a:2b:24:83:e5: c4:30:da:05:02:3e:5c:75:4c:4d:3d:9b:47:b0:06:c4:3b:dc: b2:66:bf:4f:b0:9b:4d:94:f1:04:55:69:24:bc:9e:da:96:1c: c1:75:c6:21:5d:a8:1e:44:25:91:b1:8a:60:78:58:77:83:1e: 35:ab:61:57:dc:29:dc:30:5f:fd:18:fc:77:5c:37:ac:46:8d: 87:33:da:a9:5a:22:37:8d:ce:f3:e6:60:5f:da:f3:be:80:59: ad:7d:24:ac:48:7f:22:c3:d9:3c:17:26:72:aa:76:ed:cc:1e: a3:dc:94:41:88:cb:95:7c:df:0a:6d:ce:95:93:fd:7c:c3:5b: 0a:45:f5:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPVVFDumNor6b0uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjBiMWE3Y2YtNDllNi00YzM4LWFiMTQtODFiNGFkYTQ2MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7Q8epeuKICTK3Bj3p8R8l2bD6FHgccSTEZL SaEn3jB6VV+NRJ0kDLokV2Eaf3CBpb9lmpn8XHIOmF/AeektHZnxbWJCe0OH3GgD GRRNfPCe85NQy6zsR1Z8qbqJEKqsev3KBsOhOyjqVTXtx/aflZNiDDMGnyMEluB2 1VZUVn1f3w0VcMyOly1GzhpiZk7CIvjt6VLVyijv/ultAUw8d2uolxqwHu/QMH96 pzl7ItaRCQdt4zW1BNGG6LAwDqUe3ZOJqQR5xKzwofnv0F/4ywThdw1UEyLtR77Z DELY7f7hFAJ6u6zoHg0z8LlhiIroZ3mN2uE61BMoG2HwF2aILwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK0zr0OlrdxSbyQw/+Qpebk9yp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTJhYjk1MWMtYTUyYS0z M2NhLTgzMmEtMzQzM2ZlOTA2ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAErGfNCQZaf8Qlqyli8YBhqjB+D0aE0R6TECt2W+9u5osbhoa3g7/d2 VYUOkd0LKyix/ILAJp/IfOUH00GzTVRG/pfmxjfNbSn26fvKqOM40oSiBMAf4TjT jqJQ2gBRizERuhbBpQdMMCUtvRyBHUxAJ470ixraffKKKySD5cQw2gUCPlx1TE09 m0ewBsQ73LJmv0+wm02U8QRVaSS8ntqWHMF1xiFdqB5EJZGximB4WHeDHjWrYVfc KdwwX/0Y/HdcN6xGjYcz2qlaIjeNzvPmYF/a876AWa19JKxIfyLD2TwXJnKqdu3M HqPclEGIy5V83wptzpWT/XzDWwpF9d8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:09 2026 by rpki-client