$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f3267c6-2b53-3981-806e-7238b31139b4.roa File: 6f3267c6-2b53-3981-806e-7238b31139b4.roa (raw, json) Hash identifier: qVCKHBw1H1J7/otw5gbSYkYiAlv2Baq4Ey48FUfql5g= Subject key identifier: BB:0C:CE:F9:8E:19:1E:EA:2E:61:25:70:05:F4:E7:72:65:D9:B6:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA4FD0067C1F8677D15680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f3267c6-2b53-3981-806e-7238b31139b4.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 64.233.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:4f:d0:06:7c:1f:86:77:d1:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=8db4955f-438c-41b6-a6d6-eb8a07d867db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:01:68:2a:a8:09:f8:46:2b:dd:af:33:98: a2:6a:af:9a:42:53:88:e8:eb:c6:7e:63:c8:73:9e: ef:9a:83:cc:36:0b:f4:ca:3a:b7:a4:69:9f:52:e8: d6:65:ea:96:03:fa:44:6e:b7:ff:41:91:23:e7:d0: 9b:a0:c4:9f:6f:c5:76:ef:a8:2f:c4:f7:ea:cc:27: e1:c8:0b:3e:5c:42:9e:97:7b:c8:99:a8:de:73:5e: 9e:a5:52:aa:38:da:4a:26:73:28:25:df:d7:30:76: dc:16:bc:b7:68:52:b1:c0:cc:9a:c5:01:45:e5:67: 52:0c:98:a0:8f:e2:9f:62:17:9c:5e:50:25:bc:f3: 89:f7:99:d2:3e:18:69:d1:57:3e:b4:8d:b3:1c:e6: 1c:5e:76:6e:61:dd:47:ad:ed:7f:ea:ac:c0:97:a1: f8:75:70:18:6a:4e:ba:1f:57:35:e8:00:f8:f9:67: 6e:c0:f1:c4:1d:96:1d:8e:41:b7:ec:ee:c7:2b:be: 53:64:dc:ec:20:75:fc:05:61:ac:a6:c4:64:8f:1f: e5:31:fd:4b:af:88:7c:3a:af:0b:17:5c:29:9b:0a: f9:92:79:30:6f:9f:60:59:44:2f:b0:97:6f:9b:cf: 65:8b:9a:13:a8:f5:f3:a1:47:cc:1d:63:27:6c:dc: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0C:CE:F9:8E:19:1E:EA:2E:61:25:70:05:F4:E7:72:65:D9:B6:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f3267c6-2b53-3981-806e-7238b31139b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d7:9e:bb:5a:2b:3e:e7:9f:df:71:c8:09:c3:83:29:47:56: c1:cf:b0:b3:ef:b7:d4:8f:e6:b5:23:17:5a:e6:c6:a7:78:f4: b4:a9:a6:25:42:0f:43:09:ff:91:85:40:c9:5d:9c:45:41:b4: 5f:70:3c:c7:c9:17:94:c1:e2:d0:75:9d:36:d4:0c:f6:7e:ae: dc:37:ff:8b:be:be:61:d8:6d:c8:ef:ed:4a:24:a9:d5:f8:9c: d2:91:c7:bc:a2:dc:5f:c1:24:07:25:dc:cf:c1:0a:01:0d:44: 42:af:d7:47:f2:b9:87:66:b7:1c:ce:54:cd:dc:64:c8:38:d1: fe:87:39:9f:ba:18:27:de:90:eb:d2:f7:c7:7a:de:ae:c7:74: 81:b6:cf:a3:bb:0c:d1:6f:72:a1:81:34:e1:9a:e7:dd:bf:7c: af:c3:dc:5b:b6:19:ea:ab:b7:2c:f5:90:ee:36:28:02:ff:4e: 41:56:40:63:7a:65:95:ff:af:9f:a5:f0:92:3c:75:aa:53:5b: fe:38:1a:d4:ab:4c:a3:f2:cc:b0:6f:fc:05:28:e3:fb:d1:d6: cd:73:02:bf:18:61:8e:51:7c:29:c0:c8:9a:2d:08:3a:70:22: d6:e2:ac:d2:f3:70:b5:e9:ca:e8:34:7b:33:42:88:07:cb:9c: ac:4d:23:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqk/QBnwfhnfRVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OGRiNDk1NWYtNDM4Yy00MWI2LWE2ZDYtZWI4YTA3ZDg2N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiQBaCqoCfhGK92vM5iiaq+aQlOI6OvGfmPI c57vmoPMNgv0yjq3pGmfUujWZeqWA/pEbrf/QZEj59CboMSfb8V276gvxPfqzCfh yAs+XEKel3vImajec16epVKqONpKJnMoJd/XMHbcFry3aFKxwMyaxQFF5WdSDJig j+KfYhecXlAlvPOJ95nSPhhp0Vc+tI2zHOYcXnZuYd1Hre1/6qzAl6H4dXAYak66 H1c16AD4+WduwPHEHZYdjkG37O7HK75TZNzsIHX8BWGspsRkjx/lMf1Lr4h8Oq8L F1wpmwr5knkwb59gWUQvsJdvm89li5oTqPXzoUfMHWMnbNzQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsMzvmOGR7qLmElcAX053Jl2bYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmYzMjY3YzYtMmI1My0z OTgxLTgwNmUtNzIzOGIzMTEzOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALXnrtaKz7nn99xyAnDgylHVsHPsLPvt9SP5rUjF1rmxqd49LSppiVC D0MJ/5GFQMldnEVBtF9wPMfJF5TB4tB1nTbUDPZ+rtw3/4u+vmHYbcjv7UokqdX4 nNKRx7yi3F/BJAcl3M/BCgENREKv10fyuYdmtxzOVM3cZMg40f6HOZ+6GCfekOvS 98d63q7HdIG2z6O7DNFvcqGBNOGa592/fK/D3Fu2Geqrtyz1kO42KAL/TkFWQGN6 ZZX/r5+l8JI8dapTW/44GtSrTKPyzLBv/AUo4/vR1s1zAr8YYY5RfCnAyJotCDpw ItbirNLzcLXpyug0ezNCiAfLnKxNIzw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:29 2026 by rpki-client