$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa File: a061a393-c24b-3e7d-890c-891cf39b13c9.roa (raw, json) Hash identifier: HCTCUZFXS4u61qkal9RU+IYVTWWZpbxB3VDB7Hkl5c0= Subject key identifier: C5:A7:56:96:CE:59:5D:B2:B2:BF:44:C1:D3:9A:05:48:D5:00:62:DE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E0006D5C4FB2A44B097F8A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:06:d5:c4:fb:2a:44:b0:97:f8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=c9baacbf-10ae-4984-bdd5-47947b2816ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:96:ee:8b:6a:67:d8:a4:92:8f:1c:55:63:57: de:fa:d9:95:b2:17:c5:94:87:c6:22:fd:ec:9c:48: 4d:98:56:e5:01:84:9e:a5:68:ff:a1:18:a9:6d:a3: 85:7a:fb:80:49:03:c8:ab:e4:7f:08:70:15:5f:8d: 1e:39:f6:b4:f4:35:3a:3d:88:90:78:32:7f:7f:ac: aa:85:62:24:3d:ac:4c:af:b7:3c:12:f1:ce:47:b5: 46:00:f0:df:ea:3d:87:ba:ac:59:c1:3e:07:c7:34: b3:ee:50:86:cd:0a:25:b9:9d:52:a6:25:1b:fd:26: 8a:6d:12:d2:1a:f4:03:ff:7d:91:4f:d8:67:14:46: 65:df:76:20:f3:e5:23:c3:14:4d:9c:3b:39:39:8b: 92:96:91:e9:66:12:67:d1:cf:55:60:4a:6c:2c:7d: 81:e7:2f:fe:74:28:3b:7c:9f:da:da:62:94:e6:1b: 37:2b:ea:e1:3a:e4:11:4b:c4:22:4e:a2:d5:61:4e: 38:3b:2d:a9:4c:67:0f:92:80:a8:1b:5d:f6:08:5d: 3a:63:a9:1b:47:71:52:ec:f6:c1:14:f8:95:73:2c: 6c:8a:ad:32:cd:42:cf:04:1a:a0:4c:d3:be:c3:d1: 92:30:f5:30:25:9a:34:fc:6d:db:7f:10:32:9e:44: 71:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:56:96:CE:59:5D:B2:B2:BF:44:C1:D3:9A:05:48:D5:00:62:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a061a393-c24b-3e7d-890c-891cf39b13c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:33:13:78:fe:22:45:6d:cb:ed:f8:70:40:15:67:1a:3a:dd: 52:69:79:c6:75:31:60:03:70:3e:76:da:06:e9:d1:db:63:b3: c9:a9:00:11:3e:72:77:c1:8a:da:36:71:6d:9d:0e:d6:66:ae: 4a:96:69:c8:ef:a3:62:a3:6f:7f:a4:4f:63:32:32:96:30:25: be:3a:9a:5c:d4:35:6b:da:e4:1b:33:ff:bd:23:29:69:76:c6: 59:b8:c8:1d:8e:83:fd:c9:4b:7d:4a:3d:da:1b:cd:b1:6a:d1: 84:b1:33:1a:3a:a4:07:d2:0d:12:ce:6a:a6:cf:8e:20:c8:a6: 94:a5:8a:43:d6:94:40:11:95:f7:2e:64:c0:c9:f6:e7:34:84: c6:96:8c:26:05:7f:75:18:8d:78:55:60:a4:7e:68:73:79:0a: f6:2b:3f:b8:8b:5d:df:53:24:09:ac:92:fc:65:70:ef:49:d7: f6:ea:c1:7b:02:35:73:b1:d1:fd:a9:42:f6:00:95:29:85:6d: 6b:a5:a6:6d:7f:1e:3f:02:76:2c:92:41:8e:3e:e5:df:3e:c7: 15:84:31:44:43:77:e6:d1:7e:80:e2:7f:0c:4a:1b:73:87:6f: ad:60:87:99:20:be:00:e0:b9:6e:53:45:eb:77:76:f8:b7:af: 6b:e3:c0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAbVxPsqRLCX+KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YzliYWFjYmYtMTBhZS00OTg0LWJkZDUtNDc5NDdiMjgxNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZbui2pn2KSSjxxVY1fe+tmVshfFlIfGIv3s nEhNmFblAYSepWj/oRipbaOFevuASQPIq+R/CHAVX40eOfa09DU6PYiQeDJ/f6yq hWIkPaxMr7c8EvHOR7VGAPDf6j2HuqxZwT4HxzSz7lCGzQoluZ1SpiUb/SaKbRLS GvQD/32RT9hnFEZl33Yg8+UjwxRNnDs5OYuSlpHpZhJn0c9VYEpsLH2B5y/+dCg7 fJ/a2mKU5hs3K+rhOuQRS8QiTqLVYU44Oy2pTGcPkoCoG132CF06Y6kbR3FS7PbB FPiVcyxsiq0yzULPBBqgTNO+w9GSMPUwJZo0/G3bfxAynkRxzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWnVpbOWV2ysr9EwdOaBUjVAGLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA2MWEzOTMtYzI0Yi0z ZTdkLTg5MGMtODkxY2YzOWIxM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgzE3j+IkVty+34cEAVZxo63VJpecZ1MWADcD522gbp0dtjs8mpABE+ cnfBito2cW2dDtZmrkqWacjvo2Kjb3+kT2MyMpYwJb46mlzUNWva5Bsz/70jKWl2 xlm4yB2Og/3JS31KPdobzbFq0YSxMxo6pAfSDRLOaqbPjiDIppSlikPWlEARlfcu ZMDJ9uc0hMaWjCYFf3UYjXhVYKR+aHN5CvYrP7iLXd9TJAmskvxlcO9J1/bqwXsC NXOx0f2pQvYAlSmFbWulpm1/Hj8CdiySQY4+5d8+xxWEMURDd+bRfoDifwxKG3OH b61gh5kgvgDguW5TRet3dvi3r2vjwBE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:45 2026 by rpki-client