$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa File: b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa (raw, json) Hash identifier: cKXUVoZ3bwEUZv3HBwpDP60hIG+ElxP41I9CviWkjIU= Subject key identifier: 41:B6:7B:20:1F:D0:81:B1:D7:B1:F5:CA:C2:72:09:1F:1F:89:7D:A1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E4011C23F195C9AF4080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 209.85.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e4:01:1c:23:f1:95:c9:af:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=51eaa431-975a-45e0-84c6-6a5a980aa028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:b8:61:20:19:a3:95:59:c1:f0:b5:d3:39: 74:4f:c1:d0:91:2c:4f:9b:03:4b:ca:c5:fe:66:d2: 3a:54:4e:4a:46:10:9d:96:30:ae:bf:53:18:82:9d: 37:4f:e4:7f:cb:44:64:55:a7:b4:14:3c:60:0b:69: bd:46:a2:c4:a2:00:ea:09:a9:91:43:ba:eb:1c:57: 21:8f:5b:1e:2c:34:20:fd:85:ab:de:c6:66:c5:8a: a0:fe:59:36:fa:d5:77:fe:a7:ec:78:b3:5f:ae:92: 16:71:cb:c4:01:19:5d:57:c5:7f:82:77:3f:87:1b: b0:07:e5:e3:7d:70:51:f2:e6:30:18:08:71:c9:e9: 00:e0:c2:72:3e:61:27:2b:e6:2d:63:0c:82:69:2c: e2:be:c8:b4:2e:b6:eb:49:ba:49:66:cf:ee:dd:59: 8f:2c:ae:97:8e:85:c3:3d:61:76:af:e2:cc:d7:c0: f0:67:9c:e9:11:91:d3:ca:1f:e9:04:e1:b6:48:0b: a0:8b:97:54:5e:59:f5:f5:e3:62:96:90:ba:22:e3: 58:ff:14:3c:06:1e:cd:ab:7a:64:8c:13:06:a2:83: dc:cb:39:ee:24:0a:b0:47:2b:a4:56:d2:ed:94:d9: c1:c5:7e:4d:e6:33:19:15:19:ed:bc:2a:63:ad:a9: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B6:7B:20:1F:D0:81:B1:D7:B1:F5:CA:C2:72:09:1F:1F:89:7D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ff:50:b7:4e:ec:54:f0:de:f4:b8:dc:e7:2d:77:62:16:67: f3:aa:3a:63:64:4a:43:14:41:31:67:21:f2:b5:59:2d:b0:fa: d7:95:af:9a:16:e7:8b:63:15:07:72:e5:10:61:72:3d:2b:bd: 7d:e9:e0:5d:2d:14:63:5d:cf:83:62:ed:d5:19:55:59:64:84: 90:d0:44:52:48:3f:70:dd:d6:73:65:c7:b2:6c:15:e5:01:be: c3:7f:27:ac:51:db:f6:ee:66:06:f5:9d:1d:6e:c3:65:b2:4f: 7c:de:8c:ad:3b:34:da:a2:45:ee:1d:28:e9:ac:66:31:d7:07: bd:c8:48:57:91:04:74:ab:e5:b7:e4:bc:26:e2:91:e7:75:15: 23:1a:b8:33:bf:50:3b:dc:55:e4:f3:7b:d3:11:af:2a:ff:e1: 5d:41:2f:b9:82:8c:a6:7e:2e:22:a9:97:41:93:5d:c4:33:1e: 32:91:82:de:75:2c:7a:78:20:9c:70:45:44:d0:01:8b:7f:05: fe:29:4e:f1:66:33:24:35:bd:b2:39:9b:16:82:26:bd:74:6a: d6:e2:13:f7:c7:97:c5:8d:ef:8e:53:f3:2a:19:fa:61:8f:f1: 5e:ee:12:ce:4a:ed:84:84:24:a3:cb:11:2f:2f:f4:4b:fb:69: 24:f0:31:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OQBHCPxlcmvQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTFlYWE0MzEtOTc1YS00NWUwLTg0YzYtNmE1YTk4MGFhMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFW4YSAZo5VZwfC10zl0T8HQkSxPmwNLysX+ ZtI6VE5KRhCdljCuv1MYgp03T+R/y0RkVae0FDxgC2m9RqLEogDqCamRQ7rrHFch j1seLDQg/YWr3sZmxYqg/lk2+tV3/qfseLNfrpIWccvEARldV8V/gnc/hxuwB+Xj fXBR8uYwGAhxyekA4MJyPmEnK+YtYwyCaSzivsi0LrbrSbpJZs/u3VmPLK6XjoXD PWF2r+LM18DwZ5zpEZHTyh/pBOG2SAugi5dUXln19eNilpC6IuNY/xQ8Bh7Nq3pk jBMGooPcyznuJAqwRyukVtLtlNnBxX5N5jMZFRntvCpjrak8XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG2eyAf0IGx17H1ysJyCR8fiX2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjNlMDZkYzUtZWM5OC0z Njg2LTg0YzQtNmQ3NmQ3ODgwNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7/ULdO7FTw3vS43Octd2IWZ/OqOmNkSkMUQTFnIfK1WS2w+teVr5oW 54tjFQdy5RBhcj0rvX3p4F0tFGNdz4Ni7dUZVVlkhJDQRFJIP3Dd1nNlx7JsFeUB vsN/J6xR2/buZgb1nR1uw2WyT3zejK07NNqiRe4dKOmsZjHXB73ISFeRBHSr5bfk vCbiked1FSMauDO/UDvcVeTze9MRryr/4V1BL7mCjKZ+LiKpl0GTXcQzHjKRgt51 LHp4IJxwRUTQAYt/Bf4pTvFmMyQ1vbI5mxaCJr10atbiE/fHl8WN745T8yoZ+mGP 8V7uEs5K7YSEJKPLES8v9Ev7aSTwMZs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:16 2026 by rpki-client