$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa File: ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa (raw, json) Hash identifier: X4YIaBuNd3W9s5gpixQFN1JF5pKaMJCPYot4IuO2tBY= Subject key identifier: F9:00:EF:10:A6:A6:63:F7:AD:66:21:62:08:10:61:34:DF:F1:BC:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D39CF8B6611E15286B689B09C Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 15169 IP address blocks: 172.217.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:8b:66:11:e1:52:86:b6:89:b0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=7ec4a274-8fa7-4f25-8f54-e6be78e19835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5f:82:10:fc:7e:fc:e5:a0:e3:c8:08:d0:32: 8f:e6:7f:58:04:82:73:09:70:4d:b6:79:c2:1c:56: ae:ed:97:a4:02:f2:5f:73:d0:58:44:c0:4b:8c:4d: 6f:47:66:85:e6:8e:f0:c7:8f:8c:f6:31:c2:9a:87: 13:3d:73:49:52:ad:04:79:ca:79:aa:51:25:7a:7d: 91:28:d0:28:a7:37:19:25:9b:30:70:41:f1:b7:e0: e7:e1:65:0e:27:44:e8:c2:bb:53:5d:78:24:45:4e: 8d:26:fb:3b:a0:c2:eb:75:74:38:d3:0c:5f:ed:5f: 6d:54:f6:06:b0:48:49:ef:d0:1d:36:2e:fd:ca:3e: 5a:cb:aa:19:73:ee:12:13:f2:56:4e:4b:83:40:6d: 7a:27:6d:64:30:6d:c9:7f:e5:49:22:9e:ae:e8:9b: d8:ed:d4:5f:4d:32:0d:ca:db:d1:bf:a5:ca:1d:ef: d4:58:c8:4e:9c:02:8b:20:10:80:65:44:19:a4:66: be:a5:51:0e:bc:6b:b3:a7:ea:b2:f1:9a:ee:7b:0b: 6c:5d:c4:ae:07:d1:38:b4:c3:66:e2:c5:7a:59:7b: 0c:8b:47:27:10:ec:36:db:f1:4d:da:98:f9:79:69: 28:96:f0:c6:ec:a8:92:2b:8f:0e:2a:82:c9:f8:2d: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:00:EF:10:A6:A6:63:F7:AD:66:21:62:08:10:61:34:DF:F1:BC:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba069ff4-f55f-34a4-be69-a68cf15bf56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b5:a4:33:8d:b0:24:16:ac:c2:2e:ca:cb:10:ff:3b:d7:75: 3a:03:43:33:66:b0:95:0d:f2:4a:d4:0d:dc:5f:8b:82:57:72: 45:0e:89:42:7b:1d:85:72:da:6b:33:6b:17:fe:c9:c4:02:33: 43:17:36:4a:a1:1d:2c:c6:4b:0f:89:81:fd:56:d0:37:11:93: 6e:a6:3b:81:5f:e9:8f:f0:37:51:af:49:6b:0b:2b:c1:07:2e: 74:b2:88:e5:59:6a:60:f8:85:bf:79:01:d5:05:ba:07:3c:a0: 2a:3a:96:30:86:35:d5:bb:1d:8a:4c:87:53:cc:1c:9c:5a:0c: 0d:96:19:29:eb:15:d0:af:ab:2d:21:53:78:a7:fb:21:96:96: 3a:17:d7:99:9f:e1:74:83:5c:07:f4:23:27:6c:3e:9c:12:33: e0:13:8d:60:bc:a7:54:1f:63:92:15:28:68:0f:fb:c6:e3:44: 58:86:43:db:d4:e6:00:38:ec:13:bd:25:3d:05:9e:05:ec:44: d2:a2:c5:60:60:57:c0:06:aa:7a:3b:cb:68:24:ec:9f:f2:16: 7a:1f:e4:23:86:96:d5:ca:5b:a2:aa:e8:56:38:ea:97:e8:01: d6:f0:c2:ce:0a:74:c5:26:e6:ed:a0:83:43:ea:b8:6a:35:37: ce:99:a2:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4tmEeFShraJsJwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk N2VjNGEyNzQtOGZhNy00ZjI1LThmNTQtZTZiZTc4ZTE5ODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1+CEPx+/OWg48gI0DKP5n9YBIJzCXBNtnnC HFau7ZekAvJfc9BYRMBLjE1vR2aF5o7wx4+M9jHCmocTPXNJUq0Eecp5qlElen2R KNAopzcZJZswcEHxt+Dn4WUOJ0TowrtTXXgkRU6NJvs7oMLrdXQ40wxf7V9tVPYG sEhJ79AdNi79yj5ay6oZc+4SE/JWTkuDQG16J21kMG3Jf+VJIp6u6JvY7dRfTTIN ytvRv6XKHe/UWMhOnAKLIBCAZUQZpGa+pVEOvGuzp+qy8ZruewtsXcSuB9E4tMNm 4sV6WXsMi0cnEOw22/FN2pj5eWkolvDG7KiSK48OKoLJ+C2hOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkA7xCmpmP3rWYhYggQYTTf8bwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmEwNjlmZjQtZjU1Zi0z NGE0LWJlNjktYTY4Y2YxNWJmNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq1pDONsCQWrMIuyssQ/zvXdToDQzNmsJUN8krUDdxfi4JXckUOiUJ7 HYVy2mszaxf+ycQCM0MXNkqhHSzGSw+Jgf1W0DcRk26mO4Ff6Y/wN1GvSWsLK8EH LnSyiOVZamD4hb95AdUFugc8oCo6ljCGNdW7HYpMh1PMHJxaDA2WGSnrFdCvqy0h U3in+yGWljoX15mf4XSDXAf0IydsPpwSM+ATjWC8p1QfY5IVKGgP+8bjRFiGQ9vU 5gA47BO9JT0FngXsRNKixWBgV8AGqno7y2gk7J/yFnof5COGltXKW6Kq6FY46pfo Adbwws4KdMUm5u2gg0PquGo1N86Zopo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:38 2026 by rpki-client