$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa File: c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa (raw, json) Hash identifier: wIW+kgkfWKpLxbpy9f0QnSUrv1QMDSeK1bzZhkxD8AQ= Subject key identifier: 25:40:C5:6D:B5:CE:BB:D2:70:C9:53:8F:68:3D:D5:D5:6A:72:06:A1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D39CF9DE55C7A6F957FE9CD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 15169 IP address blocks: 172.217.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9d:e5:5c:7a:6f:95:7f:e9:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=a42e28b0-a6d1-4651-9712-7184d2d2cfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:ef:fa:22:c6:72:f6:e2:68:17:1f:72:ae: 8a:73:3c:10:5c:93:3c:52:16:1c:91:27:e1:0f:1f: 91:76:39:55:42:c8:21:42:ec:8c:43:b4:56:67:fd: a2:8e:27:ae:a5:fa:92:ad:6d:4f:50:95:9a:70:22: 47:a7:b5:54:08:39:81:8a:eb:0a:f9:3f:3f:ac:b2: fe:75:04:b9:b7:f9:46:2d:f3:01:e0:fc:80:0b:6f: 43:86:ee:d0:61:f5:48:a3:85:90:d3:ca:d6:61:9d: f3:af:9e:b2:ff:26:d7:ae:45:a5:be:16:cd:8d:d9: 91:76:84:81:38:b4:c4:4c:2a:f1:bc:5c:d4:31:51: 34:50:62:ed:a1:cb:bb:45:f0:3c:89:ef:45:c7:a5: b5:6e:5a:64:88:f0:81:8a:1a:ec:76:2f:a3:74:8c: e8:52:b2:35:b1:5f:8f:44:56:e9:cd:04:56:fd:50: a0:c6:aa:73:07:dd:a0:3c:8c:82:a4:8f:8a:88:57: 35:bb:bf:65:90:b6:dd:64:bd:38:ec:cb:66:ca:10: 12:ec:fd:57:2e:35:c1:e8:dd:67:ae:b6:f8:41:f1: bc:68:2a:ce:ff:d1:87:0b:1f:11:0d:c8:ff:c5:85: e3:84:54:0b:f2:94:17:e5:87:c8:49:90:2d:b7:11: d9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:40:C5:6D:B5:CE:BB:D2:70:C9:53:8F:68:3D:D5:D5:6A:72:06:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c371ee8b-4fe1-344a-acdd-fc7e9e2442c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d2:10:61:e7:0e:5d:e6:28:57:9e:e9:c6:b6:f7:96:78:49: 6a:7c:80:ec:30:0a:50:2f:16:b1:e5:de:d6:e8:ed:01:b2:1a: 5e:57:da:dd:a3:03:71:c4:9c:d8:16:64:ad:9a:2e:f9:44:d7: 85:be:a8:d0:1c:b4:a6:11:3c:cb:29:62:ea:c8:53:a8:6d:e0: ec:cb:9f:f9:0f:3f:14:55:72:b2:a8:c4:0a:71:56:29:c6:97: 9d:b5:bf:c2:1d:a7:a9:f2:a6:a1:9f:57:2a:ec:fe:03:fa:7b: 7d:f4:f6:86:c6:23:1a:d7:e3:24:a3:1f:4e:06:5d:37:2f:73: e5:ec:80:10:3f:0d:4e:d2:dd:36:d8:c4:bb:ff:2f:2b:2b:e1: 9b:73:99:92:b5:b3:81:cc:c1:3f:69:cb:f6:45:d1:76:8c:67: 51:c9:6b:84:a2:67:a0:03:cb:ea:f7:f8:9b:7d:22:85:ef:fa: cc:d8:f1:4d:74:b6:3e:6d:05:a1:c8:01:1d:ab:3d:2d:81:fe: 67:c2:11:f5:a5:dc:51:7f:03:69:1f:38:2e:a2:69:0c:b0:75: 32:f6:4b:4b:a2:31:55:c1:16:d7:d2:c8:e1:2a:64:2d:29:79: 36:0d:46:4a:f7:5f:93:7f:d4:37:7c:f3:b9:d6:21:63:fc:02: b4:25:1e:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z53lXHpvlX/pzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YTQyZTI4YjAtYTZkMS00NjUxLTk3MTItNzE4NGQyZDJjZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hHv+iLGcvbiaBcfcq6KczwQXJM8UhYckSfh Dx+RdjlVQsghQuyMQ7RWZ/2ijieupfqSrW1PUJWacCJHp7VUCDmBiusK+T8/rLL+ dQS5t/lGLfMB4PyAC29Dhu7QYfVIo4WQ08rWYZ3zr56y/ybXrkWlvhbNjdmRdoSB OLTETCrxvFzUMVE0UGLtocu7RfA8ie9Fx6W1blpkiPCBihrsdi+jdIzoUrI1sV+P RFbpzQRW/VCgxqpzB92gPIyCpI+KiFc1u79lkLbdZL047MtmyhAS7P1XLjXB6N1n rrb4QfG8aCrO/9GHCx8RDcj/xYXjhFQL8pQX5YfISZAttxHZzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVAxW21zrvScMlTj2g91dVqcgahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzM3MWVlOGItNGZlMS0z NDRhLWFjZGQtZmM3ZTllMjQ0MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7SEGHnDl3mKFee6ca295Z4SWp8gOwwClAvFrHl3tbo7QGyGl5X2t2j A3HEnNgWZK2aLvlE14W+qNActKYRPMspYurIU6ht4OzLn/kPPxRVcrKoxApxVinG l521v8Idp6nypqGfVyrs/gP6e3309obGIxrX4ySjH04GXTcvc+XsgBA/DU7S3TbY xLv/Lysr4ZtzmZK1s4HMwT9py/ZF0XaMZ1HJa4SiZ6ADy+r3+Jt9IoXv+szY8U10 tj5tBaHIAR2rPS2B/mfCEfWl3FF/A2kfOC6iaQywdTL2S0uiMVXBFtfSyOEqZC0p eTYNRkr3X5N/1Dd887nWIWP8ArQlHqE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:46 2026 by rpki-client