$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4013574-3584-3d13-8561-b1935a5229a8.roa File: e4013574-3584-3d13-8561-b1935a5229a8.roa (raw, json) Hash identifier: BcVRRS4iHqAvmlurK82O0gOaH/Vv5MJn1GOrZQb3wfg= Subject key identifier: 04:E4:53:BA:87:05:D7:26:BA:EC:74:5A:35:E9:B9:DD:98:B8:BA:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFCF0F65D8283B54C87900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4013574-3584-3d13-8561-b1935a5229a8.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:cf:0f:65:d8:28:3b:54:c8:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=29cc5f6d-0408-4bb1-b565-b5344eabb922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:53:96:64:4b:fd:d6:c6:50:4f:52:17:18: 68:9e:a3:c5:e7:5e:67:0e:31:16:19:a2:2f:aa:cc: 9a:6c:7f:07:e0:26:05:f0:ad:12:ca:c1:48:71:a3: 7c:9f:7f:66:ca:52:45:22:c8:e3:cf:4a:c0:73:da: b9:32:a4:95:b7:21:ea:0d:33:fd:d9:a7:14:fc:66: a5:15:74:61:a7:9d:50:89:e1:fc:46:cb:9e:7a:41: b3:96:b8:4b:fb:23:1e:51:6c:65:7e:e8:db:51:d5: 65:8d:d4:ac:9b:0e:03:cf:52:98:06:ee:30:ce:52: 94:18:24:ec:5f:18:23:2d:76:4a:90:74:8a:dc:42: 50:91:ae:28:1b:a4:de:a6:ff:25:e2:de:b4:45:a3: 42:71:1e:1e:18:82:c6:58:c3:32:a5:5c:6a:c8:8b: 9e:2d:12:1c:fa:79:69:b5:d2:1d:e5:fb:70:35:28: b3:aa:e1:57:c6:ac:4f:9a:68:73:eb:91:d8:f3:b6: 5f:63:69:3a:8c:7a:dc:4e:86:ea:3e:ef:e0:73:a6: a8:0d:05:d8:2c:90:15:e1:1a:f0:2e:2a:10:be:48: 4e:a0:7f:98:4d:5e:06:19:cc:cc:5f:e6:8d:d4:52: c3:3e:61:f4:04:92:bf:e1:34:e6:9e:9c:4f:97:ac: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E4:53:BA:87:05:D7:26:BA:EC:74:5A:35:E9:B9:DD:98:B8:BA:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4013574-3584-3d13-8561-b1935a5229a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:24:32:9d:75:77:ba:11:96:3a:91:23:da:0c:3a:78:cf:2d: 24:30:20:6a:8a:2a:ca:b0:a0:8e:e7:d1:1e:c2:5d:38:24:ae: 64:80:ec:84:27:ee:f6:1f:60:be:ba:ec:de:61:56:22:c0:e9: 91:a4:6b:66:15:78:a4:9f:f3:9e:0f:93:8b:5e:c7:3a:4d:ca: 0c:1f:96:cc:8a:14:7f:a9:d8:c9:ef:c7:f0:ff:a6:9e:28:ec: f2:e8:6f:47:3c:83:75:d6:99:19:4c:2f:f5:ba:a0:f1:71:0b: cf:d1:39:a8:c0:f2:c2:f3:95:ed:55:91:51:f3:9e:d7:b6:fc: fa:e9:50:c6:85:23:de:d2:98:71:22:91:05:c1:5f:16:5f:aa: 3c:b4:6f:ae:c7:c8:9c:8f:8c:dc:79:af:7a:03:dc:7d:b0:79: d1:1c:95:39:9c:5d:a7:21:00:9c:0f:c6:1b:d8:8a:34:fd:7b: 19:e5:3e:14:64:74:86:76:d4:83:09:26:c3:9d:4c:8d:27:37: e7:5d:42:51:14:ed:fb:b2:cd:33:a7:ac:b4:fb:05:cd:6a:70: b0:23:7b:fb:a9:d0:55:09:f1:23:83:0b:13:c1:4a:4b:4b:d1: 0d:cd:cd:ba:c6:35:3d:53:a0:69:c0:c7:63:ce:f3:7d:df:02: 76:46:db:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/88PZdgoO1TIeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MjljYzVmNmQtMDQwOC00YmIxLWI1NjUtYjUzNDRlYWJiOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdlTlmRL/dbGUE9SFxhonqPF515nDjEWGaIv qsyabH8H4CYF8K0SysFIcaN8n39mylJFIsjjz0rAc9q5MqSVtyHqDTP92acU/Gal FXRhp51QieH8RsueekGzlrhL+yMeUWxlfujbUdVljdSsmw4Dz1KYBu4wzlKUGCTs XxgjLXZKkHSK3EJQka4oG6Tepv8l4t60RaNCcR4eGILGWMMypVxqyIueLRIc+nlp tdId5ftwNSizquFXxqxPmmhz65HY87ZfY2k6jHrcTobqPu/gc6aoDQXYLJAV4Rrw LioQvkhOoH+YTV4GGczMX+aN1FLDPmH0BJK/4TTmnpxPl6xLkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATkU7qHBdcmuux0WjXpud2YuLroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTQwMTM1NzQtMzU4NC0z ZDEzLTg1NjEtYjE5MzVhNTIyOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgkMp11d7oRljqRI9oMOnjPLSQwIGqKKsqwoI7n0R7CXTgkrmSA7IQn 7vYfYL667N5hViLA6ZGka2YVeKSf854Pk4texzpNygwflsyKFH+p2Mnvx/D/pp4o 7PLob0c8g3XWmRlML/W6oPFxC8/ROajA8sLzle1VkVHznte2/PrpUMaFI97SmHEi kQXBXxZfqjy0b67HyJyPjNx5r3oD3H2wedEclTmcXachAJwPxhvYijT9exnlPhRk dIZ21IMJJsOdTI0nN+ddQlEU7fuyzTOnrLT7Bc1qcLAje/up0FUJ8SODCxPBSktL 0Q3NzbrGNT1ToGnAx2PO833fAnZG23Q= -----END CERTIFICATE-----Generated at Thu Mar 26 20:37:20 2026 by rpki-client