$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa File: f9dff4f6-56ef-3886-ada4-55552d4c1936.roa (raw, json) Hash identifier: 93++WTPB4KqyPz9PimIauIFSxh/lAcsSQnZPGWhPmWQ= Subject key identifier: F9:B8:FB:C1:9E:01:AA:DF:AE:07:F6:3C:B6:51:1F:1C:7F:67:8E:33 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00075DD9B819E696174840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 173.194.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:07:5d:d9:b8:19:e6:96:17:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=deb5810e-d795-4378-aad0-29207012b82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:a3:d3:28:4c:0b:06:8b:d9:f7:32:b1:09: 56:1a:ad:90:db:cc:02:55:5c:5d:88:3b:e6:d7:42: 33:15:bd:f4:3b:09:85:e0:cc:23:30:07:76:8c:80: c3:49:77:77:53:4f:96:00:85:68:b2:c7:7b:c1:5a: 97:de:25:f3:3b:76:79:80:86:25:25:f4:eb:a6:6e: 92:63:4a:72:66:0b:ea:db:5d:59:8d:fb:60:61:89: 21:1f:10:96:3f:d1:4c:be:e5:cf:0e:04:9d:c0:b2: 24:cd:b5:f1:09:11:d7:d2:c0:a0:f5:dd:99:db:29: 41:33:a9:7a:47:13:08:37:fc:8c:1e:3e:b0:bd:6a: 24:79:40:62:23:bb:aa:82:8d:ee:d8:d4:23:7b:5b: 3a:8d:5f:6a:b0:84:da:03:c8:b4:7a:78:23:9d:3d: 63:30:46:0f:db:b0:61:1d:d1:23:4e:6c:0a:94:06: ab:55:a7:84:3b:15:a1:9e:1c:95:c4:68:ad:84:d1: ef:b4:a0:44:fc:0c:d6:fb:72:93:ac:59:7e:46:1c: eb:bc:ea:0a:05:e5:09:d1:6b:22:94:26:38:ac:db: 2a:97:ec:f4:a4:a4:7c:25:7e:73:e4:80:97:bd:4e: a6:dd:42:9f:77:a0:e9:05:50:bf:5b:42:4a:5c:ef: 30:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B8:FB:C1:9E:01:AA:DF:AE:07:F6:3C:B6:51:1F:1C:7F:67:8E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:be:00:35:30:97:61:86:9c:f5:a2:dd:b4:d2:46:b7:04:db: d4:0f:59:a5:71:38:95:28:0d:9c:16:50:05:e9:57:f4:21:e2: 76:99:72:cf:3d:4c:2c:6f:66:1e:4b:9a:b0:54:ff:ce:91:43: fb:58:b2:3e:26:81:42:7f:7a:5a:dd:f7:e6:ea:5d:8b:87:59: 31:e4:e4:ca:bd:06:b8:27:3f:fa:6e:f7:84:15:8c:27:3e:d7: 76:04:19:cc:ab:c3:82:3f:b1:9b:a8:56:89:d2:d0:f3:c8:0f: 77:3b:f7:b7:79:17:a8:b7:2d:11:4a:d1:88:90:58:e0:c4:30: 13:71:af:6f:1a:59:a4:77:53:9b:3a:0b:05:1d:a7:7f:1e:2e: d9:1d:f2:94:1a:0f:d3:a0:d5:b6:79:9f:1b:31:78:96:73:ba: ad:25:ee:33:5a:68:39:82:d3:8e:cf:79:97:86:af:c1:48:70: 4d:e8:c2:fa:81:a8:e4:5b:22:e0:b2:8e:6c:9c:7b:b1:7c:0d: 5a:c8:75:18:fb:50:f0:05:67:93:36:bb:d5:f1:ab:9c:1f:bb: 04:af:a7:02:c8:23:a3:75:d0:37:5e:68:f7:e1:f5:21:fa:b6: 85:4b:71:93:13:67:44:61:2e:14:c9:88:84:80:f3:79:36:75: 7c:eb:53:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAdd2bgZ5pYXSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGViNTgxMGUtZDc5NS00Mzc4LWFhZDAtMjkyMDcwMTJiODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynSj0yhMCwaL2fcysQlWGq2Q28wCVVxdiDvm 10IzFb30OwmF4MwjMAd2jIDDSXd3U0+WAIVossd7wVqX3iXzO3Z5gIYlJfTrpm6S Y0pyZgvq211ZjftgYYkhHxCWP9FMvuXPDgSdwLIkzbXxCRHX0sCg9d2Z2ylBM6l6 RxMIN/yMHj6wvWokeUBiI7uqgo3u2NQje1s6jV9qsITaA8i0engjnT1jMEYP27Bh HdEjTmwKlAarVaeEOxWhnhyVxGithNHvtKBE/AzW+3KTrFl+RhzrvOoKBeUJ0Wsi lCY4rNsql+z0pKR8JX5z5ICXvU6m3UKfd6DpBVC/W0JKXO8wawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm4+8GeAarfrgf2PLZRHxx/Z44zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjlkZmY0ZjYtNTZlZi0z ODg2LWFkYTQtNTU1NTJkNGMxOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO+ADUwl2GGnPWi3bTSRrcE29QPWaVxOJUoDZwWUAXpV/Qh4naZcs89 TCxvZh5LmrBU/86RQ/tYsj4mgUJ/elrd9+bqXYuHWTHk5Mq9BrgnP/pu94QVjCc+ 13YEGcyrw4I/sZuoVonS0PPID3c797d5F6i3LRFK0YiQWODEMBNxr28aWaR3U5s6 CwUdp38eLtkd8pQaD9Og1bZ5nxsxeJZzuq0l7jNaaDmC047PeZeGr8FIcE3owvqB qORbIuCyjmyce7F8DVrIdRj7UPAFZ5M2u9Xxq5wfuwSvpwLII6N10DdeaPfh9SH6 toVLcZMTZ0RhLhTJiISA83k2dXzrU8w= -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:18 2026 by rpki-client